Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1dcb2deb-0231-3d51-a99e-3240d6ddf304.roa
File: 1dcb2deb-0231-3d51-a99e-3240d6ddf304.roa (raw, json)
Hash identifier: ar8eDugmCYzBw02i942yEXgDQW8vhhiiggYSJvevQPM=
Subject key identifier: 9C:64:16:61:1D:D2:E4:36:AF:42:7C:94:73:19:86:C4:63:CC:DE:29
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0E0D7638BEC1ED14E8200
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1dcb2deb-0231-3d51-a99e-3240d6ddf304.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 41264
IP address blocks: 104.133.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:e0:d7:63:8b:ec:1e:d1:4e:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=55b72de5-dfc7-4c0d-8a82-17b99565db09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c3:c1:9f:b4:ac:19:2c:ef:f5:6c:b9:14:2f:
ee:8a:9a:bd:83:5a:ec:3e:11:db:89:d9:9a:4f:4f:
c1:b4:05:5b:d4:c5:27:c0:c2:ec:88:ca:c8:c9:f8:
fc:93:a3:e1:e3:b7:cf:29:fa:cc:02:f0:ec:8a:f3:
99:8a:de:1c:5b:b2:18:b6:30:bf:4c:18:2e:1e:5e:
41:dc:1f:88:59:26:e5:76:63:36:48:84:da:58:12:
71:30:a1:c1:be:34:00:ad:ec:96:4c:f1:29:8a:81:
14:b4:83:76:15:bc:ca:09:cc:be:00:ab:b2:7e:bd:
c6:23:16:4b:8b:98:68:0e:76:43:20:b4:3c:6d:eb:
7c:51:6b:b1:aa:07:2a:63:f3:93:64:d9:cd:e3:f7:
8b:b7:3e:b5:b7:11:2d:f9:b7:bf:29:6f:ed:c9:78:
16:f7:58:10:c3:03:4d:61:4d:f7:d9:70:f1:92:58:
94:2a:93:ac:f8:63:70:74:cc:8a:0b:d8:ea:11:95:
a3:d2:28:89:15:b8:e9:ca:21:1d:e4:00:94:28:00:
08:d9:e1:30:6c:8c:f7:79:69:d6:8f:8c:78:36:7e:
55:fe:4b:39:45:61:fe:4b:f7:f8:dd:bc:2f:dc:6a:
86:fe:0b:72:c5:10:3d:90:73:d9:a6:bf:dd:03:43:
a3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:64:16:61:1D:D2:E4:36:AF:42:7C:94:73:19:86:C4:63:CC:DE:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1dcb2deb-0231-3d51-a99e-3240d6ddf304.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:20:12:6e:44:15:f1:f3:08:b6:2b:c1:8f:1f:df:be:7c:c5:
85:91:c1:97:2b:ba:96:dd:80:88:0d:8c:5c:52:e4:c0:0b:53:
92:c6:44:1d:54:4a:39:29:bb:f7:08:bd:b2:33:15:19:9f:d3:
ae:31:5b:65:9e:1e:b3:d7:01:fb:44:81:97:c7:59:f2:79:d7:
29:8e:7c:e6:d7:2d:52:92:b4:b9:6e:72:73:ad:46:2a:b4:21:
19:bc:f9:f1:11:71:8f:c3:3c:06:12:e0:11:d7:ee:3f:05:87:
a2:66:af:97:01:e0:0b:48:e1:49:93:9e:ac:d4:83:e6:51:a2:
aa:92:b1:53:8b:e9:3c:1e:1f:61:44:a3:72:42:b4:34:39:60:
26:90:48:84:22:77:87:09:ab:15:46:1d:d9:76:6d:80:b7:6e:
05:1e:02:e6:c9:01:a4:39:1c:4b:e1:62:54:ef:ef:b2:0a:2d:
0e:88:1a:be:ea:1c:0f:e6:88:35:a9:58:bb:34:84:47:68:f0:
bc:e1:65:3d:94:e7:83:c5:e7:68:22:bd:c1:18:38:ad:03:fb:
07:c1:92:35:e7:75:d1:b0:38:a8:26:a5:a3:15:8b:13:ba:a4:
55:68:e5:21:38:f1:95:1e:26:34:da:de:d3:37:1f:a6:0b:c1:
15:14:c7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:07 2025 by rpki-client