Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/25a920fe-3508-3e74-b502-5d03e0d7c83a.roa
File: 25a920fe-3508-3e74-b502-5d03e0d7c83a.roa (raw, json)
Hash identifier: kalLWgRZdSvH9G+9gkJUFaNXhfEQaUFAooF6FK9+DdU=
Subject key identifier: E0:24:A9:95:26:44:B2:13:C1:20:D0:C8:F3:C1:01:98:CD:DF:5F:74
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B1F64A89DE33361F7253D080
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/25a920fe-3508-3e74-b502-5d03e0d7c83a.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 41264
IP address blocks: 104.132.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:4a:89:de:33:36:1f:72:53:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=eee0044a-c1e5-4e3b-9fcd-78f7466b8c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:09:8d:82:a7:8e:6b:5f:69:15:fa:d6:05:fb:
64:33:06:73:09:fc:68:66:16:79:c8:25:84:a2:78:
6f:58:39:e4:13:25:01:89:21:17:b7:2d:e3:12:d8:
58:cc:23:28:f0:1e:72:68:0c:ef:e1:81:9c:7a:b2:
b6:8e:49:80:44:f8:a2:8d:b1:5e:d0:64:66:dd:66:
53:04:7d:55:85:d6:2b:42:cf:8e:f0:89:5c:85:01:
a4:cb:3c:32:fe:84:67:c7:d7:c0:58:69:b1:b5:2b:
48:53:21:45:ec:b5:dc:2f:0c:23:6d:a5:4c:16:de:
85:a3:59:b4:02:87:94:43:10:1d:1b:0c:44:a5:b1:
9a:cb:b1:81:5b:83:73:90:0a:31:35:82:9f:c8:53:
33:6f:90:36:9d:9e:59:ad:1c:ec:6c:9c:2d:91:61:
28:5d:31:39:84:cd:a3:00:62:ab:df:f2:9e:ec:07:
76:55:af:2e:b6:09:97:ca:b5:af:b4:30:ad:46:58:
a4:20:c3:73:d1:41:21:4b:63:81:f4:bd:4e:41:73:
a4:82:3d:18:b6:03:2d:ea:c9:9d:a9:a2:69:aa:1b:
89:5c:dc:c5:1d:ed:da:ac:39:87:1b:05:8e:f0:13:
e1:7d:69:38:05:5f:7b:be:87:ca:bd:4b:ff:df:b8:
d4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:24:A9:95:26:44:B2:13:C1:20:D0:C8:F3:C1:01:98:CD:DF:5F:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/25a920fe-3508-3e74-b502-5d03e0d7c83a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:7b:77:3f:02:ff:b1:64:95:68:5b:ff:10:8f:4a:3b:ed:89:
2e:bf:62:a7:35:42:4b:7d:14:01:9c:05:e2:0b:fb:43:c4:a2:
88:33:e8:59:07:3d:c9:3b:62:02:15:e5:03:da:95:2d:91:f7:
35:c7:b2:f5:35:05:bb:7b:07:d4:23:0b:1f:68:e5:f0:08:81:
dd:14:7b:16:ef:dd:14:b1:10:e1:81:c7:6f:81:e6:06:32:41:
85:f0:6e:16:5c:95:cb:68:26:65:39:c5:65:01:72:61:f2:3b:
09:8a:94:9e:94:5e:c9:4e:6a:b0:be:77:50:bf:93:ab:14:8a:
f0:49:fb:26:2d:b2:36:c6:61:fe:4c:d2:a0:86:24:58:ce:96:
1f:b2:08:49:37:ba:68:f3:2d:4a:c5:9c:4e:9a:08:f6:c2:98:
f5:2b:cd:6d:e2:37:45:ed:11:c8:bf:a0:ac:1e:ed:87:27:dd:
23:07:24:62:20:54:41:f3:97:51:82:5d:2f:d4:53:12:90:b0:
40:79:e2:58:5e:dc:da:ca:de:e7:1f:8b:a5:5e:f2:80:c3:93:
a4:9a:56:00:71:42:9e:f6:c4:e6:26:93:73:94:d3:e1:66:53:
5a:76:a7:34:1f:db:d2:d1:03:0e:6f:af:c9:5c:06:ba:1b:2b:
24:50:04:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9kqJ3jM2H3JT0IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk
ZWVlMDA0NGEtYzFlNS00ZTNiLTlmY2QtNzhmNzQ2NmI4YzUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAmNgqeOa19pFfrWBftkMwZzCfxoZhZ5yCWE
onhvWDnkEyUBiSEXty3jEthYzCMo8B5yaAzv4YGcerK2jkmARPiijbFe0GRm3WZT
BH1VhdYrQs+O8IlchQGkyzwy/oRnx9fAWGmxtStIUyFF7LXcLwwjbaVMFt6Fo1m0
AoeUQxAdGwxEpbGay7GBW4NzkAoxNYKfyFMzb5A2nZ5ZrRzsbJwtkWEoXTE5hM2j
AGKr3/Ke7Ad2Va8utgmXyrWvtDCtRlikIMNz0UEhS2OB9L1OQXOkgj0YtgMt6smd
qaJpqhuJXNzFHe3arDmHGwWO8BPhfWk4BV97vofKvUv/37jUPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOAkqZUmRLITwSDQyPPBAZjN3190MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjVhOTIwZmUtMzUwOC0z
ZTc0LWI1MDItNWQwM2UwZDdjODNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ17dz8C/7FklWhb/xCPSjvtiS6/Yqc1Qkt9FAGcBeIL+0PEoogz6FkH
Pck7YgIV5QPalS2R9zXHsvU1Bbt7B9QjCx9o5fAIgd0Uexbv3RSxEOGBx2+B5gYy
QYXwbhZclctoJmU5xWUBcmHyOwmKlJ6UXslOarC+d1C/k6sUivBJ+yYtsjbGYf5M
0qCGJFjOlh+yCEk3umjzLUrFnE6aCPbCmPUrzW3iN0XtEci/oKwe7Ycn3SMHJGIg
VEHzl1GCXS/UUxKQsEB54lhe3NrK3ucfi6Ve8oDDk6SaVgBxQp72xOYmk3OU0+Fm
U1p2pzQf29LRAw5vr8lcBrobKyRQBGk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:41:55 2025 by rpki-client