Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2cb68b7f-1335-3cf0-b863-8b9cd99fdb6e.roa
File: 2cb68b7f-1335-3cf0-b863-8b9cd99fdb6e.roa (raw, json)
Hash identifier: QTPdtxct5PnneZQ+AAhP4IntQTriHqNvMDgoXNQhzDs=
Subject key identifier: 9F:F5:29:5E:8C:AD:F7:29:B7:E5:09:B7:5A:65:1A:FA:5F:17:66:2E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584847E02C7DEF0EF5FD0CE6EB00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2cb68b7f-1335-3cf0-b863-8b9cd99fdb6e.roa
Signing time: Sat 21 Dec 2024 14:00:52 +0000
ROA not before: Sat 21 Dec 2024 14:00:52 +0000
ROA not after: Fri 21 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.70.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:47:e0:2c:7d:ef:0e:f5:fd:0c:e6:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 21 14:00:52 2024 GMT
Not After : Mar 21 13:00:52 2025 GMT
Subject: CN=ec48220c-9417-45f4-a5c8-4e5dcaf0bf9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:23:27:30:6a:c1:1a:a1:b0:ab:70:b2:a8:7f:
a3:0c:6f:f1:b1:7a:c2:4c:36:83:90:9a:96:75:3c:
bb:d6:e0:e8:01:1f:af:92:e0:7b:5f:c8:a2:1c:c9:
74:14:6b:80:32:1c:09:f4:60:4a:c4:b3:ac:15:84:
b2:ca:9a:98:0a:0e:a2:a1:82:fa:64:41:d3:33:cb:
e8:8d:33:92:f5:e2:12:67:6f:90:df:0e:79:aa:0f:
73:de:bb:be:94:37:d2:37:0d:ba:9a:32:e7:c3:f3:
91:b1:2d:d5:c7:45:9f:50:86:96:17:88:8d:a2:3f:
f2:73:63:2d:de:1b:c7:ef:bf:4c:cf:0a:2f:9e:8e:
bd:0f:d1:9e:84:4c:e4:94:32:f3:43:53:f0:9c:69:
33:c1:a9:e6:52:5b:90:11:ca:48:57:80:a1:48:26:
e7:86:ae:f3:68:d6:d3:10:09:ae:3d:b3:df:a8:10:
73:24:50:33:dd:22:19:43:3c:41:5d:80:44:a4:09:
52:b6:84:8e:1a:0f:c5:c3:7b:84:ba:33:28:cf:d2:
b7:30:9d:f1:4d:04:12:44:b1:c4:b2:e9:95:13:1c:
3c:a7:93:53:14:77:c8:9b:e8:c9:05:e7:b3:4b:ae:
9c:c2:8b:c4:df:25:ba:eb:2a:e6:70:b0:10:cc:88:
a3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F5:29:5E:8C:AD:F7:29:B7:E5:09:B7:5A:65:1A:FA:5F:17:66:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2cb68b7f-1335-3cf0-b863-8b9cd99fdb6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.70.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:e3:26:79:14:3b:68:d6:e7:76:ad:82:a7:f9:f2:6b:6a:ce:
39:44:71:5f:03:10:f1:cb:1c:3a:49:0f:57:16:9d:d5:53:30:
76:bc:5b:6c:df:f6:08:15:0c:d1:32:ad:02:f9:76:c6:e8:d7:
c2:1b:f7:be:19:35:99:b3:60:8b:97:4c:41:20:41:3b:ba:cc:
74:38:73:f2:00:2e:6d:67:20:5f:81:3c:0f:a5:a4:83:9e:ea:
c5:e9:74:01:00:db:78:68:57:56:eb:cb:60:89:76:03:e4:2b:
bf:b0:95:63:f8:98:a7:8b:32:64:e2:46:72:6c:ce:21:1c:da:
ed:10:ec:37:fb:96:b1:89:b5:6a:11:c5:bf:63:24:5b:2c:0b:
ca:57:3f:b4:62:f9:39:d7:a5:cd:86:85:54:5a:1d:07:ea:70:
55:63:cf:d6:8c:73:be:b7:b9:51:25:b3:7c:88:f1:52:4c:a2:
5d:01:5c:9b:f5:ba:5e:f2:a6:9a:e0:3e:a7:5f:ed:ee:04:da:
e1:d5:52:d4:6d:5c:cf:82:c9:a0:f8:17:31:99:ae:a4:09:0d:
fa:f0:c4:1e:4e:3b:e8:eb:94:9b:4e:2e:fd:f4:0f:f1:0e:4a:
66:ce:e3:62:3c:5f:b5:6a:cf:3b:a3:9e:48:40:60:d6:07:9a:
d6:dc:e2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:40:54 2025 by rpki-client