Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/424559f4-c86f-3c00-8557-1f395c3f914b.roa
File: 424559f4-c86f-3c00-8557-1f395c3f914b.roa (raw, json)
Hash identifier: yWglwhohFPOfI39pteEqJQv9kFxWzpN37ZH+L2ToSV4=
Subject key identifier: FF:67:81:20:17:0B:38:9C:40:4F:33:9F:B5:49:CA:C1:B3:CC:AE:7F
Certificate issuer: /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial: 010D0C9F4328584004A2B9590BBB029D2E832C00
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/424559f4-c86f-3c00-8557-1f395c3f914b.roa
Signing time: Mon 13 Dec 2021 15:18:00 +0000
ROA not before: Mon 13 Dec 2021 15:18:00 +0000
ROA not after: Wed 31 Jan 2024 05:00:00 +0000
asID: 212238
IP address blocks: 104.234.58.0/24 maxlen: 24
104.234.59.0/24 maxlen: 24
104.234.62.0/24 maxlen: 24
104.234.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:04:a2:b9:59:0b:bb:02:9d:2e:83:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Validity
Not Before: Dec 13 15:18:00 2021 GMT
Not After : Jan 31 05:00:00 2024 GMT
Subject: CN=24588b57-3ca1-4030-adcb-7a9ecd624818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7a:c8:46:8c:cb:99:cb:d5:04:2e:be:4b:1a:
f9:ee:e1:ca:23:e9:db:32:30:e8:d1:df:fc:d8:81:
46:18:c0:90:f0:c5:21:9f:53:40:a4:73:c1:45:c7:
38:cf:f8:2c:70:21:68:06:cd:a7:49:c5:6d:e1:91:
9d:57:ac:d3:51:c9:94:98:ac:6d:55:9c:69:da:92:
9f:c2:03:84:67:35:30:f9:5a:ed:9e:e0:3a:e0:2e:
1e:83:2b:cf:10:a2:9b:d7:ae:49:76:1a:73:21:11:
60:b3:80:7b:da:09:b0:08:22:74:bb:be:26:71:58:
ae:dd:b5:00:f0:72:5a:82:9e:b3:82:b3:1b:f3:34:
24:7c:64:ec:c4:7a:01:50:7e:a8:ef:10:9c:d1:a9:
aa:e7:55:3f:74:35:3d:80:39:e8:7d:9a:89:0f:58:
b0:c5:92:f6:b6:22:f0:24:17:1c:f4:8a:99:3d:f9:
01:ce:39:fb:a6:f8:9e:9a:b0:b5:b0:85:38:3f:c1:
e3:45:50:84:ca:54:f8:5b:62:1c:d1:39:36:e8:e2:
84:f8:0f:e1:c1:46:9f:b2:eb:97:0e:46:ad:c7:cf:
7d:29:0c:35:f3:d9:84:13:34:ac:a9:96:f7:92:a8:
27:17:6a:6c:67:da:a3:ec:a9:4e:c7:2a:cf:ac:62:
47:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:67:81:20:17:0B:38:9C:40:4F:33:9F:B5:49:CA:C1:B3:CC:AE:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/424559f4-c86f-3c00-8557-1f395c3f914b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl
X509v3 Authority Key Identifier:
keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
sbgp-ipAddrBlock: critical
IPv4:
104.234.58.0/23
104.234.62.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:4c:ef:22:f1:c7:97:59:c6:ec:58:60:50:8d:eb:92:d2:f3:
8b:a9:a7:7d:67:a4:31:24:fa:c6:99:b3:4c:7c:1a:8f:12:a0:
62:7e:b9:7f:ec:f9:ea:97:82:c3:9a:74:d5:bf:f2:14:b6:d1:
0d:6c:59:9f:66:bc:57:05:37:50:e9:df:fa:5c:5a:ef:a0:76:
25:cd:df:73:16:cb:19:79:03:fd:1b:8b:9d:6c:ce:f1:2e:25:
fb:03:f6:c5:65:ec:c3:92:50:01:b4:aa:87:4d:a0:15:59:0d:
dc:b1:83:a0:ae:c7:af:81:f9:36:9d:93:bf:52:52:6c:f5:61:
65:c0:b0:a3:1d:dd:b3:fa:55:59:93:1c:7c:0f:40:a9:7f:da:
f8:b2:8b:6d:a2:a3:2f:fd:9f:b4:79:f0:70:4c:2d:69:e5:bf:
a0:a1:85:cb:65:7d:07:1f:bd:24:e3:c4:6f:43:7a:b2:f7:bb:
0a:5f:0d:32:c2:a4:57:5e:08:61:76:c9:f1:eb:cb:cc:2c:05:
7e:01:25:7d:2b:58:7a:44:e4:bb:80:ed:3c:78:af:00:a3:76:
ba:11:2f:00:24:fc:18:30:3f:63:b3:26:53:2c:e0:9c:63:82:
57:d8:13:fd:d1:0c:f0:7e:63:d6:ed:fc:05:f9:f9:4e:46:65:
b2:26:a9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:48 2023 by rpki-client on console-ams.rpki-client.org