Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bca8ccab-4f73-3dd3-abc1-d8a3783670b7.roa
File: bca8ccab-4f73-3dd3-abc1-d8a3783670b7.roa (raw, json)
Hash identifier: RZFtv7UN/vkWfKcN8hTIPjr5L9p68k7Runo+roJ1fbE=
Subject key identifier: 44:9E:D4:91:5D:2A:F3:2E:CA:F0:5D:0C:8C:A7:E6:78:E7:29:66:99
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858481F65261BF1435E6F5900FDE0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bca8ccab-4f73-3dd3-abc1-d8a3783670b7.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 35994
IP address blocks: 104.120.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:26:1b:f1:43:5e:6f:59:00:fd:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=5a1d4f88-9580-4223-bb70-a3641d5d8cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:87:89:21:0d:72:22:4a:14:23:14:8f:4e:3d:
7a:e8:cc:77:00:5c:2a:91:19:76:66:0d:67:e4:f8:
36:5a:e9:e6:9a:54:bf:fb:73:d7:4d:51:06:99:bc:
df:71:d4:7a:7e:d6:f8:fd:37:0f:b2:1f:c4:b4:d7:
cf:7b:18:e7:21:61:41:38:32:18:6b:bb:21:5b:80:
e4:0f:75:52:52:81:0c:ce:f1:c5:99:96:39:87:f9:
0a:40:42:ca:ad:a3:01:21:b8:0e:3f:04:c7:88:6f:
cc:1f:51:83:98:63:b5:c6:f0:2c:cc:be:60:cc:a5:
97:71:6f:03:8c:a8:cb:97:3a:93:52:b5:79:a6:a6:
b0:3a:1b:50:20:7d:28:50:e5:7e:df:26:1f:fb:c3:
17:ce:1f:14:0f:6d:f8:17:ab:ca:89:5c:61:e0:bd:
a8:f1:ff:ab:16:1b:fc:ef:13:44:71:68:4b:7c:2a:
0d:e9:aa:00:85:10:d3:7c:bf:63:b6:74:4d:e3:32:
20:01:f4:f8:0a:f8:d4:08:d9:95:1d:d1:18:38:90:
a8:ed:09:2b:02:b4:99:e0:94:a5:6b:d0:2c:c5:dd:
a1:60:d1:22:94:12:a2:61:de:82:bf:5c:5d:e0:00:
a3:21:ed:4c:b3:2d:99:3f:39:e2:46:ee:9b:3c:58:
c4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9E:D4:91:5D:2A:F3:2E:CA:F0:5D:0C:8C:A7:E6:78:E7:29:66:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bca8ccab-4f73-3dd3-abc1-d8a3783670b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.120.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:bc:4a:82:bc:ae:b3:9d:29:43:02:e8:08:7a:56:49:63:ca:
8a:52:65:20:77:73:d3:79:0b:bb:15:58:4a:ed:61:ef:d5:c6:
90:23:9d:42:55:d7:2b:f4:40:f7:6f:c5:99:1c:c3:b3:4e:53:
1c:99:b9:a2:9b:13:53:d2:63:53:2b:5f:5e:03:b6:e4:74:de:
a2:01:09:e3:c6:cd:1d:32:77:04:b7:40:4c:0b:48:a3:5d:b3:
03:ab:dc:bd:94:af:b9:e4:2c:d6:bb:b7:1d:e6:3b:91:8d:4b:
aa:17:25:69:2f:be:81:ce:70:bf:a1:bd:8e:ff:29:4a:04:1f:
d3:7f:2a:97:de:1f:d1:d5:b5:38:de:d2:59:71:b4:68:e3:eb:
86:5b:98:fa:91:85:c8:55:5b:b9:7a:4f:bb:82:60:12:13:e8:
4c:72:b8:20:9c:f3:b1:78:89:75:d4:fc:b8:37:8e:27:68:2a:
2c:dc:15:20:bd:19:00:a8:43:b8:12:6a:62:1e:54:16:86:13:
38:0a:1b:7c:da:02:89:e4:cc:43:c4:73:43:3b:44:b2:6f:09:
5d:fe:5c:7b:86:fd:23:27:93:a4:6f:05:b5:32:c1:0e:74:45:
71:3d:1c:9d:af:62:4d:0f:e6:04:fe:7f:a7:2b:0b:47:54:88:
1c:45:f4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:57:48 2025 by rpki-client