Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/51494874-b355-33ae-99ac-2dceab2bba37.roa
File: 51494874-b355-33ae-99ac-2dceab2bba37.roa (raw, json)
Hash identifier: HcX2cZjcEpqlzfXLlL0Nhn4F/MFYagPh3sEdiWSxTKc=
Subject key identifier: 57:B0:C2:7A:34:C3:20:33:6A:7D:FC:35:4D:88:05:B8:66:22:FB:45
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849350EB5F30D8282D4270A5FC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/51494874-b355-33ae-99ac-2dceab2bba37.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.88.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:b5:f3:0d:82:82:d4:27:0a:5f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=b664dec6-1e4b-47ac-82d5-b1a1706f739c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:dc:5c:a8:25:e4:4f:bb:8d:95:3d:29:b2:de:
c4:67:c4:08:4f:d1:b3:6f:ae:1d:b3:ed:15:46:b0:
e9:51:4e:48:62:b8:59:5c:bd:fd:c6:ee:c6:99:28:
1e:19:2e:47:46:c4:0e:bd:f3:68:a4:32:38:c3:b1:
88:f9:6a:50:11:bf:f2:37:64:2a:16:b5:c7:6d:82:
f5:1b:6f:43:90:eb:71:6f:35:51:db:95:a5:64:c9:
2c:10:84:31:3e:88:fe:3f:99:1c:54:c2:fa:bc:41:
a9:fe:52:e6:33:96:ba:a1:fb:59:5a:b4:3e:db:91:
e2:fc:b0:2b:40:36:73:75:d3:0c:67:fe:94:d1:b2:
0c:57:6f:87:ba:2b:f8:9e:45:69:28:b3:7e:6e:c4:
1c:bd:b3:d2:2c:d8:6a:ad:1d:6e:a5:0a:c7:65:76:
2f:d6:14:19:47:bf:f1:68:43:b7:5e:b1:2f:a5:09:
d9:9b:00:4e:4b:23:dc:aa:60:fd:b4:6e:cc:a6:40:
32:1a:f0:3b:76:28:a7:69:a6:9b:b0:b2:79:d0:0d:
dc:a6:50:72:84:ff:80:13:3c:bf:4a:e7:47:5f:31:
00:56:f1:72:22:d8:ca:13:03:cf:8e:24:d7:82:d7:
da:a7:5c:01:2a:07:38:7d:20:7c:af:97:80:aa:6e:
9a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B0:C2:7A:34:C3:20:33:6A:7D:FC:35:4D:88:05:B8:66:22:FB:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/51494874-b355-33ae-99ac-2dceab2bba37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.88.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:1e:60:06:a1:c0:75:6c:af:04:57:e7:49:c9:67:d6:5b:fd:
3a:8e:c2:96:28:7b:73:01:0a:ef:23:30:c1:ee:d9:d3:9e:84:
7c:08:20:30:c6:92:93:4d:b4:0d:a3:ed:b9:29:a8:7a:d4:61:
80:83:ef:2f:2c:2d:72:c1:4d:77:88:8c:da:ca:77:dd:e7:6b:
e2:30:0f:31:68:dd:bf:63:c7:42:ce:66:68:e7:57:76:78:8f:
78:f0:95:db:10:71:ce:10:59:b3:5b:6b:87:e4:5c:79:70:f2:
51:b6:a5:5a:21:77:e6:8d:04:35:bb:80:55:52:ef:e8:60:50:
17:80:77:bc:b2:32:ea:e0:6b:2c:05:c3:79:1d:4b:a8:33:70:
35:04:38:9e:30:7f:15:91:f5:f8:e8:03:0e:3a:35:f1:10:46:
c0:0f:b0:ef:a0:73:f4:66:ca:33:87:7e:99:5d:f4:48:02:26:
a5:46:03:42:6e:9a:41:5f:97:93:34:17:bf:2e:59:a3:84:5d:
e9:ec:86:74:6c:b3:ea:09:f5:1f:57:e4:88:05:62:9f:90:c2:
63:d9:a0:c0:37:ad:44:ab:92:1a:ad:84:f8:45:e4:cc:0d:f6:
da:a9:99:2e:a1:a3:54:89:51:2b:16:b2:69:ff:8e:e4:ef:93:
6d:1b:71:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:47:05 2025 by rpki-client