Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/28fd5113-41a6-3d0c-ad20-7ab8233cb4e2.roa
File: 28fd5113-41a6-3d0c-ad20-7ab8233cb4e2.roa (raw, json)
Hash identifier: u1alQdEoOvib8i0+/qCU3vX8frYtJTey9JgVb/tufrA=
Subject key identifier: 90:1B:71:18:E3:68:6D:9C:42:E3:F8:05:C3:3E:4A:AE:F7:8F:71:73
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0E02F503BF2065F97E4C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/28fd5113-41a6-3d0c-ad20-7ab8233cb4e2.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 41264
IP address blocks: 104.133.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:e0:2f:50:3b:f2:06:5f:97:e4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=1258a514-2f4f-474d-b915-341ed33cebf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d4:ca:9f:d7:d1:ff:e2:00:d9:f7:90:5d:c0:
f7:c3:ff:dd:3f:48:81:e5:4b:5a:b5:e3:1b:6a:d1:
3b:72:ea:38:f6:34:7e:24:93:bc:ac:c3:cd:39:33:
b0:e2:ef:a7:51:66:dc:ce:ad:08:77:27:d4:4a:3d:
53:f2:46:46:73:d2:95:ab:70:8d:bb:59:60:c1:2a:
16:15:14:2e:c0:69:3b:4d:49:f2:ca:7e:d9:e0:08:
31:11:c8:3f:b7:f0:a5:72:94:41:ce:5a:57:4d:be:
2d:ec:48:b9:df:98:51:63:fd:f0:76:29:70:ab:3b:
33:8b:e9:a6:48:bd:09:1a:bc:1e:b9:f1:24:59:21:
9b:76:2c:b1:de:f8:4f:8c:0a:20:e7:44:06:b0:d5:
06:1b:8b:a8:f3:11:24:60:07:bb:2e:88:a3:98:8f:
22:4c:f2:fb:94:c1:5e:76:08:12:77:e7:9e:bb:d7:
3d:48:bc:96:10:32:70:e0:90:26:cf:80:26:4a:31:
8d:48:6a:1d:c3:3f:c4:ce:b1:bb:2d:a8:76:4d:28:
36:72:77:c3:1f:75:89:04:7e:79:f7:d6:3c:6f:fd:
04:eb:c3:15:10:ef:43:c9:fb:b1:bf:11:d7:4f:3b:
10:04:3b:6f:49:22:67:8f:01:31:15:00:b5:3d:b3:
cc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1B:71:18:E3:68:6D:9C:42:E3:F8:05:C3:3E:4A:AE:F7:8F:71:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/28fd5113-41a6-3d0c-ad20-7ab8233cb4e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:28:b0:b8:d9:62:11:6f:67:e8:c6:9c:1d:2c:df:14:45:37:
e1:f4:2a:fa:c1:69:d2:17:e8:66:c2:2d:c3:db:6c:8e:7d:5c:
80:f0:eb:5c:85:96:0c:3b:4c:aa:c4:4e:41:fd:3f:66:c9:ba:
70:82:dc:bd:d0:a1:1d:57:cd:d5:2c:47:51:df:31:be:5b:af:
09:09:3a:06:e2:b7:b1:e5:18:ca:bc:fb:3e:ed:7a:eb:3f:7a:
31:e9:98:d7:fc:6c:44:6f:0c:84:b6:9e:be:39:0a:5c:69:51:
ef:f1:a8:3b:f5:e2:08:05:7d:1f:3d:5c:c0:c9:67:0c:5f:b9:
d8:1d:62:d0:f3:5c:4c:d5:3e:b4:0d:d2:20:b4:b9:8e:16:77:
12:97:28:45:c7:2c:fe:d8:b8:0f:b5:e4:4d:f9:a5:0b:c8:39:
a9:c7:c4:95:36:ff:42:b0:a0:98:7f:f9:c9:b0:1f:e7:b4:56:
9e:a7:00:9f:03:89:d7:90:d6:e9:4b:27:25:03:bb:b9:7c:5a:
47:65:93:73:39:82:9a:51:da:83:84:5e:f8:79:ea:4d:c9:e9:
f2:f9:9a:35:8b:22:de:8d:75:4c:ff:c4:0a:34:e9:92:be:5a:
47:66:b0:51:b6:9e:35:be:30:80:44:df:13:fd:d4:d5:13:86:
34:cc:0b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:30:02 2025 by rpki-client