Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9527be8-b11a-3d75-9a5a-a8336f5a108c.roa
File: f9527be8-b11a-3d75-9a5a-a8336f5a108c.roa (raw, json)
Hash identifier: 6evKB44YpZhBZuIFAguMEwCtnYsh7rJtI2gnsWNgIHI=
Subject key identifier: EC:79:65:31:FD:25:DD:75:A1:66:FC:24:C7:0C:16:4D:71:14:AA:2F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584858A066BB12F9A7F6F6EA0080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9527be8-b11a-3d75-9a5a-a8336f5a108c.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.117.184.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:66:bb:12:f9:a7:f6:f6:ea:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=313ec689-38b2-4fd2-b20e-377053ba8cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b1:19:45:78:3f:d8:d0:6e:e9:a9:e0:b7:31:
c6:20:fd:ed:4e:2b:7e:6a:fa:cb:cd:a3:e7:1a:af:
e3:32:9f:1e:86:cf:b9:57:e9:9d:30:ad:9d:0e:28:
48:9b:1d:c9:c4:68:95:31:bc:a7:27:05:86:17:d7:
cd:44:6e:fa:f9:e0:ac:22:3a:94:bc:93:d5:60:97:
48:b4:8e:be:3f:d7:7e:d1:91:89:62:bf:c5:1f:e4:
8b:91:87:9d:c6:73:b8:2d:87:27:c8:30:8c:72:dc:
a0:ab:bf:df:0f:b3:b2:12:b0:4d:ae:18:b5:00:4e:
0b:07:d1:e5:86:f6:8f:cd:df:4c:87:c0:9b:d9:43:
9b:45:62:53:a5:e2:2d:23:c2:0a:77:4f:81:57:3f:
92:53:2e:a9:8d:b5:1a:b7:b8:84:af:54:d2:d9:38:
f3:4b:a0:8e:7d:bb:06:ed:92:d0:e0:66:fa:a3:cb:
4c:42:26:8b:5e:e8:bb:63:17:a2:61:3f:a3:d2:ae:
7c:bb:b1:0a:14:63:97:9e:49:2a:06:b3:6e:08:f2:
b6:08:6c:c7:8a:e6:f6:3c:cc:ab:1c:3d:0b:dc:17:
cc:7f:c4:84:9e:a7:ae:f7:20:5e:30:bf:b1:54:76:
96:3b:39:6b:6a:0a:36:ac:0c:d3:ab:36:50:4c:b6:
9a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:79:65:31:FD:25:DD:75:A1:66:FC:24:C7:0C:16:4D:71:14:AA:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9527be8-b11a-3d75-9a5a-a8336f5a108c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.117.184.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:9f:94:86:2e:40:14:6f:7e:8d:b3:08:e9:a6:69:68:06:23:
15:01:2b:e2:4b:f5:64:b5:0d:64:75:df:52:2a:da:7a:fe:30:
7b:8f:00:1b:67:f2:ae:37:62:8e:3a:f8:35:09:af:ff:dd:41:
98:9c:11:e2:c5:6a:ec:93:b7:47:9e:a5:27:bf:51:a6:63:63:
cb:c4:71:1e:75:2b:24:fd:71:ca:cc:2e:f5:d9:56:36:9e:2d:
a2:94:33:ca:d9:32:bf:ed:2d:f6:93:3d:32:ca:34:fb:95:50:
33:cf:69:70:db:af:4f:ae:fb:66:c4:48:d7:ab:a0:33:05:50:
db:08:d0:86:37:cc:d6:3d:52:7c:93:47:b2:5e:0e:4e:f6:aa:
d1:af:85:4a:e3:45:0a:79:4a:e7:6c:bc:b4:55:b2:98:ff:c3:
a7:71:7d:36:6d:61:7f:23:84:e0:fb:b6:0a:4b:65:ce:e6:5a:
1a:df:05:7e:d9:c3:c6:1b:6a:ec:5b:b4:d8:9b:d8:2d:89:dc:
25:16:22:e2:29:f8:1e:8d:65:e6:fa:55:55:48:1a:d6:e9:c7:
06:08:74:9c:92:80:b8:f8:f1:96:9e:04:0e:26:c4:f4:d6:ee:
a7:2b:27:44:04:31:cf:8d:3f:ef:ab:e1:b7:d1:b0:d7:9a:37:
e2:4f:31:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:21:23 2025 by rpki-client