Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1a5f887f-53ef-3852-8ecd-31eb4511b635.roa
File: 1a5f887f-53ef-3852-8ecd-31eb4511b635.roa (raw, json)
Hash identifier: Qch8UCE6PS5S3KAuw23JRtpP/ZyEQ1rg5UOunAzBqWI=
Subject key identifier: C1:87:70:4A:EB:0A:3B:C3:7C:68:D9:68:93:FB:F2:3D:84:65:8C:99
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0EAE28E7F7D6359DD7400
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1a5f887f-53ef-3852-8ecd-31eb4511b635.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 41264
IP address blocks: 104.133.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:ea:e2:8e:7f:7d:63:59:dd:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=173bb2bc-c5a6-4abc-8335-8a7c368b6e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8a:19:8b:c0:6a:5d:69:70:2a:48:17:90:aa:
be:78:04:76:71:bb:ff:04:28:50:d4:50:4a:d9:ac:
55:85:1e:9d:e7:04:f2:b4:f6:ad:1e:b2:38:7c:f5:
aa:91:b8:76:e3:75:12:b2:c5:a8:4d:e5:03:cb:62:
fb:5d:d8:84:49:b1:e5:e7:ca:c7:24:b4:d4:15:42:
56:5d:e9:34:76:16:4d:07:54:72:68:03:f8:35:e7:
93:85:26:62:26:fb:30:b3:4b:1f:32:73:06:f6:5f:
fa:7e:df:cd:d8:a1:73:9e:ea:c5:1a:96:6d:01:5b:
9b:a4:05:17:3d:63:5f:b4:4b:a4:8b:a5:a4:02:54:
33:87:f2:68:ae:b8:42:43:ca:6c:a9:b9:06:df:ba:
b6:7d:7f:a7:57:1e:81:09:f7:17:c6:1d:19:4a:b7:
5f:31:10:34:81:5e:3c:cc:91:29:d5:58:f5:03:cb:
4f:de:9b:87:e7:ef:49:6d:91:98:2c:cb:ed:61:68:
77:83:76:cf:ca:98:af:d8:d1:ed:fb:91:0d:46:49:
2a:fe:2d:ff:c1:a2:80:d9:6a:a4:fe:b0:2a:79:82:
e9:5e:22:af:39:27:0e:c7:22:ad:aa:1e:14:cc:49:
b6:a6:33:07:99:3d:71:84:ba:e1:d2:c3:28:29:0e:
60:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:87:70:4A:EB:0A:3B:C3:7C:68:D9:68:93:FB:F2:3D:84:65:8C:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1a5f887f-53ef-3852-8ecd-31eb4511b635.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:69:2e:8a:97:95:ec:3c:18:aa:0b:09:54:1d:92:eb:e4:52:
a6:a7:bf:bf:57:ad:e5:d1:de:00:43:eb:c7:78:85:d4:5b:65:
2e:8a:ac:0b:1f:31:ce:ef:f5:21:29:89:3a:0b:60:70:bf:2b:
5c:05:6c:a5:63:e6:03:9d:48:9c:62:51:c3:fe:ea:9a:3d:5a:
88:2b:6c:6a:18:65:e8:5c:e5:e2:61:4b:36:7e:b1:da:c5:b9:
d9:0c:15:9e:0a:21:11:e8:38:6d:32:5f:29:4b:c2:f3:ca:7b:
f8:c7:75:11:e7:48:c0:34:66:0c:81:3a:2b:04:fd:78:ec:af:
fc:29:2a:23:0a:b4:c6:45:92:df:7a:da:8d:93:94:05:18:c0:
15:9e:90:e5:98:d5:e8:b6:76:99:d9:83:17:ce:60:3b:ed:81:
a2:d8:ae:95:1a:b2:9e:99:fa:78:73:98:0e:ff:06:2a:d8:82:
48:d6:3f:c2:70:43:5b:c6:86:18:30:02:97:8a:af:1b:d3:45:
34:7c:09:ca:9e:25:b4:56:bc:89:b2:7a:32:75:3b:6d:ed:f8:
8b:64:bb:87:55:32:5b:45:99:95:bf:51:55:ee:dd:a2:57:5e:
73:85:64:17:87:3c:50:89:fa:91:42:fd:dc:a4:62:12:9e:78:
64:2b:b1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:06:20 2025 by rpki-client