Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0b7bce3d-8220-3e6b-bda4-34bbe9f0b186.roa
File: 0b7bce3d-8220-3e6b-bda4-34bbe9f0b186.roa (raw, json)
Hash identifier: iMjycxZf1nbOKocxdCa0WIjSbBksu5wKITD7KW90Smc=
Subject key identifier: 46:9D:27:28:7C:64:55:11:C6:B2:99:0B:52:FE:CB:C8:B5:E8:64:F5
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0FAFED821E1AE2F296080
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0b7bce3d-8220-3e6b-bda4-34bbe9f0b186.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 41264
IP address blocks: 104.133.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:fa:fe:d8:21:e1:ae:2f:29:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=5ce23b16-c72c-4fc0-b694-9cef88bccaee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8a:7f:dc:75:b3:4e:e7:f4:58:17:c5:95:87:
2a:2b:7f:58:88:ea:fc:9c:22:de:56:13:7c:de:de:
cc:5c:77:ed:6a:f2:d7:b2:dd:59:f4:cd:f6:39:29:
92:4b:68:e8:fc:33:c3:46:4c:a7:bd:5f:96:e0:02:
c3:7b:a2:2d:e1:7a:6d:27:49:2f:d9:68:d1:0a:60:
95:e8:a1:7f:09:16:7c:44:45:15:57:04:4a:be:a9:
29:4a:c7:5f:b9:6a:fe:e6:1c:d0:13:a5:da:c8:92:
7c:20:5c:ee:cc:b8:9d:22:4b:0d:f2:0e:d7:7f:8a:
ae:bb:ca:4e:22:41:95:82:04:6c:31:e8:94:ac:3d:
84:3d:36:d2:42:92:5b:83:89:16:bd:37:21:43:d9:
b7:2d:f4:98:ed:11:c3:40:e9:c6:21:90:40:2b:e8:
0b:f8:55:e9:4a:8c:5a:af:83:c2:f3:60:0e:7b:9e:
3b:5f:85:40:40:eb:2c:8b:8e:f4:62:8a:db:1a:1d:
4f:6f:33:2b:f0:fb:b6:40:8f:10:27:be:d3:d9:04:
17:a5:1e:d0:3c:c4:52:04:57:0d:84:c8:7a:71:fe:
c6:fb:8c:10:57:ba:2f:41:c5:ae:b9:f5:fd:fa:4a:
85:bc:10:04:6d:38:e4:92:ae:ed:68:ee:78:92:23:
32:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:9D:27:28:7C:64:55:11:C6:B2:99:0B:52:FE:CB:C8:B5:E8:64:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0b7bce3d-8220-3e6b-bda4-34bbe9f0b186.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.194.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:a2:bc:c5:df:1c:bf:d9:f4:49:98:46:9f:c0:ba:34:de:2c:
63:98:cf:c8:26:ae:5f:62:f8:c1:11:b5:63:d1:6c:4d:9a:e7:
e6:80:dd:c0:ab:6b:b6:e7:5e:b4:f5:58:49:fb:4f:b9:90:2a:
7d:ad:f2:17:cf:07:f5:69:2e:e1:a0:7d:2d:d1:fb:be:0f:64:
21:1e:42:bd:02:b3:78:b3:46:bc:c0:86:b2:ae:66:3d:e9:67:
36:47:19:31:42:59:5e:85:98:55:6c:dd:9e:4e:48:dd:2a:71:
a2:e7:6f:a8:e1:2f:62:80:34:ab:10:a2:bc:79:a0:9f:1e:63:
d0:75:fb:2c:1d:60:ca:54:4a:00:0a:00:49:39:9c:81:c7:2c:
a6:d1:2c:6e:c2:48:55:9d:a7:82:08:8e:dd:c8:c4:a6:3e:0d:
b0:c7:16:d4:ce:59:55:a9:e2:78:5c:c1:d9:3a:5e:81:87:49:
86:4d:d5:fe:e0:33:f1:bb:2e:f1:da:f7:f3:e5:84:5f:10:7f:
0a:70:cd:04:64:ee:db:07:15:89:f2:de:83:75:5f:89:e7:03:
80:4d:3b:b3:e3:69:bd:48:00:8b:27:4c:6f:21:25:54:ec:1c:
2f:c3:d1:f4:04:18:e8:80:f8:c9:ec:30:ff:22:e3:42:b8:f7:
65:56:2c:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wPr+2CHhri8pYIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk
NWNlMjNiMTYtYzcyYy00ZmMwLWI2OTQtOWNlZjg4YmNjYWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiop/3HWzTuf0WBfFlYcqK39YiOr8nCLeVhN8
3t7MXHftavLXst1Z9M32OSmSS2jo/DPDRkynvV+W4ALDe6It4XptJ0kv2WjRCmCV
6KF/CRZ8REUVVwRKvqkpSsdfuWr+5hzQE6XayJJ8IFzuzLidIksN8g7Xf4quu8pO
IkGVggRsMeiUrD2EPTbSQpJbg4kWvTchQ9m3LfSY7RHDQOnGIZBAK+gL+FXpSoxa
r4PC82AOe547X4VAQOssi470YorbGh1PbzMr8Pu2QI8QJ77T2QQXpR7QPMRSBFcN
hMh6cf7G+4wQV7ovQcWuufX9+kqFvBAEbTjkkq7taO54kiMyCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEadJyh8ZFURxrKZC1L+y8i16GT1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMGI3YmNlM2QtODIyMC0z
ZTZiLWJkYTQtMzRiYmU5ZjBiMTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADuivMXfHL/Z9EmYRp/AujTeLGOYz8gmrl9i+MERtWPRbE2a5+aA3cCr
a7bnXrT1WEn7T7mQKn2t8hfPB/VpLuGgfS3R+74PZCEeQr0Cs3izRrzAhrKuZj3p
ZzZHGTFCWV6FmFVs3Z5OSN0qcaLnb6jhL2KANKsQorx5oJ8eY9B1+ywdYMpUSgAK
AEk5nIHHLKbRLG7CSFWdp4IIjt3IxKY+DbDHFtTOWVWp4nhcwdk6XoGHSYZN1f7g
M/G7LvHa9/PlhF8QfwpwzQRk7tsHFYny3oN1X4nnA4BNO7Pjab1IAIsnTG8hJVTs
HC/D0fQEGOiA+MnsMP8i40K492VWLL0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:49 2025 by rpki-client