Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28f70bd5-f2ef-375b-880b-e7087a29e479.roa
File: 28f70bd5-f2ef-375b-880b-e7087a29e479.roa (raw, json)
Hash identifier: QfVSBDPjM+zZVQAnBD+owQxAEPGeeQxruqBB0voJxBs=
Subject key identifier: 77:E2:A0:C9:8B:10:77:7D:E4:0C:26:8C:BC:6D:EB:4C:18:E2:98:0E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849350EC463174D122E23D0EB00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28f70bd5-f2ef-375b-880b-e7087a29e479.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.102.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:c4:63:17:4d:12:2e:23:d0:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=9e1680fd-f8aa-4102-b904-cb7f5e144d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8b:e3:02:76:a3:6c:77:74:32:32:c0:4a:5b:
68:33:67:4a:b4:5c:13:ae:84:af:a2:8d:57:e0:37:
dc:8e:53:88:dc:d7:9a:99:41:8a:b6:46:41:81:dc:
6a:c4:9e:bf:87:8f:11:c6:dc:36:21:b7:6f:77:b7:
57:ad:bf:0f:0a:cc:d1:6e:c3:4a:5d:37:d3:20:78:
26:0c:19:6e:75:dd:67:ad:f1:e5:c2:9c:c1:b3:86:
66:16:ec:9a:83:5f:14:b7:7f:6a:dd:cb:1a:b0:96:
ff:50:57:9e:79:8f:be:b5:45:41:c3:92:85:64:57:
3b:34:b9:de:4d:43:c8:22:48:96:39:f9:bc:58:4c:
20:3f:3f:60:94:ef:ad:23:d1:4b:2d:3f:ee:b9:47:
03:ab:3f:2a:69:88:a6:e3:b1:68:ab:8c:b4:83:29:
d7:56:c4:f8:ce:ee:be:39:94:71:d8:5d:59:18:c2:
a2:8a:dd:4a:bf:e5:fb:41:b7:16:0b:2b:b9:55:ca:
22:6a:4e:86:5d:28:6f:4f:c6:01:55:34:15:f8:b0:
c5:30:b0:8a:c5:81:af:ee:97:aa:30:cb:9b:27:f7:
59:9e:da:8d:f8:d9:cb:6a:77:c7:85:61:62:fe:8a:
fa:77:c7:73:2d:c2:c6:ef:0d:36:f2:03:1c:d2:2e:
f2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E2:A0:C9:8B:10:77:7D:E4:0C:26:8C:BC:6D:EB:4C:18:E2:98:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28f70bd5-f2ef-375b-880b-e7087a29e479.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.102.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:4d:e7:73:79:69:da:57:81:43:4a:70:dc:73:59:e2:52:b1:
71:74:ec:10:62:0e:d1:41:47:67:c4:e8:8c:a7:48:d9:7d:86:
1d:66:46:e9:f1:75:dd:cb:d6:e9:2d:f7:6e:65:61:40:8f:07:
cf:f6:54:a8:2a:36:29:9e:78:67:2c:85:56:0d:8b:90:a6:73:
f1:19:ba:2d:23:cf:4a:9f:fd:bf:d5:93:cb:cf:ad:89:2d:69:
37:ac:6d:0c:09:ac:f4:1a:6d:93:78:e7:64:b1:38:ae:f6:6e:
08:9e:7c:40:6c:37:9b:46:1a:66:61:c1:44:03:96:fc:6d:78:
d5:76:0c:27:5f:96:85:bb:3b:bc:7a:59:18:c2:b7:e4:b5:7a:
6e:80:78:df:1f:6c:77:6f:13:6f:cd:7f:9c:0b:17:6a:3f:ff:
cf:58:6a:db:04:ed:a0:6b:ca:79:9c:fd:ab:6f:31:f2:40:81:
59:73:ea:ba:a2:7c:f9:5a:9d:85:e4:f5:89:f8:de:2f:88:8e:
80:87:4f:78:26:1d:04:47:64:f2:34:d3:e4:d9:9f:19:fa:ec:
51:d3:59:63:4c:06:3b:74:9e:a3:cd:6a:c1:c9:6c:b1:0b:55:
55:4b:98:07:2a:14:4c:d1:88:57:f6:7d:31:12:c9:c6:21:f5:
ba:e7:7b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:51 2025 by rpki-client