Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c20fe15-f035-3244-9b9b-b358a4cf1daf.roa
File: 6c20fe15-f035-3244-9b9b-b358a4cf1daf.roa (raw, json)
Hash identifier: ISo0iIouDlFgARw35Bzv/NLEuWFoU1C2xdm+eLwu9xo=
Subject key identifier: D7:39:B8:F3:15:9A:68:A2:DE:80:A9:22:BF:8D:DB:18:3B:06:A2:FC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849350EB8FF24188B4E8F508280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c20fe15-f035-3244-9b9b-b358a4cf1daf.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.96.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:b8:ff:24:18:8b:4e:8f:50:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=308c2253-34c6-40e3-b7c8-380d98f18a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6d:6b:6b:a8:9d:4f:93:16:d2:ce:8f:b8:05:
81:c4:33:bc:45:f7:fa:fa:7f:ba:f4:e5:94:65:48:
32:f1:2b:5c:ab:7a:d8:9a:19:69:c8:25:8a:28:32:
73:2e:96:bb:67:3f:72:c7:ee:9b:f1:3d:6a:f2:4d:
86:a7:08:35:e1:e6:c7:25:d2:89:32:55:86:26:08:
cc:fe:17:f0:48:b8:b3:43:3a:3d:07:6f:e0:78:ce:
2d:1d:ef:64:bd:a2:43:74:5e:22:c6:14:f9:82:28:
a1:16:68:16:85:54:b3:60:ce:db:b1:f8:e8:a2:eb:
c9:c5:29:14:5b:32:56:33:7d:01:d9:fc:53:4c:ef:
52:6f:c3:a9:f3:31:6d:45:33:17:8d:16:78:86:8a:
76:42:c8:58:eb:ca:55:96:12:36:81:8f:57:d3:7c:
c3:e1:18:06:28:67:65:12:17:47:79:57:d3:45:ee:
98:fa:06:de:1b:d4:92:d0:f7:8d:83:4b:5a:b8:fc:
32:63:c2:05:21:a8:81:47:b1:32:02:80:c9:bc:13:
38:ec:3f:2e:3c:ae:58:ee:76:4f:05:38:26:3b:4e:
85:f6:ef:c1:7c:e5:a1:df:e2:4e:12:95:bd:8b:c9:
88:10:2b:4f:53:2f:3e:d9:4f:3e:43:18:91:b6:96:
9a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:39:B8:F3:15:9A:68:A2:DE:80:A9:22:BF:8D:DB:18:3B:06:A2:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c20fe15-f035-3244-9b9b-b358a4cf1daf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.96.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:26:a4:e7:d9:83:ac:56:54:a0:d8:2a:c6:31:fb:1d:57:9e:
5f:4d:2b:be:5f:f0:8a:af:26:e9:fc:fa:1d:f3:ce:ca:48:bb:
c8:c6:c3:71:3a:b3:86:45:2f:de:b2:b9:f1:ba:7a:f0:56:0e:
05:c1:38:79:29:aa:f7:bd:44:ff:7d:7d:e1:98:6e:f1:10:9f:
d8:de:0f:f3:0b:cd:de:47:b9:e8:be:0e:53:a4:fa:c4:b9:66:
5a:04:fd:65:bc:13:64:38:76:39:fe:cc:9d:a5:4b:0f:46:90:
f6:77:5f:cd:fa:df:c7:66:49:7e:7e:6a:80:ff:e2:74:2b:c7:
d2:f3:0e:72:24:f9:c5:24:91:69:c7:81:58:8a:68:29:3e:45:
2b:06:af:f9:80:ec:78:39:11:f9:53:94:ee:95:9e:9e:1f:a7:
a6:50:9e:f1:49:fb:fc:79:b3:f5:2e:08:74:90:6b:eb:f4:55:
bb:b3:69:e3:41:dd:b7:cd:e8:56:75:95:c0:d6:8c:81:3b:b6:
3a:37:a1:36:d1:4a:55:44:58:47:c6:4b:7d:94:ee:a4:7b:0f:
cd:c8:15:33:c7:8d:5e:50:bc:ab:d3:6e:6a:5e:2a:2b:95:75:
5b:ae:dd:44:39:2f:04:9c:29:43:13:d6:68:99:0b:25:59:cc:
3e:ce:6c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:25 2025 by rpki-client