Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2a90c852-9a33-3690-94fc-d837c371c753.roa
File: 2a90c852-9a33-3690-94fc-d837c371c753.roa (raw, json)
Hash identifier: VT7m05ekX6/au/ItUdMf+0EImcxXyOOoeJqpGvpSsyM=
Subject key identifier: F9:58:2E:5A:33:3D:0B:53:5F:18:99:06:19:4B:BA:CB:8F:EA:88:7A
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0F540B2AACDE5A4F63400
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2a90c852-9a33-3690-94fc-d837c371c753.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 395973
IP address blocks: 104.134.180.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:f5:40:b2:aa:cd:e5:a4:f6:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=b64c88e8-d03d-44b6-9484-d41d51fbbbf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:12:43:a9:49:ef:86:6b:7a:89:c1:a0:33:9b:
b1:c4:c4:5f:d3:3b:5c:07:ea:16:33:63:be:ce:6c:
04:5a:97:9a:85:69:f5:60:c3:68:b0:07:a5:da:71:
e6:e4:95:30:ed:a0:1c:79:ff:91:a2:65:ef:dc:69:
bd:76:6c:9f:74:8f:b5:6c:be:1b:6e:bb:d3:ee:ee:
d7:ca:c4:3d:ed:48:7a:29:cb:7c:e9:c3:b9:45:78:
c0:13:84:17:7e:3d:e4:db:3a:48:f9:3d:03:d0:c8:
0f:be:fb:2f:f1:87:91:b6:25:a5:0a:5c:e3:f1:86:
f8:a7:23:fb:57:18:52:d2:6e:d4:12:90:e9:61:ff:
17:8d:b3:f5:6c:03:f7:17:b0:e0:b9:dc:b8:e5:10:
fb:93:75:85:07:b8:4f:b1:bb:90:cf:00:86:80:57:
a1:fd:99:8b:57:da:48:69:cf:ed:d2:ce:ae:9b:fc:
fe:ca:ea:ab:35:21:23:94:0c:39:22:f4:10:43:f5:
10:10:1a:31:af:f3:89:c3:90:14:64:e7:07:27:70:
34:86:32:4b:bf:29:10:8c:e8:c7:18:23:de:3d:94:
45:61:6e:20:74:74:9c:91:86:79:ca:13:3e:fe:d8:
03:05:68:b9:53:49:f0:ab:ff:76:53:9e:86:eb:37:
55:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:58:2E:5A:33:3D:0B:53:5F:18:99:06:19:4B:BA:CB:8F:EA:88:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2a90c852-9a33-3690-94fc-d837c371c753.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.180.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:91:8b:6a:d4:a5:9f:c9:d5:54:c1:1a:d5:94:a1:b3:14:68:
f7:ac:36:58:0b:5b:76:76:a9:40:1b:cc:23:cd:ee:38:87:b5:
a3:1e:bd:2c:7a:d6:3d:7e:9a:b2:bd:3b:5a:1d:15:72:5b:b4:
42:72:b5:dd:b5:29:f4:86:e4:07:25:46:50:1e:a8:c5:65:fd:
70:32:d4:36:b7:23:22:f5:25:b1:bc:c5:10:dc:91:a6:ec:1b:
f7:e5:e1:8c:e2:74:a8:3c:c7:a1:85:77:8b:46:aa:68:17:cc:
a7:ab:88:44:ad:6b:0d:64:5f:d1:66:00:ac:8c:f4:7c:a1:04:
76:4d:88:da:58:69:d6:42:49:81:3f:2f:a9:24:70:26:96:4a:
47:c5:31:68:27:de:a0:dd:54:d5:eb:74:ce:d2:d8:b3:16:7f:
5a:f3:ea:66:92:d3:09:e2:ca:92:dc:14:3d:bc:93:a0:df:56:
d9:71:2f:16:9b:6f:89:bd:7a:bf:a1:02:ce:9e:50:4b:cb:91:
49:11:3d:9f:93:23:60:32:e5:85:ce:67:32:0a:fa:9c:06:3b:
69:b3:3a:1f:58:96:18:18:7f:4e:34:61:b5:00:a0:3b:34:e9:
46:4b:21:c3:d3:85:52:a0:56:3f:31:e6:93:b0:b3:7a:d3:c6:
06:26:1e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:37:34 2025 by rpki-client