Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b86f7222-040a-3683-ae94-e141ad30a9a2.roa
File: b86f7222-040a-3683-ae94-e141ad30a9a2.roa (raw, json)
Hash identifier: LfEk6Az4P63/ya496ueo2GTPMNa8i4lsZnYi37WAXb8=
Subject key identifier: CD:DB:28:6C:A7:ED:27:B1:CC:E3:BB:1B:B2:7D:53:CE:7A:29:01:56
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849393E89B475BBB703758F0840
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b86f7222-040a-3683-ae94-e141ad30a9a2.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 24319
IP address blocks: 104.123.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:89:b4:75:bb:b7:03:75:8f:08:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=ac123790-cb27-425b-a472-a76c7e654ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:04:8e:52:0e:95:fb:5b:f4:ae:71:00:eb:ce:
95:aa:12:6a:b5:e2:b1:8e:e8:b2:50:3c:76:ec:5e:
80:b2:4c:55:7c:aa:65:88:9b:27:b0:0a:c6:d9:1c:
50:01:f9:90:e0:a1:7a:8c:8b:0e:12:b0:2a:d3:09:
59:4c:e0:b8:c1:1b:86:5b:b6:6d:64:c7:86:ee:13:
dd:ba:27:5d:62:5d:8a:eb:6d:7d:cf:3a:95:28:d1:
ed:be:c2:24:4f:ee:75:44:b2:e1:15:64:38:88:e9:
9a:78:2a:d5:98:02:6c:a0:94:bf:17:4f:37:f0:c1:
d4:1c:1c:cd:f8:23:cd:9f:38:9f:8a:1d:d3:8c:2a:
8b:9a:44:7b:1b:6d:25:b8:b5:fe:4f:ca:40:4d:0f:
e9:c5:ba:4e:e7:42:c5:85:f1:71:c4:49:18:9b:a2:
dd:a0:d0:7e:72:0d:6e:34:38:c9:73:0f:d8:7b:ba:
b8:90:33:55:cf:03:12:28:16:d7:a2:a1:e2:cc:4a:
db:3a:06:0f:8f:c6:dd:42:6a:34:db:39:f5:3d:ba:
09:50:85:10:7b:f0:95:74:90:54:53:9c:8c:fc:99:
08:11:56:fc:58:09:65:0d:56:c2:83:da:47:d7:9f:
0b:ea:f4:c9:c5:52:96:11:37:ee:05:1e:fa:ce:02:
7b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DB:28:6C:A7:ED:27:B1:CC:E3:BB:1B:B2:7D:53:CE:7A:29:01:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b86f7222-040a-3683-ae94-e141ad30a9a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.123.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:a2:2a:96:c6:a7:03:83:f0:3b:df:eb:1c:6d:bb:6c:86:17:
b8:df:b2:92:c1:d5:81:c2:77:e5:aa:34:86:ce:3c:b5:f4:1b:
92:d9:5a:32:33:7c:f9:30:53:07:5b:f3:41:d7:3d:9d:e6:1b:
43:69:cb:0f:58:30:0f:c3:7f:6f:17:5b:83:f2:56:cc:78:f2:
a2:15:b2:c2:45:df:3c:c6:56:2a:02:29:13:de:c1:4d:81:b3:
7d:43:3f:c2:da:6f:59:37:a1:87:91:96:b2:50:a9:a4:37:96:
e9:4d:25:5a:79:12:60:32:60:5f:42:b7:33:91:04:f3:82:ea:
92:c5:bc:7d:b9:d7:29:d5:0b:55:55:0b:f5:38:e6:1e:2e:78:
4b:80:04:08:ff:2e:75:dd:c1:6a:b9:94:15:02:fd:c7:f9:d6:
3f:a8:b1:40:ee:95:3a:25:3d:37:0b:e2:a4:b9:3e:23:43:0b:
90:1a:81:45:b0:48:e1:73:55:4b:ed:0c:16:bc:0d:69:12:03:
8b:97:d8:c8:b0:a5:2c:d3:0e:20:6f:e1:36:9d:f7:4c:e4:dc:
6c:b0:ff:21:65:ae:a6:0c:72:80:6b:f2:3b:2a:2e:a7:27:ba:
6b:c7:74:fa:f3:53:bd:bc:98:dd:b1:a5:a3:48:24:1f:1a:6e:
8f:09:3b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:29:35 2025 by rpki-client on console.sobornost.net