Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/13429739-5de1-3638-a7e4-ce4dcb17f1d4.roa
File: 13429739-5de1-3638-a7e4-ce4dcb17f1d4.roa (raw, json)
Hash identifier: /Io0fd+n2riMVYZ9nPSh1Zgb7dZtM/beLojqAoiD9Qk=
Subject key identifier: 43:49:B2:F4:D1:CF:42:2E:7B:69:62:12:C5:FB:03:1F:78:57:EA:59
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0FC92B41CDAB014B4F780
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/13429739-5de1-3638-a7e4-ce4dcb17f1d4.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 41264
IP address blocks: 104.133.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:fc:92:b4:1c:da:b0:14:b4:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=1d15cb96-5e17-4b1d-bf09-a6244de0e584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d3:dd:73:34:0c:17:37:cc:b6:a0:05:33:3e:
3e:cd:e7:26:91:df:9d:94:3a:2b:c8:2f:a1:b4:f1:
85:5a:e8:f6:7c:ed:89:2a:51:73:87:91:07:07:6a:
6e:b2:09:de:93:e2:a1:ad:b1:1a:1f:39:3a:0c:9f:
b8:83:b0:0c:b7:57:69:2d:13:d1:9d:37:82:56:5f:
ce:76:0c:37:36:f4:07:30:e6:02:8c:f2:47:c2:97:
a6:b5:96:3f:ed:b7:e4:01:f9:27:68:fc:99:d7:66:
22:70:1f:fe:1f:51:b8:2d:f9:e1:f9:9f:bd:0e:cf:
5a:ca:27:ba:27:b6:4a:2d:14:b5:86:19:c0:95:0f:
30:cd:c4:37:ce:a8:f2:e1:91:2e:dc:53:59:84:ee:
c2:0a:d7:ad:b5:60:fc:99:8f:b2:2a:e1:b9:15:63:
07:67:27:9a:83:1d:5c:d6:ad:e7:42:ef:8c:29:9d:
3b:12:28:a3:15:d9:0f:cb:d2:c9:e0:5d:2b:b1:48:
28:bf:62:06:66:89:7a:ec:de:00:eb:53:e4:6d:13:
47:03:7b:c7:62:b6:09:90:ea:16:8e:e1:6e:56:d3:
27:66:14:81:69:54:cc:77:1f:8a:5b:07:29:1f:95:
53:17:89:cf:bc:01:ab:fe:9f:28:80:11:9b:20:31:
97:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:49:B2:F4:D1:CF:42:2E:7B:69:62:12:C5:FB:03:1F:78:57:EA:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/13429739-5de1-3638-a7e4-ce4dcb17f1d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:84:3d:c1:c3:5a:92:2b:10:30:32:d8:fb:62:a0:47:40:2c:
90:e1:5a:e9:a2:3c:9b:23:7a:d2:b1:7a:f1:13:a7:46:df:7e:
ff:7b:25:93:79:a4:c3:ff:25:06:e7:fd:80:0b:98:04:41:3c:
d9:85:57:b2:09:04:e1:67:ad:3a:80:6e:d0:86:88:39:56:b9:
96:ae:c9:18:e6:ca:19:a6:74:46:72:9f:14:87:1a:11:99:02:
ba:8e:9f:1a:48:95:78:28:c1:75:5e:36:a6:0f:9a:0d:1e:cd:
5f:d6:24:38:37:58:86:5d:1d:0b:ae:c1:45:68:17:24:16:8a:
f4:49:9f:9c:8d:b5:8a:53:7d:cc:9e:bb:2f:b9:1f:de:7e:f6:
92:78:4c:83:e8:95:0a:e5:6a:85:69:b8:ee:b1:8e:d5:42:18:
1b:ef:be:be:38:19:3b:56:d5:de:8f:96:7a:89:11:84:11:40:
af:14:14:ba:c4:9b:9c:1a:af:ab:a7:f4:7c:60:9e:d7:47:79:
24:97:23:e3:9c:74:47:40:92:85:27:98:c4:0b:d9:d8:34:c3:
f4:c2:a1:12:1c:73:d1:0d:17:64:2f:03:f0:86:33:e8:c8:1b:
68:d7:e2:54:e6:c1:0f:88:d1:a2:f6:8a:ae:f7:d4:3b:12:70:
97:31:ce:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:20 2025 by rpki-client