Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1034f7e9-a751-337a-a27e-2f56bb7a502a.roa
File: 1034f7e9-a751-337a-a27e-2f56bb7a502a.roa (raw, json)
Hash identifier: ECszmI9u+W2yf6F7mu4MQhxN0LwjJSiGGjPty+tNFZ8=
Subject key identifier: 63:0B:30:68:0C:25:D9:C7:94:07:A0:6C:7C:F5:69:4B:CE:C5:C7:C0
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848BFEBAC5A605B5B5D7BDD67E0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1034f7e9-a751-337a-a27e-2f56bb7a502a.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 15169
IP address blocks: 104.134.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:ac:5a:60:5b:5b:5d:7b:dd:67:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=7f07ae9b-8963-4972-924c-0746a95f24e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f7:ee:4c:dc:27:87:93:83:ed:ea:5a:54:12:
00:31:b0:d3:d5:49:f8:10:8d:99:90:eb:be:12:6b:
af:c7:1e:5a:31:61:7f:94:8c:0c:ee:27:f4:c7:39:
8f:56:c6:57:49:32:c9:2a:0c:3f:ef:87:6f:10:d9:
8a:79:44:a4:bc:ab:b2:da:2c:a1:cb:84:e7:98:9a:
96:1c:a0:03:c7:95:49:6b:ee:6c:8c:07:f4:f9:ab:
43:c7:39:d3:da:10:30:41:4f:d2:c6:8b:df:2c:d3:
3d:a4:0a:b6:66:2a:28:24:53:28:44:21:20:fc:b5:
57:bf:e7:67:a5:a3:07:27:07:5d:1e:55:ec:72:e2:
8f:34:5f:07:c5:b3:81:c8:da:30:8c:78:3b:17:f0:
e9:f8:cc:ee:1c:8d:08:1e:2e:a5:4c:26:ff:fe:fd:
57:7c:79:e2:51:b1:37:ee:95:0d:13:c5:2a:58:aa:
ea:05:14:62:95:5f:51:c2:3b:1a:40:79:fb:33:45:
31:9c:ca:27:d8:dd:83:d1:ac:6d:db:00:05:6a:4a:
5f:bf:62:67:a5:e9:f9:e5:c5:30:10:c3:ad:52:f8:
f3:f7:5c:6b:9b:8a:e9:ac:36:e4:18:94:88:16:44:
42:60:ca:a9:58:1e:6b:35:a2:ab:9e:db:2c:31:bd:
70:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0B:30:68:0C:25:D9:C7:94:07:A0:6C:7C:F5:69:4B:CE:C5:C7:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1034f7e9-a751-337a-a27e-2f56bb7a502a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:e5:41:8e:41:06:52:f4:98:af:95:b1:5d:84:4f:ce:ad:74:
aa:41:bb:62:ea:bd:3a:47:95:51:a2:b4:bc:e3:b2:76:62:64:
81:04:d1:d6:3e:51:bc:45:26:3e:4a:62:b9:d4:f1:7b:17:2f:
c2:6c:a6:02:7e:df:88:b7:78:6d:92:05:a4:10:05:50:df:98:
64:cb:0b:f3:2f:48:82:c6:d9:ab:da:0e:cd:29:17:f6:a2:de:
6b:cf:a2:10:25:65:c9:de:51:d5:49:d3:d5:30:1e:01:79:6e:
74:8c:de:fa:f3:ab:1e:e1:c9:a1:a0:21:91:90:0a:3b:39:b5:
74:3b:6e:05:d6:39:df:ca:33:f2:c7:91:ed:da:80:be:aa:b8:
b4:bf:a1:0e:da:ec:47:57:8e:b4:c7:1c:85:4c:7e:90:99:d4:
c3:a0:ac:01:4d:a5:f9:80:1e:b2:c8:2f:ea:a2:f8:b0:9f:8c:
92:ae:cb:a4:f7:68:86:33:51:9c:fe:ec:6f:5c:77:7f:ab:30:
61:a0:d7:c5:cc:c5:48:b9:48:c5:d5:0d:fb:fb:0c:56:aa:b6:
63:c7:ac:75:73:af:f0:d1:fc:85:bf:0a:d3:6f:07:a1:de:59:
e3:aa:ca:b4:d5:c6:43:b1:57:58:df:b6:6f:49:17:8c:99:f7:
27:78:79:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:26:14 2025 by rpki-client