Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/13ed0d75-7d85-3f7c-afe0-121ad6d93f41.roa
File: 13ed0d75-7d85-3f7c-afe0-121ad6d93f41.roa (raw, json)
Hash identifier: j/eENycH5dRsjq+OxcIUA3yAXTMXLjcUb0rAUEp4Nl8=
Subject key identifier: 82:BA:7A:E4:1E:93:02:55:65:90:8C:1F:81:59:B9:DE:3A:72:BA:6C
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0FDD6E95BA982CFEA9700
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/13ed0d75-7d85-3f7c-afe0-121ad6d93f41.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 41264
IP address blocks: 104.133.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:fd:d6:e9:5b:a9:82:cf:ea:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=1656b989-2a08-4afe-9def-7c3792262fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:67:b8:36:f7:f7:2c:ad:0c:94:ed:34:8e:b9:
9d:20:06:16:24:0c:06:57:1f:ca:4a:ed:09:37:d8:
4f:1c:aa:38:0f:e4:73:53:aa:32:72:e9:c6:ff:3e:
bd:f4:e7:76:1e:c6:40:b1:ff:52:45:e6:7d:c2:bb:
55:fd:45:97:0f:6c:a7:c0:e8:99:db:6e:9f:89:ed:
24:53:77:22:bb:8f:f9:3b:be:1e:3d:ac:86:be:33:
75:8c:ca:7d:3a:0a:0b:2c:eb:bf:d4:3a:5d:65:74:
1f:b3:6b:9c:e3:d5:97:f6:68:41:dc:6d:6e:02:42:
1f:f0:0f:54:5e:1c:e3:7d:38:52:75:90:1c:c4:de:
34:f2:a9:59:75:a2:5f:9e:ab:3f:c2:ce:6c:8d:fc:
3a:eb:85:46:db:64:57:de:68:17:c5:7d:16:ac:cd:
61:af:dc:6f:c6:f3:17:e3:f8:a2:d1:ed:ed:25:f0:
e8:78:d0:a8:f6:80:7f:eb:67:18:fd:8d:6d:42:ec:
25:22:07:45:e4:3e:77:e3:36:14:41:1b:df:00:b4:
d5:ec:17:7a:1b:d2:63:dd:cf:47:97:ac:db:ed:78:
6b:44:51:e3:52:eb:e5:d5:91:bc:af:61:78:30:3c:
f2:e2:2b:45:52:ee:fd:45:11:79:33:e8:a3:7b:5d:
92:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BA:7A:E4:1E:93:02:55:65:90:8C:1F:81:59:B9:DE:3A:72:BA:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/13ed0d75-7d85-3f7c-afe0-121ad6d93f41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.69.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:d8:c8:db:df:82:35:3c:80:64:40:72:63:d3:d8:f3:eb:5c:
24:58:06:51:56:e8:ed:4e:b1:db:8d:0d:e0:b9:bb:d9:41:bf:
72:78:93:dc:47:1b:90:92:11:b0:6d:de:28:b5:4f:52:cb:0f:
71:2d:5e:03:ae:8f:e4:79:c6:1b:3b:f9:b7:09:bf:58:fe:97:
e2:98:40:8a:c7:c4:0e:61:63:d1:ee:2c:a7:7a:24:f1:11:49:
20:58:c7:69:bc:84:30:77:04:c1:15:e2:57:aa:4b:28:bf:c0:
46:31:ea:20:44:c7:2e:7d:82:b1:64:cd:de:ae:20:f2:58:2f:
02:50:69:2f:7e:50:e0:30:d9:39:c9:c5:02:b4:45:f3:82:dd:
11:b7:4f:d6:4a:99:bd:88:31:f9:f7:28:f8:a2:ee:65:ac:bf:
58:b6:9c:1f:68:47:75:46:a0:41:5d:99:ae:a0:4b:79:c0:9c:
29:8d:98:9d:f3:7e:12:75:83:5d:14:f0:95:db:ca:ed:10:58:
0f:5a:91:be:2f:9c:25:e3:d1:3c:a0:77:bf:e3:c3:c5:ab:3a:
be:18:fe:4d:85:92:b7:88:a6:f5:a3:dc:57:79:85:b6:c0:74:
00:55:29:c9:bd:05:eb:5e:52:a8:bf:8b:22:bb:0f:53:a0:d5:
e2:10:30:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:38:09 2025 by rpki-client