Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1761d214-6d94-34e3-a457-baf7aa9622bf.roa
File: 1761d214-6d94-34e3-a457-baf7aa9622bf.roa (raw, json)
Hash identifier: u2Mg+SNbeNIosFWu1QbiEy2+iNM9ZlldEk3IM1DRwjs=
Subject key identifier: 4B:F6:83:57:EB:37:10:DE:CA:79:B6:00:AD:95:D9:C2:B0:26:D8:A9
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848BFEBD1138289D6E225346840
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1761d214-6d94-34e3-a457-baf7aa9622bf.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 15169
IP address blocks: 104.134.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:d1:13:82:89:d6:e2:25:34:68:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=ffbabda7-9c2c-41e9-b60a-098829380563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:21:84:ed:19:e2:ed:80:ac:61:28:2e:c9:3f:
ce:0d:a6:39:80:a4:e4:c3:8a:45:7e:95:ef:00:e9:
84:c0:33:ab:9c:65:3b:27:02:f7:a0:9c:75:65:37:
4e:dc:5c:f4:e1:f6:dc:2e:b5:3b:4d:a4:c5:53:16:
a8:10:a5:fb:d9:11:aa:0f:aa:2d:e8:71:ed:09:5e:
4d:f7:ef:ab:e4:45:f6:c6:d1:a9:2b:e0:26:eb:2f:
a6:07:6d:d5:eb:b3:09:5d:d7:af:e0:55:17:af:0a:
36:7a:d9:50:c4:75:6c:49:70:5a:17:4f:23:d9:5a:
57:b1:8d:4a:58:3d:1c:32:7c:e9:8e:60:6f:c1:2a:
f3:21:5f:fa:bb:d5:83:b0:bd:dd:8d:c2:bb:17:a7:
38:75:ca:6d:15:03:c7:22:43:bb:47:4a:2a:34:4e:
a6:c8:47:77:69:43:3d:ef:5b:36:17:70:38:e3:cb:
68:96:69:9d:31:04:d3:2a:f3:51:4d:bf:45:f3:40:
aa:93:8b:d4:fc:92:d0:0b:eb:95:d4:3b:b4:80:80:
38:5c:72:d8:51:78:f4:36:da:5f:13:7b:bc:0b:9e:
c1:4b:49:e1:48:71:70:f1:b0:76:38:b7:85:12:e5:
c8:ed:c8:9b:2c:2f:a9:03:50:ba:b1:f4:0b:82:68:
9c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F6:83:57:EB:37:10:DE:CA:79:B6:00:AD:95:D9:C2:B0:26:D8:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1761d214-6d94-34e3-a457-baf7aa9622bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:57:ea:ba:9c:33:fd:6a:24:43:ee:bc:91:28:1d:e5:80:64:
8a:29:b9:8c:34:1f:b2:ca:c8:2a:20:c3:5e:88:5c:c0:08:7a:
78:8a:07:c9:e7:f7:61:72:f0:43:8f:ac:9b:3e:82:87:a7:5d:
2e:a8:53:81:04:ed:a6:59:66:ca:87:a6:fe:3e:4b:6f:2d:03:
67:0e:f6:c9:31:ea:e1:ca:77:2a:a9:1e:c8:b1:4b:ba:04:84:
e7:4c:c3:dd:ab:ce:a1:c5:1b:0f:e4:60:31:a4:99:86:0d:3b:
d6:b2:83:e8:85:8b:b8:8c:c1:c8:63:f0:73:af:37:df:3b:3f:
97:00:0f:94:8e:8d:88:67:04:b3:01:aa:f6:e7:37:02:99:dd:
16:39:1a:b4:a7:51:03:3b:93:61:96:99:fb:fe:a5:54:6c:a8:
ef:85:98:db:c9:21:7b:22:c9:42:99:33:ad:55:a3:cd:7c:c6:
cb:e2:38:48:f8:14:f9:53:23:c3:84:74:3c:1f:fc:8d:12:dd:
26:7a:0b:1f:87:e7:3b:b5:9f:ab:e8:0d:13:97:0a:4f:f5:81:
7f:9a:a0:ba:3a:0a:bb:c2:05:aa:fb:8d:50:f5:a1:65:05:cf:
57:b2:8f:13:8a:64:30:3f:2e:72:c8:26:a3:ed:fd:fe:3b:73:
0e:be:33:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:36:06 2025 by rpki-client