Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff371c53-3220-39ad-b3c6-b8d1d031554f.roa
File: ff371c53-3220-39ad-b3c6-b8d1d031554f.roa (raw, json)
Hash identifier: n0q+ESWthucqkoyaIHm9d3BXQZsU07UZeo89CIb1DCM=
Subject key identifier: 3E:8D:AE:71:8E:77:B8:CE:C8:8E:57:81:2C:4B:DF:80:A9:6F:9F:6B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584908816982FE77DE277E34D380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff371c53-3220-39ad-b3c6-b8d1d031554f.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 24319
IP address blocks: 104.123.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:69:82:fe:77:de:27:7e:34:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=7ed65b1c-05d9-4e37-a4d6-442c4b754463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4f:5b:e0:ab:f7:ed:41:f4:cb:6e:ff:13:ea:
0d:04:0e:fc:ce:e2:d2:1f:78:29:1d:26:47:f0:f4:
68:7b:23:d4:2f:b8:62:35:20:93:82:c6:03:d8:93:
1a:43:59:81:b5:b7:23:14:4a:54:d3:86:85:2b:45:
f2:20:fb:64:7e:2a:16:fb:7f:29:6c:b6:d5:c2:dc:
4c:04:3b:56:e2:7f:f2:1d:d1:19:76:23:a5:2c:ec:
fc:e9:c0:2d:ca:94:ef:94:ec:dc:7f:9e:81:c2:06:
fd:32:2a:47:4b:e7:ec:53:3f:ea:9d:75:ec:bb:18:
c3:41:37:53:b9:05:c6:d4:da:56:ef:f5:8e:55:e5:
92:dd:af:ef:3b:40:e0:36:30:aa:ab:50:b1:e1:47:
51:bc:f2:3b:f2:d4:2d:3a:25:65:67:05:b2:2c:9e:
c8:1c:22:c3:a5:2f:e3:da:b5:bd:ac:a4:d4:c8:72:
7d:3c:30:bb:99:c2:39:e9:74:1c:4f:c3:27:e0:f7:
33:fa:19:e4:84:50:5c:a1:2d:21:61:87:01:46:38:
e8:83:dd:f8:ff:b6:12:22:50:39:d6:56:07:25:96:
3f:e0:5c:68:8d:8d:a7:58:cb:df:b8:36:99:57:d1:
55:d0:0a:ea:b1:be:35:09:ec:c0:45:81:81:72:04:
1d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8D:AE:71:8E:77:B8:CE:C8:8E:57:81:2C:4B:DF:80:A9:6F:9F:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff371c53-3220-39ad-b3c6-b8d1d031554f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.123.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:5d:78:fa:58:5d:86:30:8e:78:0e:63:24:bb:57:1a:f8:be:
ab:50:66:ce:01:45:f7:80:94:00:cc:f2:05:84:a3:11:24:48:
5e:f7:4f:d5:88:60:ad:63:6e:6e:b6:28:25:4d:9c:2a:ae:f9:
d4:1a:62:04:d3:63:cf:db:3d:a3:af:f2:98:7d:cd:28:0a:c0:
9d:2d:25:a1:82:1a:5f:8a:46:aa:f1:a7:a1:bf:bc:31:00:f4:
52:48:9b:74:d0:4e:67:8f:41:ac:90:83:89:50:59:32:01:97:
ac:bc:94:62:40:18:8f:cb:a1:b7:49:d6:d9:55:25:81:fd:53:
1d:cd:d1:41:f9:d7:33:73:0e:51:99:f2:e6:6d:2f:c0:de:37:
d4:c6:75:ac:70:53:fa:e3:74:8a:d9:b1:36:54:c6:d8:a1:68:
e8:e5:32:57:6f:a8:e4:ee:25:c3:c8:b9:4f:2d:ae:7a:7f:98:
99:f8:94:69:51:72:a3:1c:50:3b:62:8d:36:28:76:06:74:85:
2e:3b:b5:54:22:24:75:43:ba:c7:9a:f5:9d:e7:78:77:e6:2b:
69:af:76:63:20:48:d8:f1:e7:10:f9:97:b3:0c:55:5a:fc:81:
99:ea:21:5c:9f:fa:e2:df:95:33:70:00:84:a7:47:c4:62:da:
2e:e5:e3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:13:17 2025 by rpki-client