Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/75bf4a6f-67fb-31d4-af7f-3de7bb74aa6c.roa
File: 75bf4a6f-67fb-31d4-af7f-3de7bb74aa6c.roa (raw, json)
Hash identifier: SIQ4E/hrxEmXrAQUzfMT8HG8DoU2gypchjQjMMXJubw=
Subject key identifier: AC:E9:B2:F2:F4:51:40:BF:0D:89:84:92:7B:57:54:F4:33:DA:FB:1E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848530AF84293DAA74939F73600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/75bf4a6f-67fb-31d4-af7f-3de7bb74aa6c.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.70.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:f8:42:93:da:a7:49:39:f7:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=e92b7837-318d-49a9-8b18-96f2d39a6902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a6:97:66:76:ab:56:d9:39:8a:89:f8:ec:7c:
dd:0b:ec:a5:b5:23:5f:0a:a7:82:b6:7e:d6:e9:17:
c0:3c:df:e7:59:86:ba:7c:24:74:64:3e:55:22:dc:
a0:e8:f3:2e:b5:12:94:87:74:7a:12:e1:c4:f8:4b:
12:45:63:b5:3c:8e:fc:51:08:bc:c3:4a:b9:82:c7:
45:84:87:13:0d:a8:2a:c5:34:ef:75:74:b1:b5:6f:
aa:6f:2f:32:d2:84:22:12:fa:8d:8c:50:b0:f9:f2:
69:c3:00:17:dd:7c:8d:95:30:bb:2b:2b:b1:f1:a7:
be:d7:ec:46:3b:04:da:d6:85:3a:85:c0:c7:fd:b0:
97:80:81:ea:2c:a1:bc:f5:8c:e5:9f:52:c7:7c:76:
80:26:28:01:a3:60:17:56:cf:c7:f3:a2:6c:39:f7:
6f:56:0a:52:7c:05:9f:0c:1a:e5:b1:5b:e8:2f:b1:
ff:f7:db:04:f7:cc:94:fa:dd:98:96:98:0f:db:31:
85:38:29:c2:21:d5:40:04:51:5a:b2:92:19:47:83:
b3:5d:f7:7b:d8:9d:ec:9d:90:87:37:ff:1a:bd:af:
2d:f1:55:fd:45:fa:cd:48:e2:22:15:7e:67:4d:04:
52:69:2b:07:15:98:09:ae:c6:da:0c:6d:fa:23:d3:
fe:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E9:B2:F2:F4:51:40:BF:0D:89:84:92:7B:57:54:F4:33:DA:FB:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/75bf4a6f-67fb-31d4-af7f-3de7bb74aa6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.70.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:3f:1a:82:e5:db:75:48:20:7d:28:45:92:5b:81:84:ac:70:
ff:2d:a0:b0:d2:1c:9a:b6:60:d0:65:7b:97:ae:2f:8e:25:aa:
8e:9d:50:bd:ed:1c:8d:f8:77:dc:7e:77:3a:67:42:9b:b4:63:
da:3c:06:3c:ec:2c:fa:31:73:70:5b:15:ff:5d:02:d6:ef:aa:
13:71:b5:54:81:97:ac:01:69:9a:f1:9e:d5:a0:f2:62:dd:d9:
e0:d2:aa:95:9a:cb:52:da:33:1e:f3:c4:88:e0:00:33:ff:6b:
64:7a:da:96:77:37:a9:5a:4e:33:a1:a8:e5:cd:64:15:32:94:
23:18:e4:dc:13:e6:9f:21:22:e8:29:30:d1:c1:4a:7a:23:28:
7c:2c:a0:11:29:57:60:f5:59:d3:11:8d:c4:c5:74:b3:19:95:
f1:04:bd:a3:c8:63:b4:f6:d5:b3:30:b9:67:51:90:77:83:d7:
40:0f:47:73:12:bf:db:bb:97:26:61:00:54:b7:bf:64:2d:18:
8a:31:98:3a:24:d4:32:53:f1:16:70:9d:53:1a:01:7c:0a:3f:
ce:72:22:34:44:dd:9f:26:5b:3d:82:ad:10:80:7c:29:12:09:
3c:ca:64:ae:92:58:9a:da:b7:16:ab:dd:65:65:54:b5:db:23:
f9:95:e1:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhTCvhCk9qnSTn3NgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZTkyYjc4MzctMzE4ZC00OWE5LThiMTgtOTZmMmQzOWE2OTAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaaXZnarVtk5ion47HzdC+yltSNfCqeCtn7W
6RfAPN/nWYa6fCR0ZD5VItyg6PMutRKUh3R6EuHE+EsSRWO1PI78UQi8w0q5gsdF
hIcTDagqxTTvdXSxtW+qby8y0oQiEvqNjFCw+fJpwwAX3XyNlTC7Kyux8ae+1+xG
OwTa1oU6hcDH/bCXgIHqLKG89Yzln1LHfHaAJigBo2AXVs/H86JsOfdvVgpSfAWf
DBrlsVvoL7H/99sE98yU+t2YlpgP2zGFOCnCIdVABFFaspIZR4OzXfd72J3snZCH
N/8ava8t8VX9RfrNSOIiFX5nTQRSaSsHFZgJrsbaDG36I9P+kQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKzpsvL0UUC/DYmEkntXVPQz2vseMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzViZjRhNmYtNjdmYi0z
MWQ0LWFmN2YtM2RlN2JiNzRhYTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaEaoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACE/GoLl23VIIH0oRZJbgYSscP8toLDSHJq2YNBle5euL44lqo6dUL3t
HI34d9x+dzpnQpu0Y9o8BjzsLPoxc3BbFf9dAtbvqhNxtVSBl6wBaZrxntWg8mLd
2eDSqpWay1LaMx7zxIjgADP/a2R62pZ3N6laTjOhqOXNZBUylCMY5NwT5p8hIugp
MNHBSnojKHwsoBEpV2D1WdMRjcTFdLMZlfEEvaPIY7T21bMwuWdRkHeD10APR3MS
v9u7lyZhAFS3v2QtGIoxmDok1DJT8RZwnVMaAXwKP85yIjRE3Z8mWz2CrRCAfCkS
CTzKZK6SWJratxar3WVlVLXbI/mV4Vo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:25:03 2025 by rpki-client