Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/088de670-a3b4-360d-ba35-343db443848c.roa
File: 088de670-a3b4-360d-ba35-343db443848c.roa (raw, json)
Hash identifier: bh1Y1ravjW+U8FU10ipAobBIP3FVWGaPciDKO7EQ2VM=
Subject key identifier: AF:6A:E6:3A:0D:09:D6:B3:EB:EF:C8:0F:6B:3A:57:DB:6C:7A:F0:7C
Certificate issuer: /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial: 010D0C9F4328583FC3F1289D680A1D3CEB2F6A94
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/088de670-a3b4-360d-ba35-343db443848c.roa
Signing time: Mon 13 Dec 2021 15:18:00 +0000
ROA not before: Mon 13 Dec 2021 15:18:00 +0000
ROA not after: Wed 31 Jan 2024 05:00:00 +0000
asID: 1239
IP address blocks: 104.234.64.0/24 maxlen: 24
104.234.66.0/24 maxlen: 24
104.234.67.0/24 maxlen: 24
104.234.68.0/24 maxlen: 24
104.234.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c3:f1:28:9d:68:0a:1d:3c:eb:2f:6a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Validity
Not Before: Dec 13 15:18:00 2021 GMT
Not After : Jan 31 05:00:00 2024 GMT
Subject: CN=b85e0297-5743-44f2-88ed-3b20728122eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ce:50:64:d1:d8:86:37:8a:4d:39:02:fc:28:
3b:24:fd:b3:7c:73:44:b7:79:7a:92:05:3c:62:81:
6c:4a:a3:72:3c:3d:e3:57:05:00:ea:27:ed:61:c5:
ba:b1:cf:8e:1c:27:85:f6:a1:33:6d:58:75:dc:d6:
53:a4:f4:aa:2a:f2:cb:47:1f:6c:4a:96:f1:02:ec:
11:5b:dd:79:df:77:3a:e3:f9:f7:2c:67:da:c1:23:
dd:ea:a8:94:97:e2:c1:48:9a:08:f0:96:d1:16:d6:
cd:79:b0:75:10:01:d0:6e:ad:61:31:98:72:39:1a:
49:c5:7a:47:7c:d9:45:24:58:79:7a:5a:b1:7d:58:
0f:d0:65:07:9f:84:6b:1b:8b:71:e4:68:85:6e:38:
ae:05:aa:44:56:c5:c4:67:d7:da:d7:09:a9:2a:8b:
59:72:d9:16:3f:7f:9a:81:5c:e4:60:3e:78:12:76:
60:dc:e0:2c:8f:77:f8:6b:eb:2b:fd:ee:05:fb:d0:
e9:a1:74:de:b2:da:32:2e:d6:1f:03:44:ed:ba:cf:
f2:f2:ff:d6:6f:96:d8:d9:40:af:01:67:ab:d1:3d:
38:60:7c:4f:33:32:d9:b9:21:76:5d:1e:df:db:62:
d3:c5:7b:6c:6e:df:28:ca:53:68:22:88:ef:70:6d:
75:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6A:E6:3A:0D:09:D6:B3:EB:EF:C8:0F:6B:3A:57:DB:6C:7A:F0:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/088de670-a3b4-360d-ba35-343db443848c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl
X509v3 Authority Key Identifier:
keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
sbgp-ipAddrBlock: critical
IPv4:
104.234.64.0/24
104.234.66.0-104.234.68.255
104.234.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:85:18:d5:57:99:75:97:4e:40:0e:6a:aa:6a:4b:ef:03:ea:
af:40:f4:d7:e9:89:5c:2d:a5:98:68:af:be:5d:e1:1e:84:a1:
40:bc:63:37:c2:2d:99:ea:d1:a4:68:27:b0:89:15:f6:2f:f3:
00:f3:74:1b:92:9b:5e:35:3c:0b:f8:d2:d5:db:8c:10:2f:c7:
95:ad:c7:2e:d7:bf:b5:31:32:b9:87:d7:31:22:0b:de:43:e4:
2a:0f:99:a0:a2:b7:11:db:30:58:db:da:03:17:ff:05:c8:6e:
ff:8a:df:77:8c:18:59:bf:9b:34:71:9e:47:fa:a0:34:ed:66:
5e:51:c6:94:1d:ec:e4:0d:5f:81:4c:0c:12:11:5f:b1:ba:08:
41:41:60:91:21:74:d2:8b:05:5c:df:9d:30:0b:d1:af:8f:c0:
45:56:c4:dd:86:29:15:c2:11:00:2d:55:cf:5d:b5:dc:7f:5c:
cc:16:6d:b4:31:42:b9:01:42:71:09:9c:11:4f:1e:ae:7e:20:
54:0b:7c:3a:e3:61:f2:5d:de:71:39:ec:d7:40:60:b4:51:88:
8d:14:bd:83:e4:1a:9c:4f:ff:17:00:0e:cc:0f:3c:15:60:68:
de:3c:d0:c7:9c:b3:79:f8:25:9f:80:b8:9a:69:b4:17:f7:d7:
5c:38:69:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:53 2023 by rpki-client on console-fra.rpki-client.org