Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/187c7be3-3ba2-3c18-9c42-498f367717b1.roa
File: 187c7be3-3ba2-3c18-9c42-498f367717b1.roa (raw, json)
Hash identifier: vjwQHv9DXRdRM2CGBwXDGR33+q3lLhNV/m5yi3YH9Gw=
Subject key identifier: 92:B6:BE:43:BE:EB:7D:F3:19:D8:CF:20:6A:6E:D8:BF:A6:0B:64:29
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0FB63260C315037455380
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/187c7be3-3ba2-3c18-9c42-498f367717b1.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 41264
IP address blocks: 104.133.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:fb:63:26:0c:31:50:37:45:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=38eacfb8-a478-467c-add1-2547de0c3f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:92:8e:a7:61:b3:c9:b2:95:d0:c0:fc:71:
4c:07:29:08:85:ca:ba:ac:1d:59:4d:12:ca:a8:7b:
b2:53:f0:d1:5e:9b:73:f9:3a:77:28:17:08:6b:44:
08:5f:05:f5:6e:1b:4e:aa:69:8b:28:07:ea:b0:8b:
7e:88:0a:f8:25:c4:42:63:65:3b:10:bd:69:a3:60:
b9:fd:cd:17:ce:93:98:7f:4e:da:60:89:1a:5f:f5:
8e:47:9a:42:3b:c9:5c:44:ce:3f:82:d4:f4:eb:a3:
17:05:f8:c3:2b:69:b5:ad:46:f9:ad:c3:7f:6c:77:
6c:ba:28:45:d8:01:a6:c2:9a:3b:1a:f3:34:2e:7d:
9c:13:35:90:ac:a6:fd:9a:01:0a:59:8b:df:2c:25:
28:0a:5e:f2:8f:f0:9c:c9:e0:8a:32:01:f8:f6:be:
d2:ed:65:2d:48:d3:db:9f:18:97:76:35:cd:e9:f4:
c6:09:ce:af:fd:50:7d:b6:d2:4e:b4:b3:be:db:b3:
73:23:2f:c4:23:0d:3b:ec:50:a8:f8:98:f6:fc:a6:
af:80:43:70:98:a0:60:15:9d:e6:59:20:aa:ed:70:
9e:2b:95:a3:70:69:9e:3f:e1:7c:41:ba:86:09:42:
36:4e:47:15:89:db:7e:94:66:49:7e:eb:7f:bf:0f:
82:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B6:BE:43:BE:EB:7D:F3:19:D8:CF:20:6A:6E:D8:BF:A6:0B:64:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/187c7be3-3ba2-3c18-9c42-498f367717b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:ce:91:5a:61:db:e1:c3:bd:c0:9b:05:61:b8:97:08:a4:70:
c8:c6:6c:f2:71:00:cd:b5:55:67:86:b0:80:bc:64:56:36:8a:
7c:2e:f4:2e:2f:a4:a6:10:63:82:19:25:8d:ae:62:10:e0:d7:
02:aa:bf:d7:1b:2d:a8:95:a8:db:2c:b4:6d:72:67:1e:9e:15:
6f:f9:fa:d9:54:90:d0:6a:84:cd:d7:03:0b:85:1d:59:89:9f:
a0:f6:b5:7e:6e:05:ac:81:d4:08:b1:74:77:b4:27:65:12:c6:
d7:5d:fb:ad:b6:f2:ea:67:f6:e5:46:76:b9:d5:63:50:99:0a:
4e:ff:bf:0a:54:5b:51:3d:a5:91:ed:e5:a8:70:cb:82:1c:80:
f7:d3:84:8c:8c:b4:e8:ec:2b:74:3d:0a:67:ed:c2:71:02:7f:
f8:a6:3c:72:50:5a:07:63:44:e6:d0:d7:8c:86:02:c0:7f:4d:
8d:f9:15:a6:13:56:97:35:88:71:29:3d:dd:09:df:e5:66:39:
94:4b:3b:dd:b7:9a:1d:b6:93:cb:29:8d:36:fc:b8:44:21:12:
74:46:19:f3:47:52:e9:48:a5:9a:b2:47:b7:2a:17:c5:eb:0a:
07:19:39:cc:4f:f6:c4:cd:e6:f2:e1:da:32:7e:b0:8f:42:8d:
d9:5b:f0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:34:17 2025 by rpki-client