Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/17017173-73d0-3433-83e6-cdd80b424777.roa
File: 17017173-73d0-3433-83e6-cdd80b424777.roa (raw, json)
Hash identifier: LGJRbPAjN8JGmyDg0Ydu4TuZL55zfoULI0AAI7igbt4=
Subject key identifier: 32:8F:C9:FD:0D:4D:D5:78:5C:FC:2E:B4:4A:49:45:F1:62:9B:8A:05
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0F821F38E1AD151DF7380
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/17017173-73d0-3433-83e6-cdd80b424777.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 15169
IP address blocks: 104.134.160.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:f8:21:f3:8e:1a:d1:51:df:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=54feb6f4-cd3d-43cc-86e5-d53d9f754535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:14:17:95:dd:ce:7a:f9:b0:7e:33:f7:50:c1:
0c:b6:71:f0:34:b4:52:8f:9e:55:dc:87:4c:32:5d:
7d:c2:0f:aa:da:c6:b3:54:15:10:16:3b:5b:d8:26:
36:5c:8d:fc:39:98:ab:c0:ed:77:5e:76:7e:08:d4:
e1:c3:f9:95:52:8c:03:20:2a:5a:a0:6f:2d:54:f5:
b9:02:4c:86:bf:e9:ac:c4:6d:dc:30:79:a0:60:c2:
9b:91:e8:f5:7c:65:83:ae:9c:95:66:12:9a:ab:0e:
c9:4d:0b:68:29:93:27:c1:be:4b:04:51:da:eb:7e:
f8:46:78:12:39:ce:96:0a:94:2a:5c:be:47:59:78:
5e:e8:e9:67:5b:e0:ed:e6:d0:d5:6b:fc:07:2c:87:
3e:c2:c1:d7:3a:ce:a9:fc:68:58:46:a6:20:de:69:
dc:c1:3d:f1:c1:da:cf:34:43:21:01:75:26:f4:8d:
c5:85:9d:ff:23:cf:53:76:9f:8c:72:8e:71:05:cc:
40:a6:26:28:9a:3e:4a:64:c2:c9:57:f4:92:c5:a1:
96:07:24:56:49:6c:81:b4:85:b2:46:ba:2a:2b:81:
63:37:7b:4b:30:e5:5a:ad:1f:61:4d:e9:67:6d:07:
f1:e7:a1:fd:fa:15:97:24:85:45:97:27:8d:8e:62:
ee:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8F:C9:FD:0D:4D:D5:78:5C:FC:2E:B4:4A:49:45:F1:62:9B:8A:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/17017173-73d0-3433-83e6-cdd80b424777.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:49:4b:d0:04:4c:26:e5:ba:be:5e:4c:c7:44:98:dc:14:93:
14:26:ff:43:42:64:37:78:5b:64:1c:67:ac:e9:90:02:85:e4:
b3:81:ec:83:c7:bf:d7:01:ed:ea:f0:b2:c3:ac:53:60:09:5a:
90:ba:bf:3c:34:d1:2b:b6:35:ef:f0:24:93:0e:75:ac:7d:01:
c6:3c:3d:d9:48:03:d4:cc:f1:62:4e:ea:cd:21:4e:f6:9e:03:
ca:a8:24:f5:20:18:e2:89:41:96:3b:89:35:4b:46:4c:88:b3:
4a:c7:cf:05:22:70:b4:47:89:b4:4e:1e:34:df:c4:ce:60:c9:
f1:9c:69:43:c6:9a:1d:94:80:e3:ba:b1:80:d3:f6:5f:10:c3:
56:94:b6:70:c9:77:d8:41:f8:8b:c0:5e:1a:64:15:28:85:c0:
a7:7a:c0:2b:f2:ed:51:02:b8:93:ca:10:18:58:6a:62:3d:e3:
d9:80:d8:1a:bf:bc:df:50:70:86:35:d8:d6:ce:96:19:8d:94:
ea:29:ca:7c:a6:80:50:36:d3:60:28:bb:d0:38:ba:bd:7e:a2:
da:64:02:10:1a:fa:18:0f:74:b5:4e:ce:cf:2d:73:a2:b7:a0:
72:5a:dd:a8:97:c1:8a:96:83:a2:b6:c8:3e:98:ff:3b:8c:6f:
8e:71:7e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 09:00:47 2025 by rpki-client