Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b928e73-0d6d-3bbc-b007-30232568a073.roa
File: 4b928e73-0d6d-3bbc-b007-30232568a073.roa (raw, json)
Hash identifier: n5CqCDCkf6bqd1UPigDjt9HPPcz1nDXHY3D6+mgBpsE=
Subject key identifier: 27:A9:EF:5F:23:A4:79:49:1C:3E:8C:A5:A7:BE:3E:ED:B1:2F:32:83
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858493243F7B24372F81593CD7DC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b928e73-0d6d-3bbc-b007-30232568a073.roa
Signing time: Sat 15 Mar 2025 13:00:52 +0000
ROA not before: Sat 15 Mar 2025 13:00:52 +0000
ROA not after: Fri 13 Jun 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.66.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:32:43:f7:b2:43:72:f8:15:93:cd:7d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 15 13:00:52 2025 GMT
Not After : Jun 13 13:00:52 2025 GMT
Subject: CN=62527580-5c64-41d4-9c27-72a36769cf8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:80:b7:34:3f:a0:f9:04:96:39:72:18:39:92:
35:17:4e:fd:6e:18:3a:f2:cf:70:a3:a5:7c:1f:a9:
43:e2:64:17:bd:35:26:9b:95:f2:0e:db:01:c1:8b:
dd:d7:62:3a:17:84:17:d0:5a:0e:12:94:db:1b:ee:
1c:4b:ac:ef:ad:7e:d6:dc:70:8e:66:cd:7f:f0:a5:
e0:8b:f7:2b:03:30:dd:48:37:2b:e6:ba:4e:9e:0d:
f1:64:3f:dd:34:7f:d9:6e:c1:53:d7:da:8d:92:7d:
82:6e:91:8b:4a:d9:fa:a0:2c:e3:69:b0:49:d2:ef:
31:25:f5:1e:33:15:7b:52:ce:dc:7b:ae:c9:57:6d:
f8:4d:a2:5b:7f:5f:bb:93:7d:ed:b1:c4:c8:cf:9a:
32:30:d6:c4:e1:36:ae:e7:30:b0:e1:cc:51:96:e3:
e8:cb:fd:f8:3b:d1:60:e6:29:9e:3a:b7:85:e5:cf:
5e:8f:4f:06:5b:03:e6:4f:1e:fe:85:78:e5:37:6f:
1c:62:1a:da:84:a5:a9:4f:6f:c7:85:39:e1:95:0b:
3f:d5:de:01:39:fe:ef:bb:45:51:24:46:f3:a7:b7:
45:e2:c0:35:ad:ef:c9:b1:d2:e8:27:98:b9:3d:95:
d3:d8:a3:48:75:a0:fe:69:09:a4:f1:78:48:64:79:
db:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A9:EF:5F:23:A4:79:49:1C:3E:8C:A5:A7:BE:3E:ED:B1:2F:32:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b928e73-0d6d-3bbc-b007-30232568a073.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.66.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:3d:f9:60:09:1b:fa:05:ed:0b:e4:c0:95:fa:42:cd:6f:b1:
8e:96:c8:3d:81:d0:e3:c7:a1:2b:7e:c0:04:0f:ce:e7:3d:56:
fc:fc:4a:59:d3:db:11:83:1d:01:7e:d6:29:48:b8:e1:fa:18:
d3:60:50:91:e5:cd:8b:6f:0a:0e:5e:8c:e8:a3:5c:49:9b:18:
cb:be:3a:62:a7:b0:ef:34:d9:80:80:51:27:ed:a6:b0:40:3e:
de:60:ca:1c:f3:34:4a:b6:fb:3f:a5:ae:cc:3e:9d:58:b1:4c:
2c:8a:83:c6:46:a5:83:50:58:3d:e2:05:ce:da:ca:7f:9a:3a:
a8:c3:83:1b:3b:53:d0:77:36:32:db:e7:a6:d2:14:7b:bb:8f:
52:ac:21:5b:81:0a:5f:8b:1c:fc:35:9c:9d:fd:f6:a1:95:6d:
84:d4:02:8d:d7:0e:dc:c5:30:86:56:a1:5b:7f:57:c7:00:26:
f8:fe:27:b0:05:d6:9a:87:ab:75:32:a2:a0:aa:00:b9:a3:8a:
9a:7c:5c:c4:a2:44:4d:36:6f:81:e8:4e:2e:ab:79:a1:d2:bb:
9c:b5:b9:4a:c8:fd:f0:04:b8:7b:22:61:f7:c6:60:5f:30:64:
36:ec:57:10:17:d7:e9:c4:23:e0:84:9e:db:54:84:08:37:f7:
b2:ab:22:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:58 2025 by rpki-client