Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8105d741-c1f2-3969-8303-f231201524bd.roa
File: 8105d741-c1f2-3969-8303-f231201524bd.roa (raw, json)
Hash identifier: 0e7fi5+bENv+sgR9IaW3YFhCc/3z1gEW1dnRidRFQBQ=
Subject key identifier: 30:D8:39:4F:0D:6B:01:6B:2C:C3:31:20:03:88:CD:4F:A3:35:DD:D6
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849350EB5C61202E0C5BF756000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8105d741-c1f2-3969-8303-f231201524bd.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.88.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:b5:c6:12:02:e0:c5:bf:75:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=a45342ab-2655-4133-a3ff-5280cda3898b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ec:9a:70:0d:61:d4:d2:41:a2:62:0f:5e:e2:
b1:c2:83:b3:ec:17:dc:a0:2a:71:cd:87:8b:10:55:
dd:d0:07:58:f2:66:0a:bb:5c:60:d2:75:fb:f8:c8:
43:8e:9e:16:52:68:4a:b5:12:a1:58:9c:ed:9b:ea:
4f:ec:29:cf:9c:72:3f:dd:64:bd:4c:7b:45:56:8e:
e8:72:53:e4:8a:e3:e3:bf:d5:2a:bb:85:4f:ee:88:
47:2e:42:a8:fb:3b:81:ce:d1:e7:91:92:67:9e:71:
dd:69:93:23:ce:6f:a5:8a:13:ef:d9:e7:06:6e:48:
32:71:d0:75:2e:7c:7d:fd:82:78:19:6e:05:d8:88:
54:9b:ca:ff:75:89:1b:8f:53:fd:db:ad:b9:71:b3:
7a:06:b2:12:69:a2:a0:6c:20:34:0e:4e:55:b1:d7:
c5:f2:f3:c8:b0:6c:59:1e:fb:e2:90:76:ba:76:4e:
11:f6:af:02:cd:15:d8:8c:d5:14:ac:e7:8f:9b:29:
f8:f6:6a:15:a1:fb:8e:48:3c:42:54:ec:08:49:ef:
cb:2c:ef:b8:ab:a3:6b:2b:d9:92:85:65:45:fa:d6:
c6:29:20:e1:d0:c6:c3:50:7b:86:e0:97:a5:7e:46:
01:89:ef:5e:d7:f8:fd:32:46:d2:27:a4:5c:0f:79:
5b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D8:39:4F:0D:6B:01:6B:2C:C3:31:20:03:88:CD:4F:A3:35:DD:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8105d741-c1f2-3969-8303-f231201524bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.88.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:bf:26:ba:81:5b:e1:68:15:fe:9b:15:bc:b6:71:a1:ed:18:
57:ac:4c:b6:df:c1:7b:f5:51:b7:8d:1a:c9:54:49:08:3d:0b:
c7:c6:52:00:1d:f3:3b:4b:e8:da:3a:43:88:1f:8a:5c:3f:97:
20:dc:dc:e8:6d:20:e4:b1:32:45:70:20:7c:bc:f4:69:60:b5:
a3:de:a0:b8:cf:4f:00:70:34:a5:61:dc:61:25:ce:34:1d:e0:
9f:d3:9f:ee:48:73:eb:ec:33:5b:c2:25:ca:6c:8b:3b:dc:5a:
5f:95:57:9c:20:10:db:5c:8d:28:26:8b:a4:48:08:08:13:a7:
d0:7d:e5:33:18:93:07:82:52:d8:8e:d2:88:fa:d7:90:23:2f:
0e:cb:3a:88:95:31:09:a6:a0:a1:bc:8e:f8:25:98:66:52:79:
47:fb:b7:a7:0e:51:64:2a:a4:77:01:a8:98:d8:bc:db:a0:6c:
9b:db:ba:3a:af:a9:9a:2e:9b:b6:f8:df:8d:1f:ba:26:56:e9:
11:eb:88:90:e6:c7:9a:cc:27:ae:af:5d:ac:ba:a7:98:d3:92:
92:25:14:03:64:e3:b0:d4:29:e7:52:a9:a0:b2:1b:7e:b2:52:
75:74:4c:4d:95:62:e0:c5:e1:aa:e7:a7:ac:72:f2:d3:08:91:
51:7d:61:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:34 2025 by rpki-client