Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/126cbd86-2d41-3646-adc6-e1c48d59bebf.roa
File: 126cbd86-2d41-3646-adc6-e1c48d59bebf.roa (raw, json)
Hash identifier: Ppqa1wu3MpTJfQFbeweCdpP9atOS3QBV9CiYapff6QU=
Subject key identifier: 05:D1:AA:B5:D1:61:5A:F6:0A:19:E3:39:93:FA:1D:FF:13:69:A8:52
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848D7061BA1F06304C2F8CC2B80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/126cbd86-2d41-3646-adc6-e1c48d59bebf.roa
Signing time: Mon 10 Feb 2025 20:37:59 +0000
ROA not before: Mon 10 Feb 2025 20:37:59 +0000
ROA not after: Sun 11 May 2025 19:37:59 +0000
asID: 36411
IP address blocks: 104.134.112.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d7:06:1b:a1:f0:63:04:c2:f8:cc:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Feb 10 20:37:59 2025 GMT
Not After : May 11 19:37:59 2025 GMT
Subject: CN=38a585c4-f690-479a-b89a-af768b8e054c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9c:e1:8b:f7:de:68:84:ac:3a:f4:c9:e7:bf:
da:6c:08:90:ee:ac:cd:16:b3:f6:ff:f4:9b:fc:a7:
40:f1:ff:f1:34:20:e8:fa:a9:ab:a8:87:83:bc:2a:
e0:f6:ec:f0:53:7b:f0:18:f4:aa:dc:23:60:71:54:
5f:3e:76:93:55:2c:be:93:47:42:49:62:60:12:fe:
b9:05:2e:43:4e:40:75:f1:52:71:4e:4e:00:c8:0c:
86:61:2f:6b:75:af:21:05:8d:8d:52:af:c7:7e:3f:
93:0b:03:71:86:20:92:59:68:16:4a:90:05:64:f1:
d6:5c:62:4d:35:dc:6a:4d:ba:c1:1c:76:f5:58:2b:
7a:32:86:1a:46:38:5b:a3:c1:39:f8:a4:42:b3:a7:
f4:41:1b:f8:95:8c:29:53:47:95:d2:90:72:ae:b6:
e9:53:b8:d1:c2:6c:6b:17:bd:e4:da:83:ba:1e:b9:
6e:bb:44:ac:1d:e3:98:1e:a0:18:89:9d:9f:66:00:
90:ff:ec:b6:aa:70:2f:8f:7f:3c:e9:cd:36:bb:7a:
b4:e8:a6:03:69:c6:7b:ba:56:bb:9d:b5:b8:71:dd:
35:04:ff:d8:63:d8:4d:bb:2f:5a:0e:3e:f2:a1:23:
85:ea:5e:bf:65:72:f1:13:9d:fe:37:00:d5:bb:f2:
c9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D1:AA:B5:D1:61:5A:F6:0A:19:E3:39:93:FA:1D:FF:13:69:A8:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/126cbd86-2d41-3646-adc6-e1c48d59bebf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:61:23:e8:3f:1e:c3:e7:da:a4:2d:f6:3e:2b:c4:1a:8d:22:
07:1b:eb:6d:30:08:d8:cc:25:63:15:b5:ea:56:c9:82:43:2f:
24:bc:25:43:98:4f:3a:d1:6a:9d:08:ba:60:02:29:1b:9e:a9:
1e:49:fd:a1:19:7e:ce:db:d8:1b:f2:a1:5a:30:04:ce:f6:3f:
ac:a3:96:24:86:ec:77:fe:01:08:38:e9:ba:4e:6a:9f:c4:4a:
b1:f5:be:e6:8d:fe:56:66:69:94:0b:86:8d:b6:1c:27:71:9a:
6b:c6:41:d9:da:17:ca:a4:a2:8c:6e:54:25:53:46:4e:c8:00:
c6:e7:86:45:9c:95:5e:fa:08:9c:79:f3:96:63:a2:09:74:dd:
10:2c:71:06:6c:0d:94:e8:42:b6:56:0a:df:9c:f5:1e:2d:9f:
df:c9:0a:b9:01:12:a0:76:ec:07:72:b2:f3:80:88:ac:65:e6:
fc:d7:c4:51:71:99:8b:9f:71:25:c2:ba:99:3e:29:4c:ea:4d:
ce:87:b2:0a:66:3a:a9:ef:38:07:ef:ce:a9:a9:75:10:f6:7a:
bd:5d:29:74:1d:be:d8:8e:f7:c1:ab:85:8c:54:12:f7:29:79:
1d:ec:b3:45:0d:b0:6f:f8:b3:3f:cd:d5:fa:27:08:a3:d3:a5:
10:51:0d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:43:40 2025 by rpki-client