Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/475f8028-24da-3c36-8620-35a8d917a580.roa
File: 475f8028-24da-3c36-8620-35a8d917a580.roa (raw, json)
Hash identifier: fmznpOmREGNw7TxuummNc72Vs8usm8+XEj6PnJK+mzI=
Subject key identifier: FA:32:1C:3E:AF:E9:B9:BE:04:D2:4C:14:D3:5F:F5:FF:76:4B:47:4F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858493243E8988DB98836D3D1A080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/475f8028-24da-3c36-8620-35a8d917a580.roa
Signing time: Sat 15 Mar 2025 13:00:52 +0000
ROA not before: Sat 15 Mar 2025 13:00:52 +0000
ROA not after: Fri 13 Jun 2025 13:00:52 +0000
asID: 20940
IP address blocks: 104.70.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:32:43:e8:98:8d:b9:88:36:d3:d1:a0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 15 13:00:52 2025 GMT
Not After : Jun 13 13:00:52 2025 GMT
Subject: CN=c5db2947-9638-4dd1-9c57-895493ec6cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:20:16:1a:80:c9:6f:e5:41:d1:b7:be:7e:d1:
e7:4e:4a:fa:de:de:6a:6a:78:10:7e:bf:c2:de:3d:
ba:c8:e2:94:ea:13:e9:5c:c9:9e:25:38:c9:a3:9d:
59:09:a2:44:41:b2:0a:fa:9e:77:5a:16:64:7b:5e:
87:c6:31:29:34:e8:87:17:2f:93:46:73:ac:0d:23:
d5:32:65:cd:35:ab:04:e4:de:4b:ec:b5:79:b2:aa:
e8:f2:c9:c9:dc:c5:e8:49:25:29:e6:8b:5f:2b:3c:
fb:73:6c:20:ad:cb:17:6c:ca:5c:92:e1:f0:ff:66:
43:c2:66:a0:23:82:be:fa:73:8f:91:b3:8c:51:ef:
78:9f:c9:57:1e:de:ae:4f:6a:a6:22:9d:2d:7c:ac:
96:4c:fc:29:55:c1:f1:fd:09:34:46:ec:11:16:5f:
5f:dd:97:07:aa:33:40:0c:c6:3e:df:12:ad:08:8d:
c6:10:59:09:7b:78:a4:f0:ca:1e:9b:08:22:d7:f0:
67:60:7e:f3:90:7d:ee:5f:a4:33:7c:e5:5a:18:ad:
27:73:9f:ad:28:a0:eb:0d:c3:31:c5:3c:01:9b:60:
ec:b7:8a:ec:dd:25:61:a9:b3:62:70:87:d1:2e:28:
ed:00:40:f8:7e:95:d9:5e:3a:81:92:15:a1:bc:53:
11:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:32:1C:3E:AF:E9:B9:BE:04:D2:4C:14:D3:5F:F5:FF:76:4B:47:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/475f8028-24da-3c36-8620-35a8d917a580.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
104.70.180.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:3f:a1:29:13:00:a6:50:ba:12:79:20:bb:5e:5a:76:87:5c:
e8:b4:50:a9:25:4d:d4:50:76:fd:87:4b:ac:50:fc:c8:01:fa:
71:cc:20:33:a0:e2:fd:09:59:ae:5a:1d:dd:88:17:0a:dd:9b:
c6:b4:7d:aa:17:93:f2:cd:7b:b4:09:cc:34:e6:c1:00:38:3c:
72:4c:1b:c2:0e:59:cb:1f:2d:6c:ff:08:46:98:c6:f2:a7:72:
70:b3:5e:0f:4b:9f:bd:77:9d:83:8a:b8:45:97:78:79:bb:6b:
4d:39:52:01:70:60:b7:e7:7f:0d:9a:ff:c2:1a:99:e3:48:c4:
b1:62:5e:0a:a0:20:e9:82:1f:53:d8:10:1f:2c:20:41:9e:d6:
03:ad:07:d6:9e:41:76:3a:1d:bb:66:81:2b:b5:3a:3c:13:87:
f2:be:bb:80:a9:30:13:11:4e:ea:64:f9:7c:5c:88:8d:4f:e2:
2c:12:0f:7e:47:23:17:52:d5:1e:54:f5:00:3e:87:65:97:9c:
70:6e:49:d2:7b:99:37:04:1c:ab:5a:3c:b9:c2:3f:d4:cd:cd:
32:06:c4:1a:c3:20:31:b9:f5:61:52:cb:05:a5:89:cf:b3:af:
ab:bf:4f:94:8d:e6:91:a1:5d:c2:b1:cd:85:75:81:81:19:b1:
f5:2e:ad:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:58 2025 by rpki-client