Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49d29814-d109-355b-9890-c16ddcce635e.roa
File: 49d29814-d109-355b-9890-c16ddcce635e.roa (raw, json)
Hash identifier: evPGCxuizXWniF3H0fnqzccSMsQTNul5QlByfgD6B84=
Subject key identifier: AE:9F:6D:18:35:64:26:2F:B1:16:C6:F6:32:7A:C1:09:99:14:CE:57
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849350EC304E58DD8DCC5E3D700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49d29814-d109-355b-9890-c16ddcce635e.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.98.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:c3:04:e5:8d:d8:dc:c5:e3:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=a1280ba7-b0ba-4dd7-8a26-0d4964555815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:00:be:7d:18:03:58:9c:cb:80:7b:64:fc:ee:
74:4a:d8:4a:9f:70:c4:80:18:ab:82:ad:14:07:27:
c9:b4:17:9c:a9:71:4d:49:fd:14:f6:69:f4:b9:dd:
34:bd:f8:55:37:c1:48:a1:bb:c2:f6:4b:65:4d:3a:
52:68:8b:e3:99:7c:da:0f:d8:79:d8:dd:2d:60:3c:
8a:fa:7e:f0:3e:86:25:d3:1f:99:b3:c5:4b:4c:b5:
bb:48:e4:ff:33:2b:5d:d7:ce:e7:90:fa:de:dc:fd:
40:a0:35:41:46:07:1b:6a:dc:8f:11:3f:97:42:d5:
84:84:6f:30:96:6c:ff:69:ca:d7:23:72:02:1a:53:
a4:d6:99:7f:a9:ae:26:0f:bc:2b:7d:4a:5d:b4:77:
4f:c6:b4:89:64:64:71:50:e7:8f:a9:76:73:66:d1:
0a:07:2b:51:ff:94:73:46:a5:1f:10:fe:8f:a0:02:
57:2a:97:29:13:b3:7e:08:ff:e6:56:6b:de:f9:f7:
e3:7c:f5:17:29:9c:f1:3b:42:f7:90:3d:1a:1b:1d:
3c:5b:02:12:6c:56:87:cd:24:96:a1:08:36:00:ae:
5d:43:f1:b1:af:be:46:9e:5a:b4:1a:39:34:ea:05:
63:88:37:54:9c:12:ca:68:3f:96:61:82:62:3b:10:
dd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9F:6D:18:35:64:26:2F:B1:16:C6:F6:32:7A:C1:09:99:14:CE:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49d29814-d109-355b-9890-c16ddcce635e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.98.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:cc:42:e0:db:aa:38:bb:47:3a:04:7a:fa:ec:1b:45:ed:62:
5f:42:56:6a:f2:d6:20:7b:94:c9:d3:17:78:6a:08:e0:2a:0d:
30:4d:43:3e:bb:73:4d:a0:bb:02:8c:c8:ad:50:b3:ee:e2:a9:
f9:60:c8:74:5e:b8:c6:cd:67:f4:82:c0:95:31:72:46:9a:c0:
6f:06:48:e3:f5:80:a3:4e:e8:ac:6e:10:77:04:b8:50:76:c5:
24:4a:06:df:22:af:71:c6:8a:02:ee:94:29:2a:4a:87:c1:63:
55:d8:12:18:6a:03:f5:ad:f8:b0:70:96:f7:85:2f:2c:fc:47:
e7:b6:94:e1:54:e1:4c:26:b3:15:b1:02:aa:36:91:fe:cc:7c:
97:65:29:e8:8f:37:c1:c9:57:aa:78:b4:fd:d7:ea:3a:64:05:
de:4b:26:a5:de:a5:3b:93:60:0e:ae:29:98:05:ce:24:0b:b1:
a2:98:68:13:6d:65:00:2b:2c:b5:21:64:2e:c5:2a:1b:f0:6f:
42:83:5f:c4:20:0f:37:13:a4:8b:10:de:a9:35:03:17:18:69:
c9:5a:2e:7f:57:83:10:53:f9:31:df:fd:43:9c:9a:e9:fc:ed:
a9:31:20:08:06:90:51:b4:32:6b:0d:e9:58:9e:c1:b1:af:2b:
83:03:c7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:11:41 2025 by rpki-client