Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba973a97-4735-3e8e-a0c2-2b1b7131f5fe.roa
File: ba973a97-4735-3e8e-a0c2-2b1b7131f5fe.roa (raw, json)
Hash identifier: 0SgnKvVDLTjjsS18Ym1XOxFhkuUtPAMYqT/yPjUKOjc=
Subject key identifier: 91:8E:8F:45:0D:11:9E:E1:EE:3B:CD:DC:C1:6F:CF:DD:CF:72:DA:AE
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858493243E8E94AB17CA55B3FD680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba973a97-4735-3e8e-a0c2-2b1b7131f5fe.roa
Signing time: Sat 15 Mar 2025 13:00:52 +0000
ROA not before: Sat 15 Mar 2025 13:00:52 +0000
ROA not after: Fri 13 Jun 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.71.62.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:32:43:e8:e9:4a:b1:7c:a5:5b:3f:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 15 13:00:52 2025 GMT
Not After : Jun 13 13:00:52 2025 GMT
Subject: CN=46a815dc-e9ef-4858-92e6-c8ced6dc35dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5f:e3:fe:96:b7:c8:e9:bd:e2:a7:43:b7:13:
2e:d3:8f:c3:cb:91:b5:67:70:ca:e6:85:26:b3:1d:
e8:03:90:ae:87:e8:21:42:78:96:d7:b8:76:2a:c5:
03:5c:95:3c:45:9b:45:03:9d:c5:38:31:23:97:8d:
e9:dd:88:2e:48:c3:c7:2b:e2:9d:9d:bb:19:82:c7:
5a:52:45:c8:44:a2:a6:f2:6e:93:8e:1e:f5:df:ca:
07:aa:a1:34:fc:87:ad:3e:5c:19:c3:aa:1a:97:e2:
ac:e5:16:36:d2:78:87:e6:df:8a:4d:a8:cc:a2:62:
42:e3:3d:ec:8e:ba:e4:be:36:31:93:0c:07:59:c6:
84:90:91:f6:49:ee:b1:8b:c0:bf:8d:c8:8d:ef:cc:
a8:7e:1e:61:a8:8f:80:8f:0d:af:7e:5a:a9:78:9b:
6b:a6:b8:ce:7f:d9:3d:de:b6:ea:ca:85:2e:cf:69:
cd:9c:fd:38:92:1a:c1:29:c3:91:f5:62:d1:24:05:
11:73:c4:42:b0:0e:fc:1b:a6:95:5f:3b:31:0f:df:
0c:71:2f:d4:90:02:d9:58:8a:98:3f:4f:da:bd:fd:
e2:12:50:5e:5e:5e:12:35:a5:3f:0d:1d:0f:ee:04:
64:9a:b1:d4:52:d0:f8:9c:75:41:e3:c4:d6:71:9a:
7c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8E:8F:45:0D:11:9E:E1:EE:3B:CD:DC:C1:6F:CF:DD:CF:72:DA:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba973a97-4735-3e8e-a0c2-2b1b7131f5fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.71.62.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:52:88:a3:4f:d2:98:08:14:1b:40:4a:1e:85:1b:99:b2:50:
5c:30:6f:1a:22:7a:ae:f7:0b:a1:53:b7:88:db:c4:68:95:79:
92:0a:7b:a5:17:dc:38:2f:ec:e5:9f:4c:ab:ba:6e:9a:9f:cc:
8c:e6:0d:48:32:50:28:9d:b9:c0:4f:05:bd:ad:ad:9e:34:fc:
ac:d5:eb:83:fa:9a:db:07:d5:33:72:1c:cf:51:0f:a9:a3:7c:
52:6e:85:af:f3:e1:55:2e:df:b4:3c:f4:72:0e:14:4b:9d:33:
34:bb:ec:a7:79:36:20:af:2f:67:fc:5a:0a:ee:09:01:dc:a2:
12:a7:d8:f6:eb:c6:1c:af:5a:b6:d2:52:6d:47:01:63:91:84:
bc:39:d1:34:08:65:99:77:a7:1b:cf:f1:54:57:31:3b:76:f5:
a4:2f:65:3d:86:fa:4f:25:7e:ba:18:f6:2f:69:7f:71:50:62:
af:0a:83:ab:ef:c4:e3:4c:b6:f6:8f:9a:34:26:65:b5:f0:55:
2b:84:c9:df:39:76:07:30:3e:b0:a4:99:c4:7e:50:a9:d8:c6:
62:12:ec:54:2e:8b:7e:5d:5b:75:74:95:54:67:56:a5:f0:95:
14:41:0e:45:aa:50:01:68:16:a2:c9:68:74:77:19:93:1f:c4:
d1:73:49:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:01:35 2025 by rpki-client