Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3489639c-5412-3ed7-913f-78c141cc1600.roa
File: 3489639c-5412-3ed7-913f-78c141cc1600.roa (raw, json)
Hash identifier: +YPWwZixjwstxGhIjW5r0kP38y0u/5mN6WUMR6es0xM=
Subject key identifier: DA:22:CC:61:E4:C8:94:05:59:72:D7:9C:08:2C:6F:37:EC:59:8D:3A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849393E8B3C6C18CFAE4EB2A780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3489639c-5412-3ed7-913f-78c141cc1600.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 24319
IP address blocks: 104.125.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:8b:3c:6c:18:cf:ae:4e:b2:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=33539515-d956-4a7c-b1bf-7b394e334009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d5:18:ae:51:b5:2e:8c:c5:8e:8d:b9:e7:29:
6d:84:e3:06:71:a7:15:4d:22:f2:b4:8d:17:80:a8:
2a:74:20:4e:2b:eb:8f:a1:7a:20:df:2f:f9:58:8b:
de:a8:cf:43:73:39:d3:31:aa:a8:c5:25:3b:2c:cb:
2b:34:4f:7a:11:c4:52:c1:04:2a:99:57:cd:81:e3:
46:b1:c7:87:c0:e6:b8:8d:b1:c0:03:c5:60:77:0e:
fc:9c:3f:34:86:50:d3:2c:e2:7b:77:b9:a0:e9:1c:
ac:11:2c:b0:ab:7b:cb:71:46:7f:53:94:18:ec:6f:
e0:0d:19:cc:59:70:7d:24:c3:78:41:4a:62:e2:0e:
b8:33:69:50:90:3e:41:94:29:c8:b2:81:3d:5f:cc:
15:d0:a4:d3:ef:4b:1e:ab:4c:30:c6:41:df:62:a8:
99:c4:b2:19:d2:10:a9:13:9d:56:bd:1f:b1:1c:31:
31:40:de:6d:98:89:a1:2f:4e:c6:9b:3c:76:cf:ca:
3b:37:ff:4d:ef:bf:9d:c9:6a:9b:35:0c:9f:3d:8f:
4e:b7:6b:b6:94:f7:b6:1f:86:a3:dc:ac:9b:0c:25:
45:6d:5d:2e:2c:78:81:e9:a8:09:64:18:67:c4:bf:
51:26:60:34:57:b3:7e:3b:9f:23:4a:77:91:d4:88:
7f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:22:CC:61:E4:C8:94:05:59:72:D7:9C:08:2C:6F:37:EC:59:8D:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3489639c-5412-3ed7-913f-78c141cc1600.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.125.15.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:d7:e0:1a:9e:02:ef:e2:20:47:7c:4c:41:62:6d:87:df:e9:
7a:3a:87:a8:cd:1e:78:d7:31:65:ad:b5:45:05:17:ff:15:69:
2b:b8:26:fc:26:77:d2:94:ae:3d:5f:1b:6f:c3:3b:2d:52:b0:
92:01:80:08:0f:43:fc:ed:e5:71:d8:2d:bb:f9:1e:40:72:7d:
0f:28:9c:b9:a6:00:31:6f:45:2d:5a:2e:8e:f2:d1:1e:9b:9b:
ca:e9:60:4c:f1:de:59:22:98:54:c4:fb:85:c6:84:4d:fb:7c:
60:de:0e:1a:8e:56:e7:56:fd:81:36:65:a7:40:fd:53:24:01:
a0:17:34:ec:a9:8b:42:e2:d6:6f:2d:a3:e6:cd:24:92:49:93:
1a:e0:51:85:e8:7c:56:da:25:51:c2:ca:29:ea:cd:48:e5:1b:
e9:ff:ea:51:1f:4d:df:2b:ff:51:32:91:04:53:74:92:ca:1d:
8f:aa:ef:df:6e:a0:f3:1f:07:43:04:33:b8:75:fb:9c:12:50:
25:9e:fb:00:47:78:c0:e0:b7:f9:df:84:73:2e:c8:6d:ea:c9:
89:64:e6:c0:6a:40:e8:15:47:e2:e1:a3:59:3a:1e:e2:dc:01:
98:3a:c6:44:30:6f:fd:d2:e0:e0:32:70:a3:eb:8f:16:f9:e3:
83:cf:13:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:07:05 2025 by rpki-client