Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/039fd28c-4707-3b52-98d5-0ddcc86648ca.roa
File: 039fd28c-4707-3b52-98d5-0ddcc86648ca.roa (raw, json)
Hash identifier: jNLag6Idbr0new7MSrlQpgq0/2cC71ZCXdkjF5QUZgo=
Subject key identifier: E7:1A:31:E4:29:F1:47:67:E7:1E:DE:14:7F:6A:11:56:49:80:C1:C3
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849088165EA79BD6AA9BA3EB140
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/039fd28c-4707-3b52-98d5-0ddcc86648ca.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 24319
IP address blocks: 104.96.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:65:ea:79:bd:6a:a9:ba:3e:b1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=123af355-88f5-47a5-9ac0-a5879fe26f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:df:58:5b:36:61:20:8f:3e:80:dd:91:e7:bb:
7d:78:bc:8a:d7:02:33:96:d3:03:08:4c:03:98:9e:
04:8c:53:f7:30:c7:d1:0e:8c:64:bb:56:8d:cb:a3:
fa:5a:9d:23:18:90:57:59:e4:59:50:a2:36:2e:52:
00:50:98:f4:27:db:9a:ac:7f:d0:5d:5f:ef:f8:d9:
67:aa:79:10:80:96:6a:92:90:1f:e6:20:44:e5:66:
bb:90:30:ae:88:13:c4:1a:2b:b8:42:d6:87:ed:76:
12:e5:e8:01:3b:c2:a0:bd:87:61:bc:24:d6:a8:28:
f8:70:d5:ed:1b:69:07:b4:1d:33:f5:b0:a8:2b:7b:
34:4e:82:b0:ca:94:29:02:f2:26:9c:06:91:3f:24:
d6:8a:b6:c0:48:d4:4a:f9:c7:1f:f3:94:cc:13:e2:
e2:63:44:84:e4:5f:4f:e4:a9:51:2a:5d:61:f5:9c:
3c:fa:52:b2:d2:6f:54:da:dd:be:b8:b3:9b:df:9d:
17:51:e1:8e:29:35:3d:06:dd:bd:b4:29:96:bf:ee:
18:30:4d:9b:87:a1:41:b4:94:50:15:95:b0:3e:16:
80:27:1b:48:45:0d:e4:35:31:f6:14:9a:d9:07:23:
7b:4a:a4:be:c3:00:96:2d:51:d7:09:80:50:08:e8:
c2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1A:31:E4:29:F1:47:67:E7:1E:DE:14:7F:6A:11:56:49:80:C1:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/039fd28c-4707-3b52-98d5-0ddcc86648ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.96.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:cb:1c:f6:e8:60:28:74:64:4c:c7:a4:10:f0:49:d0:c5:ae:
55:56:de:cd:be:52:3e:ec:4e:1d:f2:a4:71:94:ee:0d:3e:27:
ba:92:39:38:14:3b:04:51:11:92:d2:75:7b:95:13:06:55:97:
ed:9c:98:6c:d1:8b:e5:74:99:fa:72:c8:7a:f6:02:32:50:23:
27:5e:e4:74:0b:06:cf:d3:c0:2e:11:41:3e:6a:18:06:45:67:
b0:34:fa:95:e2:28:1e:93:e4:cf:f1:0f:ed:e3:0a:56:78:18:
bc:3c:4b:c4:62:51:07:22:f2:53:af:f1:e6:1d:90:64:c8:be:
9e:9f:50:a3:13:84:87:f1:2a:96:15:8c:66:26:c0:60:44:6b:
46:d8:7a:18:ea:53:15:60:09:20:ea:c9:ac:4e:a2:aa:45:42:
ae:16:d2:e1:02:ab:f5:c5:83:cb:0a:85:6f:21:21:e4:d3:37:
67:39:c8:e0:48:e4:7b:60:05:49:6d:59:e3:a4:ab:f3:82:74:
00:18:84:30:b7:96:3b:50:3d:e6:0d:f7:13:5b:9d:ce:ae:e3:
f1:80:d1:48:f3:0d:de:3a:d0:bd:14:ce:56:3e:25:e6:92:8c:
f2:eb:dc:12:74:3a:8e:00:0a:35:8a:0b:f2:4e:bb:41:4b:0f:
56:9a:3f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:04:51 2025 by rpki-client