Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/971d6137-e383-3696-8ffd-c38bb6c6d0fd.roa
File: 971d6137-e383-3696-8ffd-c38bb6c6d0fd.roa (raw, json)
Hash identifier: M70YLwfskX7v6k0Iqbbs+It2UieYp7NFjn85du32cno=
Subject key identifier: 62:CC:39:35:89:46:57:14:6E:C1:B4:61:04:D6:4D:68:DA:75:BB:CA
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849287E5B27AE211DCC0AD1DA60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/971d6137-e383-3696-8ffd-c38bb6c6d0fd.roa
Signing time: Wed 12 Mar 2025 01:00:39 +0000
ROA not before: Wed 12 Mar 2025 01:00:39 +0000
ROA not after: Tue 10 Jun 2025 01:00:39 +0000
asID: 55836
IP address blocks: 104.71.96.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:28:7e:5b:27:ae:21:1d:cc:0a:d1:da:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 12 01:00:39 2025 GMT
Not After : Jun 10 01:00:39 2025 GMT
Subject: CN=d2c7cb9e-ff67-4cba-b151-ef07237a0b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:44:d7:f3:7e:f8:fe:8d:b6:13:8a:7b:cd:22:
e7:ff:86:46:b7:b1:47:c7:c8:27:70:5d:11:fc:01:
41:10:72:82:f0:c7:7e:45:ef:3a:a7:e1:6a:65:f3:
7f:1c:83:c1:29:1b:4e:67:5c:ed:a8:a8:67:6d:f4:
c5:a3:2e:a9:71:4c:2f:56:e9:96:74:d9:6a:49:c5:
aa:11:a6:0a:80:88:a2:75:cc:2f:86:80:be:a3:8a:
db:39:b8:9a:d8:87:30:96:7b:39:bb:14:d1:7b:96:
48:c3:05:90:70:bc:ec:ee:00:21:6b:fe:29:f5:81:
95:0e:e3:bd:ff:91:ff:43:57:55:67:ce:87:cc:a2:
1d:0a:d8:9d:f6:7f:15:5c:b6:dd:2d:df:ac:38:e3:
a0:7e:7c:33:31:53:1a:a6:c9:42:59:df:71:c0:a0:
66:34:f6:cc:14:cc:8d:f5:f6:f6:77:8b:0f:5e:99:
68:c9:bd:43:26:92:69:79:34:1c:96:39:c4:d8:ce:
0d:43:e3:9d:70:b5:6b:b8:be:6b:a8:d3:b1:96:8b:
51:3b:60:8f:95:e8:48:28:fc:78:24:3c:20:41:69:
2d:94:90:99:73:37:a5:ef:2d:cf:92:b0:54:f0:85:
6d:6c:af:03:e0:b1:02:09:a4:5e:fc:14:3b:ff:7f:
55:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CC:39:35:89:46:57:14:6E:C1:B4:61:04:D6:4D:68:DA:75:BB:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/971d6137-e383-3696-8ffd-c38bb6c6d0fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.71.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:b4:16:7b:50:41:5e:51:1c:46:d2:0e:88:ec:d8:39:10:ce:
08:57:ec:df:78:ee:81:5b:46:86:a0:85:2e:51:0f:22:00:fe:
49:c7:66:45:82:7b:be:b6:76:cc:fc:fe:8c:16:19:45:c7:ce:
77:f0:30:35:2d:3d:f3:30:53:c4:f1:44:fc:bd:f5:18:6d:87:
c7:f7:35:86:4b:c0:6b:20:81:7f:22:63:b6:5f:61:f6:0b:9b:
13:3e:54:84:b9:84:ed:25:aa:72:8c:66:23:24:64:a1:7e:c1:
6f:76:e0:3a:54:0e:cb:cc:12:d4:ab:be:24:6b:80:31:6f:0c:
66:36:d5:5d:1c:6d:1f:74:41:72:0b:c8:f0:f3:3a:f1:32:6c:
6d:b0:c1:ed:eb:c8:5f:6c:4b:0f:b0:8b:81:78:4f:e1:d9:ca:
e9:b0:83:95:13:de:6f:5c:8e:b5:6a:c7:c5:b8:69:50:8d:7a:
cd:75:93:69:cb:6f:a5:a3:f7:a6:ca:43:c7:2b:73:c0:a9:5d:
7b:98:e8:74:83:ac:5b:36:10:70:59:6b:07:97:b6:af:8c:d7:
2e:1f:0b:a4:30:81:fb:c9:fb:08:3f:33:ab:02:f9:0e:1c:78:
68:af:e3:9f:1e:99:7b:15:d4:f4:a8:c3:4f:82:e2:01:68:22:
8d:23:7c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:57 2025 by rpki-client