Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d0733ab-8f9a-3ed7-8d06-653de40da2d6.roa
File: 3d0733ab-8f9a-3ed7-8d06-653de40da2d6.roa (raw, json)
Hash identifier: 99UlQvYxwWVkOKVAaXa3ee8/iwAcivr7okXaQRzk38o=
Subject key identifier: BE:3E:DC:CA:C3:5F:0A:63:E1:60:31:60:B1:F2:F1:D8:99:51:9A:5D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584847E02F7FB74268D2CA718600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d0733ab-8f9a-3ed7-8d06-653de40da2d6.roa
Signing time: Sat 21 Dec 2024 14:00:52 +0000
ROA not before: Sat 21 Dec 2024 14:00:52 +0000
ROA not after: Fri 21 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.70.116.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:47:e0:2f:7f:b7:42:68:d2:ca:71:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 21 14:00:52 2024 GMT
Not After : Mar 21 13:00:52 2025 GMT
Subject: CN=041a5c15-ee0b-4f9b-8edc-cc0c7970696e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d6:c3:2e:f3:6c:81:aa:ee:00:19:05:a2:6c:
07:94:24:d7:77:73:8b:17:6e:94:b4:37:d2:b6:fe:
cd:ed:73:01:7f:ce:59:69:a0:4c:d8:53:58:a3:83:
7a:9b:e5:18:72:4a:25:9f:44:4e:21:e9:2f:4c:04:
32:4d:74:a2:89:a7:2e:76:50:10:d5:91:db:33:07:
f0:e3:e4:93:f7:d6:7f:66:8d:33:02:42:d9:0e:4f:
84:21:bd:30:c9:aa:a1:0a:80:40:53:a7:f6:ba:75:
ae:ca:2d:e2:4d:5e:ad:5e:16:db:44:4e:60:64:c1:
f3:45:0f:4f:eb:42:66:bb:43:4d:8b:71:32:50:50:
d7:5d:13:00:bd:7e:ea:11:38:a3:7c:77:f8:4a:b9:
68:a3:36:3d:e0:fb:7c:f7:d8:48:4a:ad:86:d0:c5:
42:ee:1f:97:55:67:1f:b6:c0:9e:6b:a3:52:90:15:
20:4a:c8:2e:6e:db:dd:5a:e1:93:af:db:e1:c2:c9:
ab:b1:de:e8:e7:15:de:9a:62:76:32:f0:f3:6e:9b:
44:f1:dc:60:8f:a9:3b:0f:9d:9b:fe:71:0f:9f:ef:
a6:e7:b6:50:c6:87:9d:19:49:8b:a3:17:9e:22:b4:
10:7e:ef:45:25:d2:9f:08:08:11:f8:46:ea:8f:c4:
5c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3E:DC:CA:C3:5F:0A:63:E1:60:31:60:B1:F2:F1:D8:99:51:9A:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d0733ab-8f9a-3ed7-8d06-653de40da2d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.70.116.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:24:05:d8:6d:b8:37:71:45:f2:e1:0b:f2:d3:df:c8:70:d8:
52:22:e0:3e:c0:78:f5:6f:03:d2:3a:24:f0:9d:c7:7e:3b:32:
0b:ea:22:e2:f5:49:81:b3:ab:20:00:16:a7:ff:91:16:6d:02:
b5:1f:87:12:ff:a1:cb:f1:c6:34:99:52:2b:30:40:e9:ab:14:
cc:9d:d6:13:c8:10:4a:2c:72:7d:62:ff:06:48:ff:b9:e7:9e:
be:c1:6e:21:6c:9c:0c:47:08:d5:8d:7a:00:2d:63:48:95:62:
4d:94:52:64:5e:7a:72:bf:b5:ce:27:c4:81:96:12:ef:bb:a4:
9d:4d:1a:9a:eb:55:16:24:a3:f2:65:99:84:b6:a8:ae:42:26:
0c:6f:0f:fe:b4:ff:af:66:e4:92:71:f7:eb:be:8c:3e:86:89:
bb:f5:03:c9:b6:ec:73:7f:1f:7f:1f:02:94:aa:56:f2:fe:23:
8d:d7:f6:45:28:af:a0:d6:ef:92:d8:b9:0a:57:d5:97:90:31:
4a:c0:43:33:01:9b:aa:52:58:00:0a:b3:71:11:5b:a9:46:e6:
45:21:9f:92:c5:bf:7b:6f:86:94:3e:42:cb:21:3e:9b:0e:15:
0e:72:05:bc:9a:bc:b0:19:39:96:09:be:ad:17:1c:a5:a9:d7:
97:c5:54:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:35:52 2025 by rpki-client