Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb08152e-b32b-3310-9bce-be12c11c8498.roa
File: bb08152e-b32b-3310-9bce-be12c11c8498.roa (raw, json)
Hash identifier: 3QAnkXuZHvjMr/7RAR1pE2YIFNtmYeSDBnegjHIM02Q=
Subject key identifier: EB:7F:72:0C:71:00:D5:1E:EC:AA:C5:80:93:33:DC:EF:1D:96:08:1E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584847E02F193DB7B3BD78B4EEA0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb08152e-b32b-3310-9bce-be12c11c8498.roa
Signing time: Sat 21 Dec 2024 14:00:52 +0000
ROA not before: Sat 21 Dec 2024 14:00:52 +0000
ROA not after: Fri 21 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.70.112.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:47:e0:2f:19:3d:b7:b3:bd:78:b4:ee:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 21 14:00:52 2024 GMT
Not After : Mar 21 13:00:52 2025 GMT
Subject: CN=f6fc1687-1fb6-4b11-bfb9-9f4fb3c394b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:28:b1:b0:1c:5f:92:38:8f:1b:d6:1e:f2:36:
81:1b:51:f4:98:51:f1:0d:50:74:b5:3b:b5:e1:8b:
2a:58:f5:da:2d:51:11:db:94:c6:bd:b7:9e:1e:dc:
30:b4:fd:00:f6:90:7c:95:19:30:f6:14:41:7b:2d:
55:9b:b6:20:be:d4:78:25:e3:2c:c9:52:c4:39:64:
77:9d:e8:c8:f0:b3:70:c9:20:74:1c:d4:b0:c4:7f:
a7:e5:7a:10:de:e4:b9:0d:f3:7a:37:8e:25:42:3e:
57:9d:83:69:f6:35:69:45:d0:48:29:c8:47:2d:c4:
0a:04:a7:14:2d:e0:e6:4c:ac:f6:e5:1a:80:91:60:
f4:41:90:5d:c1:47:7c:88:36:3a:a9:8b:1a:1d:75:
96:7f:87:2d:b3:f0:b8:b1:6e:31:1c:93:36:45:93:
74:2a:8f:70:a8:ca:08:db:16:5f:e5:99:f3:42:3c:
21:07:f9:a5:66:7c:74:cd:0a:a2:b2:ab:c1:4b:97:
15:38:73:ea:77:0e:5f:f8:fa:40:98:54:89:6c:49:
c6:df:52:42:83:cf:f2:b6:e1:63:98:6c:d8:47:be:
aa:08:1f:c8:f6:65:b6:d6:6d:dc:58:7b:30:c7:14:
9e:b2:1c:10:6d:9d:21:da:00:23:a6:bc:25:ca:df:
57:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7F:72:0C:71:00:D5:1E:EC:AA:C5:80:93:33:DC:EF:1D:96:08:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb08152e-b32b-3310-9bce-be12c11c8498.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.70.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:08:0a:5b:ae:c3:f9:7d:c0:53:cb:a2:6f:c8:b6:67:bb:15:
77:b6:15:8d:eb:a7:e8:95:d3:45:4e:d9:cb:4f:8b:aa:33:26:
d8:d5:ef:ef:1d:1f:5b:ea:ca:95:33:f7:d5:01:76:a4:7b:bd:
16:9d:12:61:8f:42:ac:ec:80:79:5a:24:9b:aa:16:58:eb:92:
18:72:30:c4:51:6b:07:f5:97:69:d6:c5:98:c3:4f:44:36:77:
69:d2:9d:e3:3d:c3:f8:d1:e8:6c:da:95:94:7c:9a:28:d1:d7:
18:7f:99:df:1a:e4:c0:c9:cc:e2:0f:54:bf:05:fb:f9:1c:3b:
23:17:19:76:51:ac:b0:7b:1c:02:21:83:45:66:53:d4:bc:fb:
53:6e:01:41:23:13:94:02:98:10:28:c5:6d:88:5c:5c:47:23:
d1:12:30:63:18:4f:bb:54:3e:ef:ce:07:46:fb:59:32:80:af:
34:3d:64:9c:d2:5b:7a:eb:a6:43:73:7c:3d:22:95:cf:86:9b:
e3:1c:6f:ec:e0:5a:52:e4:30:85:bd:04:c5:f9:0d:41:92:43:
e2:00:03:90:a2:ae:03:19:0a:1c:0f:7c:77:3a:8c:b8:20:11:
e3:f3:8e:16:32:c8:85:2b:d8:4e:2a:43:06:e5:b3:0a:5b:28:
ed:c2:b1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:33:22 2025 by rpki-client