Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c9acc95-b3f7-3d08-aefe-5523dd0e52ee.roa
File: 7c9acc95-b3f7-3d08-aefe-5523dd0e52ee.roa (raw, json)
Hash identifier: mVIThvl8h3+KpFmsoo0f6ZJO5qbKrD6a3BUM/NW/y4o=
Subject key identifier: 27:61:F5:FE:D4:D5:A2:36:9A:00:FE:55:6F:DE:07:75:E8:90:A4:2B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584847E02F5E1E7C428B5EE6E600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c9acc95-b3f7-3d08-aefe-5523dd0e52ee.roa
Signing time: Sat 21 Dec 2024 14:00:52 +0000
ROA not before: Sat 21 Dec 2024 14:00:52 +0000
ROA not after: Fri 21 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.70.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:47:e0:2f:5e:1e:7c:42:8b:5e:e6:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 21 14:00:52 2024 GMT
Not After : Mar 21 13:00:52 2025 GMT
Subject: CN=623f37d0-d9c3-4955-b2ea-33dc98c4b3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:72:ca:bb:4a:af:75:40:84:7f:57:70:00:5d:
6a:c0:bb:ce:0e:b2:5d:b4:df:79:13:39:7c:94:a8:
fb:03:83:2d:3d:c3:43:78:a0:25:1a:62:36:0d:d1:
f1:2f:65:39:f8:c5:1b:0c:2e:5e:35:d9:e3:f5:4d:
19:d2:a7:01:3f:88:ff:71:6d:cd:0f:20:96:c6:3e:
94:99:83:6a:d1:25:20:45:00:6c:bb:06:3a:8b:d1:
02:9f:08:e9:f0:8d:6c:d2:27:55:fd:7c:aa:93:b7:
60:1a:58:34:6f:58:b2:19:10:86:ee:d9:04:3c:42:
96:41:d1:d9:07:e3:dc:2f:f3:bb:d6:06:d5:b5:43:
1f:6f:15:bc:15:fb:74:90:cb:99:c8:be:ae:87:29:
81:2d:57:52:fa:0e:f1:f0:84:69:e5:3f:1a:1a:e7:
27:eb:06:24:7e:18:58:2b:f9:0a:c0:c3:9f:8c:2a:
fd:42:a4:f4:59:13:8c:d3:36:7d:bc:45:99:86:fc:
10:d5:4b:cd:0f:67:74:e3:55:9e:7c:12:73:cd:0b:
ce:26:66:43:a2:1e:36:4e:51:09:1e:b5:83:cb:d4:
5c:27:43:77:60:c0:9f:7b:85:e2:65:b2:68:1c:46:
c4:52:93:a2:d4:35:2c:e5:78:62:b0:7c:b1:70:1d:
43:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:61:F5:FE:D4:D5:A2:36:9A:00:FE:55:6F:DE:07:75:E8:90:A4:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c9acc95-b3f7-3d08-aefe-5523dd0e52ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.70.116.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:09:76:1e:e8:ec:9b:b6:1b:3b:b5:83:a7:19:67:72:e5:c0:
80:6d:aa:99:47:13:3e:03:25:d5:d5:58:6b:77:1f:fc:ae:6c:
42:04:cd:c2:21:30:6e:f1:78:22:d0:43:08:3e:53:78:8b:65:
be:b9:35:26:ff:5c:5f:73:af:47:df:0a:ca:e7:38:27:9a:43:
34:67:bc:6b:86:72:23:98:b7:81:8b:16:87:ec:37:bf:d1:a7:
91:0b:0c:ff:79:7e:1d:1c:a5:e6:68:4c:2d:46:b4:0c:74:08:
03:19:87:fd:da:19:39:1b:b9:7c:18:a2:d5:e9:49:a5:4c:f3:
f7:28:51:75:d3:ae:dd:2d:f9:ec:4d:dc:e0:a6:fe:74:45:46:
1e:61:df:bb:03:79:3c:28:1c:5f:ae:f2:fd:6f:90:3f:8d:c7:
6c:b3:de:c5:a3:06:c9:b0:c5:bf:da:43:fb:6f:e4:ec:9b:ad:
c8:b5:38:f6:36:d1:a0:30:fc:75:e0:8c:43:39:cb:64:b6:e1:
b1:8f:1e:c8:7a:6f:52:13:0c:5b:ea:71:43:7f:2d:31:92:a2:
0e:b7:a3:4a:ca:4d:8b:4b:b1:9f:1f:a0:52:13:e6:3c:03:7b:
77:82:ef:b5:04:dc:a8:fb:57:3b:5a:d2:9d:03:61:48:69:a9:
e1:82:2e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:32:37 2025 by rpki-client