Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08032e54-8bac-3dc7-a02a-242753a12434.roa
File: 08032e54-8bac-3dc7-a02a-242753a12434.roa (raw, json)
Hash identifier: B4zgekmLdRa9+l9N3sE2zPZD2mYUZ9hEAOpV5bo0gCE=
Subject key identifier: F1:57:EE:A5:F2:51:18:A6:20:16:46:11:6A:68:8B:77:CE:D2:CA:D9
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858493243E8F7609BC11CF460912F
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08032e54-8bac-3dc7-a02a-242753a12434.roa
Signing time: Sat 15 Mar 2025 13:00:52 +0000
ROA not before: Sat 15 Mar 2025 13:00:52 +0000
ROA not after: Fri 13 Jun 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.71.128.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:32:43:e8:f7:60:9b:c1:1c:f4:60:91:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 15 13:00:52 2025 GMT
Not After : Jun 13 13:00:52 2025 GMT
Subject: CN=7abcd8d9-f9e9-45fe-80c2-ecf99b24a57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f7:2a:76:98:14:af:27:7e:b8:bf:31:9e:8c:
6e:31:4f:57:e4:6f:cb:42:f4:16:11:66:a3:c3:67:
de:85:2a:84:26:9b:29:a9:80:40:ac:21:ab:ca:e2:
1d:c1:23:5c:10:6a:f8:91:07:51:f7:50:e5:0f:32:
93:8f:d2:9d:23:d2:77:48:d2:78:0f:c2:44:89:1b:
3c:e3:a5:f9:67:f1:c6:ab:d1:27:87:f0:38:39:f8:
b5:0a:c7:73:39:7b:1c:09:1a:fc:5f:a2:8c:f0:10:
dc:ac:33:d5:d7:cd:a7:8a:25:60:a4:4e:d4:7c:21:
01:bd:45:fa:c7:0b:d7:31:9e:8e:3f:34:bc:24:89:
68:6c:fe:58:20:ca:35:20:1c:6a:c3:0d:d9:88:58:
29:e1:53:a4:0c:df:e4:36:78:0f:fb:e7:5f:55:9c:
d5:db:70:81:93:d5:e6:ce:9a:72:0a:e3:c3:ba:f7:
6a:53:36:e3:de:d4:a0:aa:ec:50:6a:be:3e:7a:5f:
fa:9d:39:b9:ea:76:19:fc:25:e5:d4:83:2c:63:d1:
0c:e6:88:9b:0c:b4:19:b0:94:2e:36:a2:d2:19:5b:
a4:a9:99:ef:e1:0d:a7:1d:4e:59:b5:42:d8:b5:1b:
2b:79:c9:2f:59:ba:72:51:29:c6:f0:5f:28:1e:bd:
9e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:57:EE:A5:F2:51:18:A6:20:16:46:11:6A:68:8B:77:CE:D2:CA:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08032e54-8bac-3dc7-a02a-242753a12434.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.71.128.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:0c:10:75:76:2d:b0:f7:3f:24:a5:88:6e:72:28:7e:47:a4:
6b:9e:22:47:aa:f9:18:e0:b4:e9:bf:eb:a6:7f:7c:1d:10:2c:
b4:b8:6b:f1:d3:9e:78:a8:1d:28:4e:c1:45:58:37:70:0b:69:
b8:82:de:62:75:80:a3:14:6a:cc:ff:0c:92:ef:d4:85:96:35:
ba:50:c6:c5:59:ce:d7:65:3f:ac:ab:cf:52:9d:49:4b:42:f6:
e7:13:ba:26:bf:db:c0:06:57:32:4e:90:c8:71:cd:06:01:d7:
31:cb:dc:ef:fd:8a:49:c8:74:71:03:ac:ae:67:ac:28:ef:0e:
ed:c5:a0:01:23:4f:97:94:bb:5a:f0:2e:56:d8:85:17:77:a4:
0f:f5:2a:ac:61:be:82:fa:15:14:da:59:8c:63:20:c1:c7:16:
a2:93:a2:43:40:fd:40:5a:53:cd:22:60:06:d5:91:32:43:06:
ba:8a:47:ad:ab:cd:f2:c4:d0:d5:1a:46:c8:96:f5:f5:53:26:
31:91:5e:f7:e4:f6:b7:b4:60:86:f5:5d:f1:0f:4d:35:8f:80:
68:c9:65:c1:a1:23:51:79:7e:64:f2:d8:2b:cc:6d:5c:61:36:
84:12:b3:1d:66:56:2a:2f:6e:c9:fa:48:9d:d9:b2:7b:bc:dc:
54:db:d5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:04:37 2025 by rpki-client