Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/16ce82d4-b68f-3ba3-9fa5-4ef8027ac86d.roa
File: 16ce82d4-b68f-3ba3-9fa5-4ef8027ac86d.roa (raw, json)
Hash identifier: SZTo/UT3tCsLqapNfuIe6sDZu85iMKpJaaxEwNL1XVs=
Subject key identifier: 08:DD:1D:0A:03:82:05:B6:1B:AC:81:2C:ED:83:0E:34:0F:79:DE:6B
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0DDADFD3DE4B5EE6E2F40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/16ce82d4-b68f-3ba3-9fa5-4ef8027ac86d.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 41264
IP address blocks: 104.133.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:dd:ad:fd:3d:e4:b5:ee:6e:2f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=87da87b1-9bec-4fd9-aa11-d9cd2c570865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:53:e7:ae:00:8e:99:d8:db:aa:ef:2c:76:62:
53:d5:9c:84:75:0d:f8:ee:d9:e6:8b:0c:93:97:39:
3c:d8:88:24:84:e2:3f:29:3e:69:eb:6a:a7:48:34:
ef:9b:b4:c5:46:aa:b6:e7:73:84:f0:71:d4:79:81:
5f:97:73:ec:a4:4d:06:69:59:21:c7:92:68:08:60:
2c:31:4c:aa:2b:7d:29:38:27:aa:a4:b2:81:f6:90:
24:e3:28:d1:33:13:29:4e:9f:6e:38:72:b9:90:bc:
fa:12:4f:71:8b:3f:98:6a:5c:a8:9f:fa:69:05:31:
5c:fa:bc:78:13:b4:c7:e2:b7:16:1c:82:63:02:06:
0e:99:d7:2e:8c:1c:97:ca:b4:cb:5e:4d:0a:14:85:
fc:48:28:89:ad:74:73:00:d6:53:39:46:f3:da:04:
2a:8d:bf:50:d6:b1:03:05:30:f0:20:90:30:e2:ef:
b9:9b:44:b4:f4:28:67:62:1a:2d:9b:6c:d8:d3:d3:
7d:3b:ae:01:81:62:01:69:91:19:f2:58:1a:de:52:
d8:0a:d2:83:75:8b:ec:55:35:8d:c4:9c:35:19:92:
db:d6:d6:9c:e0:39:60:8e:f8:9a:6c:1b:b8:b3:85:
f6:d3:8a:50:46:35:70:61:8b:5f:ff:52:b1:7c:5d:
74:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DD:1D:0A:03:82:05:B6:1B:AC:81:2C:ED:83:0E:34:0F:79:DE:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/16ce82d4-b68f-3ba3-9fa5-4ef8027ac86d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:e6:2d:6b:82:16:62:19:2f:06:0a:15:68:a3:0f:bd:c4:01:
1f:ee:d7:ea:ff:af:99:9f:3f:51:2a:53:26:e0:2f:f1:61:22:
92:f0:5c:6c:8e:5c:f3:18:a3:6a:c4:41:5c:b7:82:2e:2e:dd:
a5:43:75:8c:0b:7f:1f:c3:bb:9f:df:0c:82:2f:c8:68:27:d4:
4f:ec:2f:4d:08:bb:9b:07:49:d1:31:b1:cc:61:2b:65:f6:ef:
f8:7f:48:7d:a8:ad:57:ac:5b:ff:b1:18:43:4b:45:0d:07:57:
97:3d:d9:6e:28:c3:6b:8a:80:be:13:1b:c0:42:05:bb:fc:7e:
dc:f3:c1:94:4f:b5:a5:65:b5:52:4e:1f:f8:d5:d8:b6:6e:f9:
19:ca:48:4d:b3:03:40:e3:9b:3a:f8:52:c6:eb:e8:63:f0:b5:
ad:a6:81:77:de:72:c0:7d:be:b6:77:69:e5:65:9a:fc:15:96:
37:f2:74:d0:4f:9a:46:71:2a:86:df:64:16:98:8c:99:40:bf:
b6:26:bf:43:20:df:16:5a:79:63:38:cd:e9:ac:5b:4e:85:c6:
a5:9f:49:44:cb:de:b0:f8:f5:bf:69:a2:71:37:81:f7:15:13:
02:0a:a6:85:8b:6f:77:9a:a8:68:ef:03:74:1c:c4:bd:ec:5d:
86:fd:b8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:41:37 2025 by rpki-client