Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e207e0e-34da-35a3-bfca-fbfad0282556.roa
File: 8e207e0e-34da-35a3-bfca-fbfad0282556.roa (raw, json)
Hash identifier: n0hM4wIVmhKRlc1hQEiWOPPvfayc15AKJ1xXuWx5aY8=
Subject key identifier: E9:D2:1F:00:DB:D2:FD:32:33:65:8A:7C:A6:47:11:F3:E8:46:62:29
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849350EBA5B2C3D704597E44F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e207e0e-34da-35a3-bfca-fbfad0282556.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.98.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:ba:5b:2c:3d:70:45:97:e4:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=f9e7453e-f6c2-418f-a4af-4a9569f86e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:dc:13:9f:d7:6f:f7:84:d9:9a:54:68:d8:0a:
90:b7:f3:2a:7b:6a:72:e8:41:5b:74:f2:15:d2:d6:
f7:e8:75:ba:93:22:4c:cc:2f:bb:cd:1e:73:67:54:
5f:7e:50:61:d6:12:1f:74:40:33:7b:e8:6c:b7:34:
04:b2:6f:a3:b1:d6:ae:2f:e9:55:e3:17:09:e4:6a:
05:14:26:a6:af:8b:85:f8:8f:70:e9:a8:f7:85:05:
f6:02:8d:e5:15:4a:95:19:0a:ca:36:64:64:90:a8:
9a:d3:38:64:a5:28:9f:21:b8:f3:a6:32:16:73:49:
8d:e2:63:1a:1d:39:c1:c2:c9:17:68:c2:04:0a:01:
25:ed:98:d7:1b:20:e5:e5:0b:30:12:99:2f:bf:2b:
7e:05:fa:a8:71:6e:74:57:4c:54:19:af:ed:97:53:
a9:d4:c4:9e:19:83:62:e4:1c:ff:e3:71:c9:e9:01:
16:f3:a8:39:64:4b:36:bf:46:f5:1b:6f:18:58:57:
25:68:6f:60:77:fb:96:04:73:41:47:97:09:da:18:
a6:f0:f1:8d:06:6c:d5:14:eb:03:3d:41:fc:e8:b0:
58:0b:dd:c5:c1:ec:9f:cb:ca:aa:88:6e:41:64:d2:
19:a2:4b:2f:ee:8b:87:49:68:ba:e3:07:f8:64:73:
e9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D2:1F:00:DB:D2:FD:32:33:65:8A:7C:A6:47:11:F3:E8:46:62:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e207e0e-34da-35a3-bfca-fbfad0282556.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.98.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:80:8f:7b:f4:de:a0:44:fe:0f:cf:8c:0b:1c:f9:15:e2:4f:
23:69:10:0c:db:7a:69:6b:25:04:3c:bf:cf:c6:0e:0d:89:17:
be:91:23:95:b1:67:c0:0b:df:f5:b1:8c:ea:b9:d1:9d:c6:c0:
89:e9:b4:a6:73:e4:29:c7:0a:02:4e:02:ac:02:af:46:40:a4:
f3:c6:b8:53:a2:e7:c6:f2:84:95:af:d5:f4:6b:23:e8:49:0a:
1d:51:06:fd:2a:fa:aa:e5:3a:49:92:c8:54:22:2c:cb:e1:cf:
47:96:fd:cc:65:7d:2f:45:bb:3c:1e:b2:9a:a7:49:57:87:39:
95:c8:64:71:27:0d:42:ca:78:a9:cb:c2:aa:1c:01:a3:8d:da:
3d:80:ef:a5:62:18:2d:e1:68:20:d5:87:99:bd:15:02:56:13:
8e:e0:84:4f:63:f1:c0:03:31:34:39:33:25:ed:73:d1:0c:11:
51:c8:83:2e:0d:13:e1:5d:63:bb:26:44:16:ec:1b:d0:dd:e7:
d3:3d:fa:2f:44:c5:7f:cf:75:01:93:d2:6d:09:f1:fd:db:bf:
de:7c:f6:87:ce:58:37:30:01:ea:6b:65:c4:80:77:77:69:40:
ab:d0:62:d9:b6:ae:c3:8d:9b:6d:d6:e5:a9:3b:3a:cb:dd:10:
60:6f:40:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:13:19 2025 by rpki-client