Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a68d256d-85f0-3e19-90ad-5a174eaaf663.roa
File: a68d256d-85f0-3e19-90ad-5a174eaaf663.roa (raw, json)
Hash identifier: qUbGXJiuOdlLUk8bOC3uBSq6TbE/gBiF99J4VD3EmWk=
Subject key identifier: D5:D5:6F:AC:F6:05:DF:7E:96:D2:3C:8B:53:19:4B:FF:88:E7:9B:B1
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849350EC1FCE3801E89568FDC80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a68d256d-85f0-3e19-90ad-5a174eaaf663.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.95.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:c1:fc:e3:80:1e:89:56:8f:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=5e8599ce-9435-4c4b-a2fd-c100d3554306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6d:67:47:8f:3b:c7:5b:10:f2:00:37:f8:09:
13:76:1c:a9:1e:4f:bf:03:09:11:6c:1f:47:7c:bb:
c8:4a:b8:b9:33:b7:02:e0:0a:cf:e6:75:93:6a:ab:
17:3e:c0:af:a0:5e:f5:a2:7f:e9:79:5b:7f:9a:9b:
14:c0:24:56:e3:0d:03:af:db:10:16:53:79:dc:94:
73:0a:fe:e4:cc:2e:3a:7a:61:f9:39:7e:e8:29:d4:
0f:2b:ed:9b:11:b0:67:c3:d7:41:24:8b:c1:d3:3f:
ec:2a:74:e7:0d:0f:f6:5f:81:3c:d0:35:4a:75:68:
56:74:24:0f:81:25:c9:bd:6a:ba:1a:ce:9c:85:df:
b4:0d:e0:ce:18:eb:89:4b:b5:a8:f0:c9:b0:c6:54:
6e:2a:e1:2f:d5:69:0c:a9:3a:96:81:41:da:75:70:
34:15:01:50:f5:c0:bf:34:ff:a5:5d:d5:cc:88:4e:
ec:89:48:99:02:94:02:fd:4f:5f:d1:a7:2e:6d:42:
07:99:68:f2:b2:10:3a:ef:aa:e2:c5:a3:4f:0b:e9:
4f:e5:9b:4d:45:71:b4:0f:4e:cd:c3:eb:67:de:c3:
0d:ab:05:09:cc:a6:38:3a:50:ed:0b:ad:11:50:84:
be:dd:9c:cb:b6:10:b3:b3:da:c7:04:48:05:cc:20:
bb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D5:6F:AC:F6:05:DF:7E:96:D2:3C:8B:53:19:4B:FF:88:E7:9B:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a68d256d-85f0-3e19-90ad-5a174eaaf663.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.95.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:e6:fa:1d:3d:ea:ff:7b:e4:27:42:5f:20:11:10:ed:1d:77:
a1:8c:74:1e:43:9b:a5:f6:01:76:c4:4e:2d:4a:80:21:36:29:
ed:ae:c0:ac:2d:e4:d9:40:88:59:0d:40:43:d9:2d:2d:42:63:
31:88:f9:f7:fa:8b:82:5f:a9:4f:d3:d5:8b:de:4c:2f:0c:53:
ec:b5:19:2d:95:87:ec:58:5e:12:a4:39:17:45:a6:4a:f0:91:
16:3d:9e:be:fa:1b:26:aa:b9:32:37:1a:19:14:8f:dc:9d:dc:
8e:c3:04:ba:82:a4:45:a3:8d:38:c9:1d:34:aa:3c:f2:b3:a2:
0f:96:88:3c:08:77:97:a5:a5:85:e0:08:0f:aa:b0:57:a9:19:
ae:5b:46:0d:72:b0:22:08:b3:5b:3a:d2:08:88:56:61:84:32:
79:0c:fa:4f:d1:55:91:16:12:cf:ad:7c:47:3a:e6:c6:1e:0c:
d5:03:2f:31:0a:4b:1e:cf:01:b8:3a:eb:86:39:4c:3e:ac:d0:
2a:d1:5d:d2:57:79:7a:62:e5:ff:32:ee:2e:16:68:16:f2:c2:
39:67:e9:3e:ff:97:3a:cb:99:df:4e:18:0a:ad:b5:03:6c:27:
9d:ef:ca:b4:75:dd:02:c1:c4:5b:dd:e5:43:3f:90:a1:ae:ea:
80:83:a0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:01:21 2025 by rpki-client