Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0c91401-ac08-31e1-acb1-7d3a79374f06.roa
File: e0c91401-ac08-31e1-acb1-7d3a79374f06.roa (raw, json)
Hash identifier: s5HpOg/SXO1SAOTee6ZOiXI+l0PiLr/Ir/d4RLd6lZI=
Subject key identifier: B6:F0:38:1F:D1:C0:51:97:FC:92:D2:46:46:B9:A1:00:28:7A:34:15
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849350EC420667C4A3D99D2C7A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0c91401-ac08-31e1-acb1-7d3a79374f06.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 16625
IP address blocks: 104.102.18.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:c4:20:66:7c:4a:3d:99:d2:c7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=7a29c94e-63c3-400e-8ca0-cec9b171fbf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fa:3b:5a:12:84:c7:55:8f:56:d3:f9:f6:c6:
dd:ea:82:9e:91:38:8b:75:a4:a9:d3:5f:84:1b:06:
af:bb:5e:ff:00:53:8b:5a:d3:03:32:79:a4:27:0c:
74:4d:96:e6:da:50:c9:9d:fc:02:8e:74:2b:c8:7c:
7b:ab:09:11:64:d4:dc:a3:01:f3:f8:e3:ba:bb:94:
a3:52:0d:e0:06:7b:16:64:1d:ee:62:01:92:06:e9:
b0:2d:3e:ff:20:4b:4f:d0:c2:c5:1e:59:a4:87:9b:
e2:5a:33:a5:60:d8:23:c2:c4:6e:8a:b5:a7:01:73:
58:96:eb:c4:b8:41:e0:01:cb:c6:33:54:bb:ff:a3:
94:41:5b:c8:3c:30:68:f2:1e:c3:06:b6:3b:b1:1c:
0c:c5:ec:fd:d5:b0:d4:95:a7:3b:91:47:d4:e8:52:
06:60:9c:aa:9c:ff:b3:ce:78:15:23:ee:33:12:e1:
58:f9:76:2c:dd:78:16:e2:de:50:9d:ab:38:98:40:
f0:61:db:39:64:b5:43:89:bf:cd:9a:a0:80:ba:8d:
80:23:6d:6e:ff:47:7c:ac:0e:d2:01:27:cc:7d:8c:
e2:e8:2a:ac:f9:3b:07:a1:47:99:c2:38:b6:75:6d:
47:7c:95:89:ba:b1:c4:94:57:e8:93:5d:01:f6:31:
f3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F0:38:1F:D1:C0:51:97:FC:92:D2:46:46:B9:A1:00:28:7A:34:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0c91401-ac08-31e1-acb1-7d3a79374f06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.102.18.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:8a:73:41:94:2c:57:e8:af:9d:b6:75:e0:c9:7e:91:72:5b:
75:ed:72:c1:62:7e:f0:9c:2d:ac:06:be:7d:3a:3e:de:2d:33:
ed:54:c0:80:0e:b2:6e:99:3f:8c:e3:b1:2a:c2:67:ce:53:ae:
f4:f0:e6:c5:95:7c:45:82:10:f1:a2:86:d2:13:ce:35:f2:60:
3c:0b:f8:9a:09:3e:42:58:7f:e3:e8:49:cb:70:71:b5:3a:c7:
cb:0e:e5:af:18:a2:60:46:0c:50:3b:ca:18:68:e8:9a:b1:c9:
e2:b8:ca:9a:f6:e9:d1:be:b9:6c:8b:fb:90:7e:49:e2:f1:ee:
0e:6d:70:58:bd:75:47:c3:21:57:99:68:a1:e3:42:c9:86:3a:
46:0e:05:a8:c6:63:53:eb:39:f0:6b:0f:5c:9b:a8:c7:04:40:
d8:ce:2c:4b:b5:2a:22:39:c5:0d:6a:48:f6:a4:10:04:27:d0:
9d:f8:02:76:b1:ce:27:56:c8:8d:1f:7a:19:37:74:cf:d1:ec:
7c:bb:a1:f8:26:62:d5:6e:c5:0f:15:0c:12:59:b8:c0:ad:57:
7e:8b:9b:61:13:42:f3:12:65:43:15:21:c3:f0:a9:6a:d7:08:
a4:92:ad:50:c3:ef:34:d5:12:bb:cf:02:81:10:37:04:da:a1:
ec:fb:19:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:07:20 2025 by rpki-client