Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d521682a-df3e-34d3-ab3e-27bd263e2578.roa
File: d521682a-df3e-34d3-ab3e-27bd263e2578.roa (raw, json)
Hash identifier: 7g/wpjTYb+tjJHOBROriGA0I9kyctzOVruUxsRS7HG0=
Subject key identifier: 45:08:83:CA:F7:BD:22:DB:D8:04:FF:3F:75:B0:DD:F3:F1:F8:00:53
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849393E88FB9F068926EC67A380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d521682a-df3e-34d3-ab3e-27bd263e2578.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 35994
IP address blocks: 104.121.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:88:fb:9f:06:89:26:ec:67:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=115f484f-74b5-42e5-b34a-8f937b04dbb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:27:06:48:0a:64:e3:db:4e:05:9c:d5:95:af:
f7:40:ef:06:f4:67:72:c9:34:a6:9b:26:b7:a9:e1:
a9:c4:fa:63:89:a4:52:99:58:84:b2:cc:e9:e1:9d:
be:60:d8:4a:7a:64:00:a8:9a:2f:10:14:61:2d:2d:
9c:eb:03:54:14:d8:d5:f2:f4:99:60:82:51:ff:4c:
46:64:c3:43:4f:15:c2:36:e9:65:86:fe:b7:36:90:
4a:a4:8f:f9:5f:b4:10:96:6e:75:a3:88:16:b8:ca:
f4:f4:28:9f:54:80:38:ef:53:d6:cd:e7:99:8a:2d:
c5:d2:5f:16:bf:e6:80:2e:d3:92:52:c4:4f:a1:88:
82:77:a5:3d:f2:79:27:ff:53:d0:ec:58:38:7a:a6:
72:a5:ff:51:5c:09:27:30:f1:3d:39:55:be:c8:0a:
9e:aa:95:11:fb:52:bd:7b:4b:b1:ce:fe:ec:95:c0:
54:90:d5:4d:62:17:e0:20:75:7a:be:e5:3f:33:58:
ef:a5:8c:03:b4:26:07:46:6f:32:36:3d:f6:80:2f:
0e:a8:fb:f0:db:1e:6f:f7:66:37:76:f2:20:b2:5a:
3f:0b:63:92:86:7d:84:b4:53:ec:98:1a:9e:02:47:
a1:5b:bb:01:2e:75:dc:64:52:e4:6f:e3:da:6e:b1:
c7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:08:83:CA:F7:BD:22:DB:D8:04:FF:3F:75:B0:DD:F3:F1:F8:00:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d521682a-df3e-34d3-ab3e-27bd263e2578.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.121.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:7e:f1:b6:c0:63:38:cb:9a:01:94:e6:91:65:93:5d:a0:43:
7c:d8:99:bc:4b:30:e1:bb:80:4a:69:9f:a6:0e:c9:c3:42:c7:
9a:69:f2:c2:07:f3:ef:e8:a8:ef:cd:d4:35:ac:9a:f7:02:af:
5f:a1:4f:cf:9f:99:75:20:32:13:e5:dc:90:24:55:82:c1:a4:
63:ff:35:74:cb:37:53:53:87:e3:20:fe:44:51:8b:bd:f9:69:
ca:e9:4a:b9:1b:44:24:f6:d5:3d:0a:d9:75:7a:48:f5:63:6f:
aa:14:86:30:fe:07:1a:34:9d:ae:6f:dd:b1:d6:b8:27:10:fd:
c5:35:a1:b4:d6:17:99:e9:5f:49:7e:c8:37:c3:b4:57:5c:74:
ca:c5:66:d6:e7:36:2d:94:9a:b9:34:55:c6:55:b1:ed:c4:40:
1f:69:58:a1:7e:12:61:6f:96:1e:2a:84:c6:88:3d:d2:fe:4c:
23:ed:54:2e:d4:4c:af:b6:17:c7:78:b8:46:25:d3:f7:95:05:
71:92:d2:f5:c5:55:54:b0:b9:e9:97:da:fe:79:99:67:c0:95:
2b:08:dd:17:89:fc:ae:91:47:ad:3d:32:5d:74:7e:f1:d8:17:
42:f6:39:8d:cd:5d:1e:17:3f:11:68:80:29:f9:0e:b6:fc:5d:
b0:1f:f9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:55:31 2025 by rpki-client