Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0dd6621b-2623-36b3-af5c-99f07dc59cf1.roa
File: 0dd6621b-2623-36b3-af5c-99f07dc59cf1.roa (raw, json)
Hash identifier: mFcPddMht7YI12xf0+ZvxqaiA+upDtKGwQZMRR/mYLc=
Subject key identifier: 21:5C:94:D9:A1:C6:9E:62:17:29:EC:E6:C3:20:9A:26:4B:97:1A:60
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B1F6472E10BA6890437EE260
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0dd6621b-2623-36b3-af5c-99f07dc59cf1.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 41264
IP address blocks: 104.132.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:47:2e:10:ba:68:90:43:7e:e2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=8509dcda-9a8b-46c5-96d2-09654e917a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:88:60:fa:f1:47:4b:d1:71:50:cb:a9:e5:52:
fa:fa:8b:b0:8e:c7:32:ef:ff:62:63:12:2d:0d:d9:
26:c0:00:f0:6f:24:6f:23:f2:1a:e8:f1:a1:e0:c4:
78:09:1e:ca:b9:9b:bf:b2:96:8d:48:28:22:b8:a0:
dd:bb:85:8a:60:cd:e6:17:a2:b8:07:e3:6d:8f:27:
b5:39:11:e5:d1:85:e6:43:67:e1:a0:ee:26:04:7a:
75:1d:32:b6:55:3a:b1:59:17:26:a6:67:24:79:13:
31:9e:c3:39:a0:48:a6:94:cf:e6:3b:b1:f2:7f:d5:
42:39:ef:b3:da:0a:f9:6f:29:51:8a:ed:76:d7:47:
0f:97:de:fc:03:08:98:e6:97:d5:0e:08:e5:c4:57:
ef:be:6f:e7:86:cf:c8:aa:aa:90:c2:e1:38:23:fa:
10:7e:ac:77:2e:1e:cc:49:34:c1:63:f2:e3:55:63:
c3:f5:76:d8:48:b4:d6:d6:28:3f:23:a0:23:27:d1:
2d:62:4c:4d:16:11:eb:4a:84:c2:45:37:32:4b:7d:
3f:7f:19:11:35:38:bc:23:0c:b4:03:1d:51:93:6e:
93:d2:16:d9:a2:e0:46:ca:6c:78:22:f1:25:ef:4a:
6c:f9:2c:0c:61:41:1d:dd:3a:d6:41:28:20:f2:2a:
40:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5C:94:D9:A1:C6:9E:62:17:29:EC:E6:C3:20:9A:26:4B:97:1A:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0dd6621b-2623-36b3-af5c-99f07dc59cf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.44.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:58:13:b7:f3:80:ef:6e:ff:ea:47:da:09:ba:44:64:61:9f:
bc:70:52:78:7d:62:b0:6e:94:25:b7:93:fa:74:01:e6:5d:c8:
5b:eb:d1:04:a1:1d:d2:82:06:d6:f8:84:db:b7:2f:4e:a0:01:
66:6a:e5:ef:9f:e0:4c:93:12:b9:f0:5f:7c:2e:d1:f3:39:97:
05:bd:7f:d8:0d:82:fa:ef:48:fd:c0:df:ef:36:5c:40:6c:c6:
1c:09:4f:7c:cb:19:d6:5b:73:13:e7:d7:71:00:02:bb:b2:b7:
db:e8:e9:b8:84:5d:65:05:3a:cd:41:4d:0a:b5:a9:12:42:b1:
2c:c1:7c:75:12:6c:d7:40:70:e9:76:93:21:82:44:0a:94:e3:
ae:0f:b8:6e:7c:57:5a:29:b9:42:82:f6:3c:13:cb:86:8b:7b:
d8:0c:d6:75:dc:2f:c0:9d:99:9c:ea:12:8e:ab:ff:d6:33:76:
75:2c:b5:79:2e:57:b6:37:08:bf:98:cb:70:59:e7:f8:5a:b8:
6a:b2:7c:cc:83:57:44:21:56:a8:7d:91:61:71:5d:2a:d3:1f:
f1:3e:72:b1:29:bd:09:50:07:35:89:b3:ab:8b:3c:16:fc:3c:
5e:e8:e5:eb:80:14:22:46:4d:ef:57:50:db:ff:b3:fb:f6:b2:
b4:98:67:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:44:21 2025 by rpki-client