Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/40e220e0-8426-30f6-8aa2-9c687e76e30c.roa
File: 40e220e0-8426-30f6-8aa2-9c687e76e30c.roa (raw, json)
Hash identifier: XzwPe+qcv2d68XtJeyHwJdFXkK6OMkxpSfMNI0YdAyw=
Subject key identifier: 97:88:88:DB:5A:86:E4:08:EB:4C:34:FB:2C:F9:86:9C:4D:7F:3C:02
Certificate issuer: /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial: 010D0C9F4328583F12A9E7DC9DDFF05C4781C780
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/40e220e0-8426-30f6-8aa2-9c687e76e30c.roa
Signing time: Mon 13 Dec 2021 15:18:00 +0000
ROA not before: Mon 13 Dec 2021 15:18:00 +0000
ROA not after: Wed 31 Jan 2024 05:00:00 +0000
asID: 1239
IP address blocks: 104.234.44.0/24 maxlen: 24
104.234.47.0/24 maxlen: 24
104.234.41.0/24 maxlen: 24
104.234.33.0/24 maxlen: 24
104.234.35.0/24 maxlen: 24
104.234.40.0/24 maxlen: 24
104.234.43.0/24 maxlen: 24
104.234.45.0/24 maxlen: 24
104.234.49.0/24 maxlen: 24
104.234.51.0/24 maxlen: 24
104.234.53.0/24 maxlen: 24
104.234.55.0/24 maxlen: 24
104.234.56.0/24 maxlen: 24
104.234.57.0/24 maxlen: 24
104.234.59.0/24 maxlen: 24
104.234.60.0/24 maxlen: 24
104.234.61.0/24 maxlen: 24
104.234.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:12:a9:e7:dc:9d:df:f0:5c:47:81:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Validity
Not Before: Dec 13 15:18:00 2021 GMT
Not After : Jan 31 05:00:00 2024 GMT
Subject: CN=f0c4b6d8-e4d8-42c4-8386-22acfb0817a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5c:a6:b5:bb:20:c3:52:4d:08:62:8c:54:32:
5e:72:18:24:11:a2:cd:d2:0c:fc:b0:3d:1b:e9:14:
4e:4d:a3:1c:9e:8a:a5:b7:e0:bc:6a:c6:89:c6:8f:
6b:e7:b8:55:58:23:ee:94:2d:b2:07:2a:dd:fb:09:
3c:73:9f:d5:0d:31:5a:9e:50:44:f0:b3:e0:c5:f1:
82:73:95:34:8b:e4:02:30:5d:fd:ed:d5:58:a0:63:
92:cb:ea:39:ff:7e:93:a0:f5:a6:6b:86:37:15:29:
84:7d:54:c0:6d:41:d6:cd:fa:6c:3f:40:3b:4e:71:
b3:f4:92:17:52:82:dd:53:49:82:d2:87:79:ff:00:
59:e5:bb:c9:5a:83:f2:fc:5d:ad:ef:53:f8:77:cd:
94:30:bb:ee:53:a9:ee:40:c3:ae:88:11:d9:f6:b7:
05:f4:c2:69:19:5f:f2:f9:c5:94:86:c1:e7:d3:d1:
ff:e9:9d:dc:2d:24:5c:77:5f:3a:4f:c6:b4:99:83:
e8:73:ca:87:9b:74:9b:6f:b3:a1:a7:13:a7:11:39:
48:8c:2b:db:bf:f0:e5:04:8f:14:ab:4c:1b:c3:44:
c1:3e:62:82:ec:35:f2:03:d2:9b:04:f0:d7:af:3f:
18:da:9b:d4:d9:67:56:f9:74:de:51:cd:68:86:a5:
75:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:88:88:DB:5A:86:E4:08:EB:4C:34:FB:2C:F9:86:9C:4D:7F:3C:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/40e220e0-8426-30f6-8aa2-9c687e76e30c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl
X509v3 Authority Key Identifier:
keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
sbgp-ipAddrBlock: critical
IPv4:
104.234.33.0/24
104.234.35.0/24
104.234.40.0/23
104.234.43.0-104.234.45.255
104.234.47.0/24
104.234.49.0/24
104.234.51.0/24
104.234.53.0/24
104.234.55.0-104.234.57.255
104.234.59.0-104.234.61.255
104.234.63.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:06:18:d2:d0:13:e9:e8:6f:88:bf:ad:9c:c4:06:33:25:7d:
10:e9:e6:1f:e8:30:24:55:e9:6e:3b:70:ee:88:82:2e:e8:02:
26:7f:1c:67:31:76:6a:c4:80:37:1c:84:be:8f:bb:55:a8:2b:
9c:29:f6:d8:35:7e:e5:d9:21:40:7b:8e:9b:e8:67:48:86:cc:
37:90:72:e1:d1:6d:0b:50:8a:fe:e6:36:18:9d:0d:4c:9a:8b:
5a:24:54:3a:0b:ce:b6:db:50:af:ec:9e:e7:62:ac:45:90:25:
65:0a:ae:00:6c:bf:70:09:8e:65:d5:13:2a:cf:01:20:9d:53:
52:44:29:fb:80:d7:28:b5:68:66:e4:00:b2:ee:d8:d8:d4:cd:
64:3b:2a:3d:45:ba:9a:1e:a3:fd:f2:01:b8:83:31:5c:d1:f6:
a3:ef:a3:10:61:d4:ac:7a:d1:1a:b8:46:09:b2:6a:94:44:bf:
29:a7:98:68:82:f1:00:5c:2a:94:27:de:3e:77:b0:6b:e7:c4:
6a:bc:23:1d:6d:00:fc:e6:06:35:d8:5a:bc:a6:f2:79:bb:d3:
e7:a6:1b:2c:27:41:7c:78:27:bc:f0:3d:20:59:e8:20:e1:a1:
60:7c:d4:99:4f:f0:67:5f:74:fd:58:c0:23:c5:e4:87:43:b9:
ed:d5:7a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:58 2024 by rpki-client on console-fra.rpki-client.org