Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/18e46eae-aea0-35d6-a576-318e690e9195.roa
File: 18e46eae-aea0-35d6-a576-318e690e9195.roa (raw, json)
Hash identifier: Jd8l7tQ2wEsRexxN/JPI/RBg8PGRkQJLmhtRPp59sUQ=
Subject key identifier: D6:98:ED:78:EC:D8:54:1C:FA:1E:3A:EE:4E:AD:5B:32:1A:27:99:0B
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0EAB72F62C123F4466E40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/18e46eae-aea0-35d6-a576-318e690e9195.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 41264
IP address blocks: 104.133.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:ea:b7:2f:62:c1:23:f4:46:6e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=f3b9bb6d-6567-4601-9d60-e266d024bcb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:73:41:3c:fa:46:08:8b:45:1f:98:99:fd:c4:
e0:26:1c:33:a1:8d:a1:4b:ff:f0:66:36:fb:2f:74:
83:b6:67:c6:5b:5f:fd:d9:17:57:8e:8a:8c:e7:dd:
d4:32:98:50:65:aa:25:6a:6d:ce:36:16:1e:90:60:
05:5d:d0:7a:11:74:1b:5c:82:da:f1:dc:a7:83:50:
b2:08:d5:0e:66:3c:69:4d:d2:d1:24:bc:f0:27:e5:
e9:cb:a2:03:ec:9e:42:fd:fa:8b:a4:5d:91:58:f7:
e0:1a:17:3f:d3:7a:9c:32:ca:48:c2:b5:87:d6:96:
f5:c5:59:1b:5e:a6:67:6d:34:b8:6a:df:8a:af:15:
9d:16:b4:8a:54:2d:f9:e6:4d:bf:5a:a0:8a:0b:ec:
c0:d9:29:a6:85:3d:92:10:4e:50:af:19:12:61:77:
72:4f:aa:77:a8:56:d6:df:41:06:00:05:60:4b:7e:
b0:de:57:53:f7:1a:db:a1:d8:74:1a:6a:9b:fa:2b:
84:ad:85:21:2b:b6:9f:ba:2d:17:83:62:23:37:4d:
87:30:b8:a4:2f:d4:3c:c9:8b:e6:53:1c:bb:f9:70:
94:9a:7f:7e:00:06:b8:2e:86:c4:b5:40:47:87:88:
b9:b1:36:48:c8:0f:d2:5b:e5:b2:d8:8c:80:c7:13:
68:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:98:ED:78:EC:D8:54:1C:FA:1E:3A:EE:4E:AD:5B:32:1A:27:99:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/18e46eae-aea0-35d6-a576-318e690e9195.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:33:70:e3:e6:ba:87:61:b9:39:5f:60:5f:19:64:41:b4:fa:
35:92:1f:d8:d3:40:8b:f9:e2:8c:0d:a7:ae:a2:19:cb:4e:f3:
83:b7:76:21:af:64:ef:7c:e7:7d:64:aa:a0:82:fd:45:99:7c:
49:4a:4d:b8:74:3b:e7:64:54:97:95:2c:6c:95:a6:59:8a:e1:
fb:64:91:4f:20:56:d9:cb:54:90:c5:21:2c:88:51:d5:95:12:
46:72:fb:87:45:25:10:93:b3:9f:8f:b8:3e:23:b6:5c:0d:48:
38:ce:e9:c2:fe:01:f2:b4:44:9a:70:08:b9:51:eb:14:3b:43:
c2:28:ac:56:c8:85:75:9f:02:46:4d:38:fe:0a:52:6c:b3:a1:
e8:0a:a1:06:c6:bc:7c:25:2f:3e:42:f6:0f:80:96:2f:70:c0:
58:b5:e4:c6:bb:da:aa:85:b5:3d:f3:3f:51:d5:5f:92:f6:27:
31:b6:64:b7:0f:5b:91:9f:3c:ca:7c:ea:a0:11:dd:61:de:87:
bc:e7:41:6b:12:3b:15:e8:75:67:52:49:b9:ef:ae:fe:51:50:
6c:3f:66:5f:77:8c:9b:5b:e5:4a:7e:28:86:9c:de:8f:c1:df:
4a:aa:2b:e5:c0:ee:01:a0:5e:15:e8:75:25:35:69:6d:e8:66:
70:bb:dd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:39:49 2025 by rpki-client