Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fd54f89d-3096-37b1-a16b-a8e94706013e.roa
File: fd54f89d-3096-37b1-a16b-a8e94706013e.roa (raw, json)
Hash identifier: yy5LxVdFo2cz02K9vExYeN5P9UZsWy90QWh0LhseZuE=
Subject key identifier: 69:40:71:22:F0:A1:64:D4:80:99:10:24:D5:8E:0E:8A:36:18:1C:90
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584855D5B9F8A02F5389B8D04E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fd54f89d-3096-37b1-a16b-a8e94706013e.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.103.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:b9:f8:a0:2f:53:89:b8:d0:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=47a15582-1ce3-4340-aba4-be114614f400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:76:2c:c0:eb:a5:88:74:1a:38:34:2a:d0:da:
63:5a:f9:09:a8:1a:ce:29:e4:b0:49:38:6f:45:50:
33:63:db:1f:21:02:fc:fd:cd:02:9e:85:17:21:58:
94:ba:c6:b2:0f:09:d2:7e:6d:a5:2c:b8:8a:ad:c0:
b8:67:e6:18:57:c4:1a:7c:de:62:e8:5d:3d:01:c1:
23:6c:9e:cb:72:01:64:ed:7e:9c:0b:b3:15:1d:88:
3e:52:16:bd:58:68:35:de:9f:aa:fd:3a:72:f4:23:
4a:3a:35:6a:dd:ac:51:78:3f:34:3f:1c:f6:23:c7:
f2:5f:d7:75:65:94:cc:17:b4:07:95:b3:b4:7c:12:
e0:1b:82:0b:d4:02:ea:1e:e8:dd:06:f5:32:c7:61:
59:bf:e9:0e:b3:25:c4:83:34:b4:8d:04:e2:8d:63:
71:62:07:cb:fd:34:8f:a1:2e:09:df:06:6a:b7:7c:
81:6e:2f:27:8b:72:89:4e:e4:76:fd:72:7d:5c:3b:
34:71:8c:97:11:83:57:c2:0f:95:b9:f5:f8:77:9f:
1a:6e:f0:93:ed:8f:bd:28:e9:cc:68:58:3e:f5:74:
3b:46:16:2d:58:7b:5e:2c:f7:56:46:f0:18:d1:7c:
75:61:52:8c:29:43:d6:48:d3:b9:9b:53:b3:ce:22:
1e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:40:71:22:F0:A1:64:D4:80:99:10:24:D5:8E:0E:8A:36:18:1C:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fd54f89d-3096-37b1-a16b-a8e94706013e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.103.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:c6:af:1c:d5:61:af:88:bc:b7:b0:06:5a:44:d5:d9:f5:0d:
f9:68:ed:54:da:e5:4f:c1:54:1c:70:15:ce:ca:2c:da:62:73:
05:12:b0:ef:f6:44:a6:46:5a:81:cf:0f:29:ad:ac:41:c3:69:
34:f8:08:98:e6:61:2a:6b:0a:1f:7f:a0:21:ce:c9:d3:f1:82:
20:a9:9c:f7:b8:b0:87:c1:1e:4f:f9:d9:bc:b8:8a:56:0a:18:
0d:a0:88:4a:cb:1b:5a:2b:72:ef:dd:40:30:62:9b:d9:2c:67:
13:fb:77:6e:35:5a:06:ba:0b:4f:84:2e:9e:8d:40:f2:e2:16:
ed:d8:73:09:45:3c:aa:db:7a:09:ac:f2:b3:85:01:14:12:67:
9c:df:e2:c4:6f:b7:18:eb:84:60:a1:3a:1f:7f:0e:a7:01:b7:
1c:89:c8:70:2e:c3:88:c1:2d:ae:47:c5:db:8d:ef:6d:8a:09:
49:c8:1f:73:de:4c:de:9a:ba:00:a3:9f:aa:2a:33:b0:94:0d:
ec:73:f9:6c:f9:e3:fd:bd:c3:22:57:34:9c:26:02:10:44:7d:
83:fb:af:68:75:51:ad:26:45:77:39:65:06:b8:b5:ca:5f:7f:
5d:5e:6a:5d:af:41:13:ff:bc:71:cf:77:3a:5e:cf:16:1c:17:
f9:90:48:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:47:32 2025 by rpki-client