Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2cb68b7f-1335-3cf0-b863-8b9cd99fdb6e.roa
File: 2cb68b7f-1335-3cf0-b863-8b9cd99fdb6e.roa (raw, json)
Hash identifier: I9I9kby9/f676h4Z4aXXZwKTDIQ7gBVT4HVF1lmzg+Q=
Subject key identifier: 8C:9D:99:FE:36:27:13:5F:A4:59:7E:B8:BB:D0:71:90:00:53:76:82
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849287E5633B6D0AA42059647C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2cb68b7f-1335-3cf0-b863-8b9cd99fdb6e.roa
Signing time: Wed 12 Mar 2025 01:00:39 +0000
ROA not before: Wed 12 Mar 2025 01:00:39 +0000
ROA not after: Tue 10 Jun 2025 01:00:39 +0000
asID: 20940
IP address blocks: 104.70.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:28:7e:56:33:b6:d0:aa:42:05:96:47:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 12 01:00:39 2025 GMT
Not After : Jun 10 01:00:39 2025 GMT
Subject: CN=0a0ef84b-4d40-4f69-8926-9318fed32c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d3:fb:f4:84:06:93:59:a0:74:fd:e2:96:9c:
b8:6f:ca:d0:45:5e:70:c8:46:7f:06:65:a5:33:50:
4d:6c:b7:f9:a8:eb:45:c8:e0:7c:2b:4c:42:bd:bc:
19:65:5b:28:25:2a:1f:4e:95:b4:be:2a:c1:0c:e2:
8d:4a:71:9a:28:ca:27:9f:f7:a7:4e:c1:9e:e7:d3:
4e:c1:af:e3:21:40:6c:50:b2:0a:f3:19:1a:1f:71:
b7:fd:48:62:8a:2b:97:5f:12:4b:03:15:49:96:ad:
24:f4:ba:27:96:07:97:4f:6a:03:a6:23:66:ed:35:
6d:f3:ae:96:44:0b:e4:a0:5d:48:22:2f:5b:57:9c:
9e:07:f5:e4:72:fd:32:02:45:c0:d5:86:12:64:fb:
a2:58:26:65:59:45:b6:96:87:e5:83:45:1f:89:88:
38:3c:b3:a7:90:e7:14:60:d8:66:26:4a:ee:f9:19:
63:10:b9:a2:3f:58:f2:a8:89:12:f4:55:25:15:4b:
dc:f0:32:7d:20:fb:de:c9:55:7b:86:02:8f:74:53:
9c:0f:b6:18:1f:1a:82:09:48:bb:32:e0:a9:83:db:
b1:dd:9b:86:c2:76:9e:5c:35:41:75:ab:54:1b:54:
32:a4:5f:c2:46:3b:c4:0e:6e:11:34:da:16:9a:26:
ed:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9D:99:FE:36:27:13:5F:A4:59:7E:B8:BB:D0:71:90:00:53:76:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2cb68b7f-1335-3cf0-b863-8b9cd99fdb6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.70.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:06:94:e3:35:31:09:2c:79:b1:ba:6b:2b:94:7b:77:71:b9:
63:b9:d7:94:df:f0:1d:9e:dc:04:09:fa:6a:3a:f1:5b:2d:68:
76:dc:5a:9b:2b:ff:c5:2d:5e:e1:51:11:4b:bf:81:a2:b1:49:
00:a7:15:5f:14:8a:ea:26:0f:90:5c:b1:5b:74:43:c6:4c:00:
d7:2d:fa:f0:aa:43:f8:6d:c5:8e:91:35:ca:9c:b0:17:02:98:
f7:b8:7e:8a:95:19:25:1c:18:e5:26:a1:a3:36:34:4c:7a:95:
de:61:63:67:c1:04:89:5c:e9:b2:69:77:5d:a6:a7:f2:4f:c4:
af:de:f8:d0:f1:47:4a:4a:fe:da:91:e2:07:d4:ab:c9:fa:a0:
80:a7:7e:24:35:ac:26:38:16:cb:10:b4:7f:80:7d:7f:ee:58:
d2:2a:d2:bd:de:30:d2:8c:10:c1:e2:cd:ea:44:96:28:0d:e6:
0e:0a:9a:c2:21:fa:85:2a:e3:92:7a:83:11:4c:db:70:e9:3e:
7a:e5:cb:72:2a:7a:de:cc:58:5d:67:f5:7f:28:39:ec:1c:62:
fe:8b:dd:a2:87:71:cf:bc:b5:3d:7d:9c:f7:5a:df:d0:d3:d1:
4b:08:9c:cf:5f:bb:7d:19:f9:a2:bc:95:3f:c1:2b:e6:dc:cb:
88:86:ff:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:31 2025 by rpki-client