Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0d4c990-55db-36ab-823d-00c2dfa3e9e0.roa
File: c0d4c990-55db-36ab-823d-00c2dfa3e9e0.roa (raw, json)
Hash identifier: Ld5NQRMQC59HPbiUl94/P7/k/zd6pPt25EqsuxiYnWo=
Subject key identifier: 86:FA:41:56:CF:63:BC:0C:43:F0:6D:9A:A9:A3:BF:C5:CF:F7:88:EE
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848530AF8BFC5E7DEC3812788A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0d4c990-55db-36ab-823d-00c2dfa3e9e0.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.70.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:f8:bf:c5:e7:de:c3:81:27:88:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=c446a375-0a40-4beb-900f-5ee440b1611d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0e:ba:54:72:d7:9a:54:94:9c:39:54:37:62:
68:14:6d:b3:20:51:dc:d3:d7:12:ab:ed:e9:07:03:
c4:b1:27:3c:86:7e:9d:31:db:09:cd:a3:36:63:68:
bd:d8:40:e2:3d:0c:e8:5d:e9:ae:2f:68:09:13:49:
c1:c0:64:52:5d:af:71:28:54:f4:1e:09:92:3f:8f:
96:cf:cf:f8:e7:f7:53:f3:d9:4e:a0:d1:76:da:32:
60:03:de:a3:bd:a7:bd:5d:fa:39:87:4b:de:47:48:
16:25:85:df:bd:4f:6c:ba:71:c3:38:84:16:6e:aa:
ac:40:01:15:ff:b4:c2:b2:d2:52:bc:e1:d3:81:c6:
1b:5b:2e:f1:1a:f5:24:b8:3e:f2:25:5e:a9:72:57:
b4:33:39:f2:e6:4c:a8:f6:7f:a3:66:ce:d9:8f:88:
2e:e0:5e:47:a3:1d:1f:28:e4:f4:34:c2:52:41:f6:
7b:01:b5:42:49:78:aa:83:cb:11:8d:36:15:60:c0:
01:db:b3:42:e3:3e:48:2c:88:43:d6:5d:f9:03:51:
26:26:b7:68:48:bd:fc:3b:e6:53:56:97:4a:d6:26:
ae:7e:7d:3a:2b:27:e5:9a:1c:8c:6f:70:04:21:92:
01:c6:e5:97:98:66:1e:2c:24:e2:e8:b2:2b:d3:29:
85:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FA:41:56:CF:63:BC:0C:43:F0:6D:9A:A9:A3:BF:C5:CF:F7:88:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0d4c990-55db-36ab-823d-00c2dfa3e9e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.70.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:ad:1f:f7:b9:27:06:d3:11:29:7b:41:72:f3:c6:ba:89:25:
9b:97:68:d8:e2:32:f9:59:ec:fc:59:7f:38:89:00:bb:fb:6c:
23:59:95:2a:83:20:00:5a:0a:0e:e9:b6:ce:3a:46:01:99:15:
4d:79:26:3b:ab:4c:4c:c4:a0:f4:d3:8f:93:b2:07:77:4b:3c:
46:d9:6c:f7:bf:0b:b9:42:4e:54:f3:41:1c:eb:76:ad:98:37:
7a:8d:06:20:18:9e:e7:25:4f:0a:92:62:b7:61:51:15:32:87:
9e:3f:7a:aa:4e:80:ae:da:f2:b6:b0:86:e5:b6:3a:a8:be:63:
6d:88:00:98:59:f0:7f:d8:00:65:dc:f9:2a:56:30:a5:0f:81:
ef:b3:e6:28:58:6f:f1:14:07:9a:9d:32:be:a2:d4:a7:80:ef:
e8:f5:d9:08:c9:de:e6:e8:68:65:72:8d:d0:96:b9:90:bf:4c:
74:0b:21:10:58:80:7b:7d:46:83:60:49:cb:fa:ed:ac:19:32:
ba:d4:13:1b:11:26:da:00:28:93:82:66:18:e3:a8:e3:7b:43:
0f:b8:03:af:6c:76:e3:36:11:25:2a:db:8c:ec:3c:83:eb:58:
bb:61:a6:31:ac:ad:7e:5b:72:53:66:61:fc:b7:6d:48:f6:85:
6b:6b:15:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:31:58 2025 by rpki-client