Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be61f49f-01d6-369d-a34f-1f9f4953e822.roa
File: be61f49f-01d6-369d-a34f-1f9f4953e822.roa (raw, json)
Hash identifier: y3KVLOIvngeLRfsTUqfExu2s3S9+t9eAsNgfQYTnnGk=
Subject key identifier: 41:F7:A3:0B:A6:24:D4:9E:20:8D:CF:8B:A1:3C:9E:62:38:DF:D9:08
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849350EBE600B2E2E4BDDFDC1FC
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be61f49f-01d6-369d-a34f-1f9f4953e822.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.81.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:be:60:0b:2e:2e:4b:dd:fd:c1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=ac9555a3-2fb4-4fc2-9129-17f1fd49d016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b7:f5:5d:b1:9e:6d:c3:d7:09:6f:0f:75:fe:
19:13:94:83:17:ed:d2:a7:d9:7b:a0:97:07:9f:49:
96:ab:cb:bb:08:23:94:dc:dd:08:1e:f8:9d:bc:be:
6f:68:d3:90:a1:50:ad:b1:80:9f:d8:1a:c2:b1:7b:
37:55:b1:e0:4b:8a:87:56:8e:56:1f:d0:99:5f:80:
72:56:e1:f7:d7:4f:89:eb:48:12:dd:19:e7:f9:2b:
18:73:96:19:fe:f3:ee:e2:71:d6:75:ed:6c:f4:28:
37:4f:f5:e1:81:1d:92:54:42:04:50:fb:51:61:c4:
27:71:43:a1:93:77:e9:2d:f1:64:8d:aa:88:c5:81:
7b:1d:f4:2f:8e:97:c8:3a:80:dd:b6:b5:01:00:8e:
f8:0b:b9:31:26:17:2a:53:a6:0f:c6:c4:f2:ef:7a:
c9:f9:da:fc:5f:9f:ac:51:af:7a:86:df:3e:00:05:
80:21:95:84:07:63:ad:77:0f:cf:91:94:02:4b:46:
8b:92:c0:64:47:96:5d:ee:12:bc:bd:d6:ff:8e:c7:
e8:86:02:69:46:ac:b2:78:1f:28:d0:13:0a:9d:b1:
4c:2a:77:bd:57:77:e6:e8:fb:f2:62:75:89:2d:c6:
42:42:2b:f9:a5:91:af:84:62:00:67:e4:a4:51:38:
54:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F7:A3:0B:A6:24:D4:9E:20:8D:CF:8B:A1:3C:9E:62:38:DF:D9:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be61f49f-01d6-369d-a34f-1f9f4953e822.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.81.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:46:d2:d8:33:3d:94:c3:d4:55:88:33:19:29:1b:62:66:a8:
7c:f8:06:4c:10:af:ce:be:4b:db:10:16:be:8a:0a:a3:50:b7:
8d:58:39:9c:64:29:03:7c:3c:45:63:5b:28:8f:c9:c6:e5:57:
67:e9:a7:43:76:66:b4:8c:6d:e1:57:35:18:af:04:f5:9f:43:
ca:05:5f:18:d6:b7:32:38:21:18:e6:d6:c8:69:27:bf:85:c4:
68:f9:47:97:ff:de:3d:e8:3a:04:33:76:11:3f:31:13:f7:03:
3d:16:ac:ae:66:53:bc:ce:69:32:a7:37:23:e2:20:48:0e:0b:
fa:c1:bb:b2:81:d3:ed:76:42:e1:43:fe:ae:da:c3:f8:ca:06:
2b:8c:10:82:fa:3a:14:d0:07:82:2e:26:db:33:1c:73:c6:e3:
23:ef:d4:36:b7:02:6c:98:12:ce:fa:a6:5f:1f:ea:b6:dd:e3:
93:68:d2:50:ed:af:02:c9:2f:26:17:99:b0:f5:17:8d:af:83:
72:1a:d4:1f:c1:fc:03:94:c4:73:bb:29:30:5f:15:d6:8d:4a:
60:d2:59:00:72:43:d0:10:0f:ba:82:55:6c:1e:34:64:91:2b:
03:3b:09:8e:3f:09:16:fb:5c:5c:3d:20:ba:da:61:ac:c1:2c:
9a:ec:40:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:35 2025 by rpki-client