Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/96483fe1-f562-33f2-956f-2a0d470c260c.roa
File: 96483fe1-f562-33f2-956f-2a0d470c260c.roa (raw, json)
Hash identifier: Jilf3q/8mpnLeVjq+MW5+nHJ67R/CUXcQDgb3I3tefE=
Subject key identifier: D6:10:1C:90:68:F9:E5:FA:CC:65:7E:04:49:8D:5E:B1:EF:03:7C:80
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584937D941BB62A427646BBFE120
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/96483fe1-f562-33f2-956f-2a0d470c260c.roa
Signing time: Mon 17 Mar 2025 13:00:52 +0000
ROA not before: Mon 17 Mar 2025 13:00:52 +0000
ROA not after: Sun 15 Jun 2025 13:00:52 +0000
asID: 9498
IP address blocks: 104.108.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:37:d9:41:bb:62:a4:27:64:6b:bf:e1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 17 13:00:52 2025 GMT
Not After : Jun 15 13:00:52 2025 GMT
Subject: CN=293a04e0-3941-401c-b70e-ce0006e93b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:27:78:a3:71:0a:8d:a6:db:8f:e4:ec:38:8f:
42:a0:0e:a4:46:bc:2e:a8:5f:0d:58:84:a3:3e:43:
00:c5:ea:d4:b1:2c:1f:f6:db:f6:d8:96:4b:98:c1:
2d:7a:17:0f:99:71:47:8d:c6:e9:b1:52:a0:8f:df:
25:69:b8:9d:fe:ee:36:0b:46:f6:89:7c:9c:1a:17:
69:d0:20:c8:1b:34:e1:d6:b1:00:65:74:21:0d:ee:
48:43:be:68:90:88:94:1f:70:c0:2a:ed:8f:18:cb:
f5:d3:43:97:ba:90:8c:b5:26:ea:b1:fa:a1:6a:42:
0e:cd:99:84:03:9d:25:74:98:c7:12:06:56:78:bc:
0f:85:2c:7e:13:7a:2c:73:db:4a:f6:c4:47:c2:16:
76:ce:87:f8:8a:bf:bd:70:7b:77:22:20:1d:65:1a:
cf:53:99:86:2a:4d:7e:d7:f3:e0:ff:6b:ee:4f:70:
b5:d1:f7:79:fd:44:85:3c:1b:35:62:5b:e7:a9:ca:
06:4b:e2:46:6d:e8:66:26:ce:f6:bd:80:7c:3b:9e:
47:31:c0:28:99:c0:72:62:ee:a9:77:bb:bd:e1:74:
a1:f3:31:d1:d8:ec:ad:a4:51:15:ea:36:f6:a7:33:
af:ed:a5:8a:ba:f1:e2:44:a5:eb:e3:cd:2f:3e:94:
6b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:10:1C:90:68:F9:E5:FA:CC:65:7E:04:49:8D:5E:B1:EF:03:7C:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/96483fe1-f562-33f2-956f-2a0d470c260c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.108.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:1c:06:86:da:c3:a5:c9:c1:e4:53:80:e8:65:70:a9:0c:1d:
5c:3a:4a:3d:74:09:7e:f6:85:74:a4:81:07:6b:f4:15:c4:aa:
c7:5d:b5:bd:67:b2:58:de:c6:de:15:1b:26:cb:c4:98:8a:c1:
03:4c:e7:a5:09:c4:a5:34:d9:fe:99:12:b9:43:5e:09:1d:aa:
c7:f6:40:e3:86:ce:23:08:d0:dd:18:c2:de:4a:9e:b9:36:3b:
76:f9:43:c3:a4:05:86:ac:85:e1:25:ff:62:5e:b8:0e:e4:dd:
ce:1c:6c:29:58:05:05:c1:bf:14:c1:a8:f4:30:20:3d:2f:3c:
ab:6c:01:27:5c:f9:12:1a:03:d1:33:0f:08:bf:62:ea:e1:77:
05:04:0d:6d:15:c1:a1:e0:92:95:e4:a9:03:39:f2:01:6b:c3:
32:8d:f6:4e:93:93:d0:c9:5c:2a:ee:75:b9:cd:12:65:3b:ce:
c8:7a:01:ad:6f:08:35:55:e8:38:6e:90:ca:ff:13:f6:a1:52:
44:43:3b:a0:a6:ed:ff:80:a7:e3:cb:86:08:52:a4:44:95:2d:
25:b3:d5:d4:4f:70:37:52:3f:8e:40:ab:68:a0:34:03:d2:e0:
27:45:f3:07:58:a3:63:fa:30:77:49:52:4c:83:31:ae:05:47:
f4:4e:ab:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:33:52 2025 by rpki-client