Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5df21498-2b3d-333a-bd13-cf0535030284.roa
File: 5df21498-2b3d-333a-bd13-cf0535030284.roa (raw, json)
Hash identifier: a505AAL+vQeo+dggCEsuB9ChmK+A8CLT0LUrxZkI7Bk=
Subject key identifier: 62:2D:83:A1:E5:37:7B:18:AA:6E:EE:B5:23:00:CC:01:8E:4D:F5:E0
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584902EC26AE98570C42B0A42800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5df21498-2b3d-333a-bd13-cf0535030284.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 35994
IP address blocks: 104.100.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:26:ae:98:57:0c:42:b0:a4:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=55e77be8-439a-4a13-bbc6-dbca8f22adea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:af:ef:28:8f:2f:78:cf:4d:cf:28:2d:79:c2:
98:ed:24:1a:09:96:23:ba:ba:f5:e7:19:8a:d6:f8:
ca:97:15:3b:85:5b:a6:25:ef:94:14:45:90:c5:a5:
e5:a4:f3:40:4d:ec:57:80:e1:ac:b7:60:d5:dc:e1:
48:da:14:13:c6:38:10:81:e4:56:12:6e:14:06:c3:
86:2c:a0:c3:1f:aa:f2:2f:f9:88:cd:d6:59:93:dc:
f6:db:15:21:dc:9c:51:8f:94:13:5b:17:1e:b6:b1:
74:12:5e:ff:1e:1b:11:ca:20:8a:ac:e3:e2:27:42:
2c:58:fb:17:4f:4b:0d:c1:41:6e:27:e7:8c:f5:05:
c3:2e:a3:32:1f:fc:e4:bf:48:54:1e:b4:5e:08:78:
8e:e9:ca:f3:50:a1:e6:e3:3a:a3:91:bb:9a:07:f9:
7a:74:2d:ac:7e:f8:d9:7d:89:ca:b0:ff:ac:1d:24:
1b:26:57:8d:4d:44:da:32:d3:e9:3f:25:02:4c:3f:
17:31:be:3f:0d:d6:db:4a:08:31:ad:8a:66:7c:b0:
04:d7:db:e6:c2:59:bc:c4:26:5b:5d:5c:2b:20:ad:
fc:5d:23:4e:69:45:89:76:a6:db:87:09:9b:80:73:
1b:33:36:ed:3d:53:7e:bf:0f:76:5f:a5:cf:23:76:
aa:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2D:83:A1:E5:37:7B:18:AA:6E:EE:B5:23:00:CC:01:8E:4D:F5:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5df21498-2b3d-333a-bd13-cf0535030284.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.100.164.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:90:cf:72:ab:9f:52:b4:bc:5b:63:77:ec:35:41:c1:4e:af:
59:c2:aa:89:87:81:03:e1:82:90:b4:ec:1e:ef:cd:54:19:50:
c8:a7:79:27:46:f6:35:89:ee:5d:6e:8a:ea:4b:9a:46:1f:86:
0f:02:d2:22:91:6c:79:92:fc:0f:d3:5e:8e:92:9d:64:5f:77:
7c:4f:21:b0:38:b5:40:6a:bb:19:b4:7f:dc:1a:08:4a:26:49:
86:a9:80:45:4f:d5:ac:46:01:2c:fd:ae:11:eb:4e:db:4c:9e:
29:6c:15:91:bf:09:4e:d3:ac:e7:c2:ff:bf:ff:31:20:65:59:
c9:13:64:e3:74:e3:97:10:ff:30:16:b0:bf:ee:c8:06:f2:a7:
e3:ed:3b:fb:5f:ad:a9:43:a5:1b:34:3f:50:56:03:19:9e:49:
30:0b:27:80:f4:9d:cc:0f:fd:21:ed:cb:6e:5e:45:e4:24:27:
b0:5e:bf:81:91:7d:44:d1:00:16:1a:00:97:e5:0f:fb:4d:58:
53:40:3b:d1:d4:26:98:db:1d:4e:4c:2b:67:92:27:83:4b:a9:
f0:be:e9:b5:22:f9:1b:72:ae:cb:61:e9:35:02:a0:97:ae:a1:
a8:5c:a4:7c:49:a2:f4:e5:06:2b:f6:7d:80:4e:c6:78:9b:c4:
46:00:09:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:32 2025 by rpki-client