Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bafeca2c-1539-3adc-90c2-0d68208c218d.roa
File: bafeca2c-1539-3adc-90c2-0d68208c218d.roa (raw, json)
Hash identifier: JGoRriiIPwkGevoR0yGsNLhmEqjqsYFgJB/ZLhdpgXU=
Subject key identifier: 27:BF:8B:CC:CB:09:7A:00:8C:4E:E9:4C:23:7E:03:F0:03:BD:A4:87
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848530AF83472F696A7C3F10F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bafeca2c-1539-3adc-90c2-0d68208c218d.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.70.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:f8:34:72:f6:96:a7:c3:f1:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=e99b8ce8-f1d1-4c66-b3b8-8cd216933836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:85:d0:24:02:eb:c1:52:19:d5:25:a2:f5:30:
49:76:3f:0d:17:e5:ff:db:37:3a:ff:cb:55:61:b1:
73:04:b1:f2:21:c9:24:39:9f:e6:23:82:46:a2:c3:
df:92:ab:95:02:7e:96:77:b3:3e:62:cd:08:87:86:
6e:12:8a:47:07:b6:63:43:db:55:a5:3c:88:5d:a6:
5b:12:ea:03:b2:85:72:e0:1d:c4:5e:48:8e:5f:7c:
06:ee:3a:03:f1:e3:f7:1f:42:04:6b:56:7d:38:17:
8b:dd:00:a8:1f:07:77:1d:75:f7:09:0c:41:22:63:
72:58:cc:5a:16:a7:66:42:0a:16:76:b8:76:ce:79:
7a:2a:4a:74:89:1b:02:28:ad:b4:2e:1b:86:ef:4c:
58:2f:3e:43:10:44:eb:44:13:6b:84:ef:c7:5e:02:
0f:b8:aa:17:61:76:f3:5c:04:02:4a:c6:3e:39:1a:
92:a7:8d:66:e2:66:e4:da:7f:fe:fa:a1:25:75:dc:
b3:c4:3b:b3:02:3d:ea:29:a3:72:85:15:e0:87:e5:
83:30:c9:8a:3b:09:43:94:da:87:f8:b8:b5:aa:ba:
cf:83:b4:a0:72:00:a7:e8:ac:4a:d9:bc:40:a5:21:
b9:f0:b4:35:a8:c4:cf:87:c6:30:5c:fc:ec:68:96:
4f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BF:8B:CC:CB:09:7A:00:8C:4E:E9:4C:23:7E:03:F0:03:BD:A4:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bafeca2c-1539-3adc-90c2-0d68208c218d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.70.163.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:7e:e2:ea:31:8c:e0:52:33:26:8d:6d:d2:07:49:79:0a:2a:
26:c6:18:48:bb:53:61:9a:70:5e:e8:4f:be:08:db:d0:36:9b:
1c:34:e0:de:cc:81:fa:a0:fe:37:ce:1e:69:af:78:5a:aa:3d:
42:74:ae:3a:2f:fe:6d:93:fb:3d:8d:cc:85:f7:13:aa:dc:c6:
d9:f2:2e:fa:2b:30:6e:f4:31:06:f7:60:5b:ae:63:bf:4e:ee:
0f:6d:9d:ef:1b:ac:94:21:7f:a1:71:c4:3f:a8:ab:2b:8a:6c:
10:38:0c:60:7e:80:3b:96:42:d2:00:be:63:9e:c4:49:3f:e1:
b3:17:b5:ed:63:7f:39:98:56:3d:3b:1e:32:2b:6f:b3:fb:78:
2c:37:19:cc:2d:0d:4e:44:71:1a:04:5a:3a:b2:4e:55:21:fa:
78:62:67:ec:e7:4a:a5:e9:9f:f5:81:ac:69:2c:be:be:f3:b4:
bb:7d:66:5b:6d:79:29:50:ea:04:c2:1b:da:11:9e:f7:ac:0c:
94:88:d5:35:9d:ce:ee:29:25:e9:84:c0:1d:58:ad:c9:d2:f5:
5d:22:36:6a:6a:5a:f9:d1:d5:0e:cd:7e:29:6e:48:37:15:a4:
80:7c:cf:1d:d0:e5:e0:bc:a1:30:4c:ba:8f:b4:65:db:54:1e:
86:70:ec:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:05:57 2025 by rpki-client