Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97f55d69-7417-3406-853b-d6de19516b70.roa
File: 97f55d69-7417-3406-853b-d6de19516b70.roa (raw, json)
Hash identifier: NUfBAuXHvs+GHbhINOo5dkvCCFS0oonD3sXr+jPjlNY=
Subject key identifier: 85:68:01:15:FA:58:1A:7E:3E:37:B0:3A:FC:EC:64:72:CE:2C:12:3D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584937D941AB1FAC59B4854CC120
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97f55d69-7417-3406-853b-d6de19516b70.roa
Signing time: Mon 17 Mar 2025 13:00:52 +0000
ROA not before: Mon 17 Mar 2025 13:00:52 +0000
ROA not after: Sun 15 Jun 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.108.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:37:d9:41:ab:1f:ac:59:b4:85:4c:c1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 17 13:00:52 2025 GMT
Not After : Jun 15 13:00:52 2025 GMT
Subject: CN=57352d74-fbd0-4fe0-853d-684245372b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:06:09:77:c5:1a:db:e6:e2:55:38:36:a2:7a:
60:5a:20:f9:51:c0:4c:f9:29:2a:35:7f:86:12:51:
a4:53:3a:26:71:53:b1:1d:08:ca:c2:62:3c:e8:ab:
7f:36:76:07:dd:56:9f:3a:5e:58:50:4c:ad:b0:1f:
01:90:17:87:b4:8a:76:77:bf:a6:9a:7d:99:e5:24:
61:7d:7b:35:74:f2:20:89:f2:95:60:50:fe:9c:b3:
ee:5d:0d:dc:9d:25:e4:7e:55:50:21:61:4f:58:25:
7e:15:20:9d:cc:6b:18:f5:4c:f8:7c:00:33:9e:af:
e6:41:b4:44:57:12:6c:98:79:84:ce:a8:3a:20:7f:
97:5e:2f:48:9b:c4:38:d0:07:32:9e:d9:6a:12:d2:
3c:3d:82:8b:bd:7f:de:09:5e:a6:65:4c:a0:d7:34:
8e:92:7d:ad:44:91:cf:9a:3a:9d:f2:45:9f:75:be:
db:66:98:de:b7:3e:aa:68:44:32:f4:a6:0e:69:4b:
c7:d4:64:42:a6:72:ee:85:bc:bb:74:cd:a5:c1:a2:
69:93:ef:1f:be:a8:48:20:f1:0b:ba:e2:a5:64:25:
6d:d0:f3:0a:2e:3f:d3:9f:9a:9c:c1:e0:94:8c:9e:
e7:32:d1:a3:4f:43:a8:4c:b9:a7:88:78:ed:87:70:
e0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:68:01:15:FA:58:1A:7E:3E:37:B0:3A:FC:EC:64:72:CE:2C:12:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97f55d69-7417-3406-853b-d6de19516b70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.108.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:4e:c3:1c:1c:a2:dc:cc:a3:ec:8a:3d:d9:72:13:66:3d:24:
90:90:fd:05:d4:98:df:ca:cf:fc:3b:17:8b:4d:77:cd:92:b7:
95:94:7f:b6:02:cc:d3:fa:89:1c:8e:54:ed:5c:11:a4:17:ac:
d5:13:2c:93:f7:ba:29:69:18:a1:5e:89:b2:e3:3b:2d:4f:04:
3f:e5:68:f5:52:5c:5f:ad:8f:7a:37:7f:41:59:51:cb:dd:12:
7d:73:5c:a9:79:7d:39:69:27:78:85:ec:e3:8d:e7:27:5e:ee:
80:0f:9d:d0:b0:b9:52:df:db:8b:35:00:a1:48:53:52:e0:38:
8a:4a:e5:2d:60:e6:80:1c:53:79:b2:5e:88:8d:dd:15:b8:0c:
b7:0c:2b:60:39:e7:25:23:86:ca:78:86:39:72:ff:08:9a:8e:
b3:0a:d2:2f:03:aa:a0:a0:f9:0c:7f:d9:f6:fe:e2:db:50:3f:
e6:39:e9:34:c1:83:c9:26:72:99:65:84:77:3f:6b:8d:a6:b2:
0f:1e:1c:ab:84:28:e0:69:33:25:b4:99:08:e2:68:46:28:8e:
c6:b7:c8:6b:c3:b7:b9:e1:f4:4a:13:3f:54:a9:93:27:e8:05:
14:8c:8c:1b:cb:03:18:0f:11:0f:c3:4f:72:6e:4a:ba:ab:99:
54:2e:82:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:00:12 2025 by rpki-client