Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/10938a3f-28e7-32a8-9978-2a1a02639726.roa
File: 10938a3f-28e7-32a8-9978-2a1a02639726.roa (raw, json)
Hash identifier: 0cguL+vIEq3bbpjtlA9gC6rcbwPCgCeetnSI0kbovJQ=
Subject key identifier: 1E:46:97:D5:9E:80:C4:A8:8A:5E:68:29:FB:13:7D:37:C8:4F:65:1C
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0E6A4B36496EC2B7BE030
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/10938a3f-28e7-32a8-9978-2a1a02639726.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 15169
IP address blocks: 104.134.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:e6:a4:b3:64:96:ec:2b:7b:e0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=3dfb2537-5dca-489f-a768-8c92438b69ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:00:ba:d9:72:a2:86:b7:55:4a:6a:0e:34:aa:
4f:97:07:62:f7:b7:eb:1d:2f:ba:a8:af:e7:85:fb:
f1:34:44:af:40:86:f7:fc:39:0b:b3:02:65:7f:47:
e0:bb:31:0c:e7:6b:c5:37:48:d0:cc:47:b4:ff:23:
c2:09:34:64:07:82:df:11:3e:56:09:ff:90:5e:ae:
46:d5:b9:4e:ac:98:b2:c1:60:89:9c:1b:9f:b3:d2:
99:16:bf:a6:3e:85:5c:36:ff:1c:05:a4:b7:c7:69:
fc:4c:09:fd:6c:33:71:a7:6b:87:ac:71:ee:be:64:
df:d6:00:08:2e:14:a2:35:37:d7:0a:54:55:18:3a:
a2:12:54:06:ad:43:c8:7e:fa:ff:02:bb:56:ab:cf:
84:49:a1:24:26:87:31:b9:bb:5e:dc:b5:75:c2:00:
f2:81:32:e2:6a:12:49:d9:e1:bd:9f:89:ca:7b:05:
d9:52:81:7f:75:65:d7:87:ec:0d:16:41:0a:03:cf:
b5:3e:af:20:c3:ea:c4:aa:c7:2c:1d:22:27:b1:2c:
01:e8:a8:d1:1d:0a:f6:60:b7:c6:8f:e2:c3:0c:78:
0e:12:6c:53:93:52:64:3f:b7:6e:04:96:9f:96:03:
cb:7c:49:24:d8:b5:26:21:85:1c:52:e2:a3:cf:4e:
71:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:46:97:D5:9E:80:C4:A8:8A:5E:68:29:FB:13:7D:37:C8:4F:65:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/10938a3f-28e7-32a8-9978-2a1a02639726.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.174.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:b9:e3:b4:69:3d:4d:46:65:a4:41:f7:7a:d6:69:ab:0a:f2:
c8:94:c9:3b:de:74:78:a0:a3:95:2d:26:ad:3c:cc:ab:54:3e:
b6:41:77:e3:d0:22:bc:85:8f:8b:77:a9:a6:07:e0:60:45:3f:
1b:73:c2:66:b6:19:1c:97:06:99:3f:fe:cd:39:1c:ec:b8:d1:
e3:21:e0:84:50:d9:de:fe:c8:28:f3:46:b6:56:06:b6:db:35:
85:84:16:d5:40:00:55:03:94:42:ed:88:7e:88:91:b8:67:02:
c2:3e:1c:a4:4d:c3:2a:2c:0a:92:12:b7:0b:51:a5:bc:43:12:
cf:f2:0a:09:d7:b7:03:af:e4:04:01:32:f7:f9:01:84:b0:15:
c5:ca:31:40:a2:fe:ce:ab:b7:c8:49:df:62:0a:ec:1f:b3:42:
aa:19:ea:4c:e6:75:4d:39:57:f7:eb:2f:56:27:41:8a:a9:86:
6d:bc:f8:a5:34:fc:68:fc:aa:07:c5:4e:89:7f:c1:8a:0e:0c:
25:29:ee:a7:89:56:33:43:93:fe:62:e7:e9:e1:91:6b:8f:77:
96:52:9c:ba:4d:bf:ea:00:63:c7:62:e2:1b:2a:57:ab:9c:58:
2d:fe:7b:fb:97:d6:2b:34:68:28:d8:2d:61:80:5d:1f:05:8c:
77:1e:af:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:43:51 2025 by rpki-client