Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2a9eea5e-ffaf-37fb-a6f3-dbe7b04dfa08.roa
File: 2a9eea5e-ffaf-37fb-a6f3-dbe7b04dfa08.roa (raw, json)
Hash identifier: 8d/guURHKjtuov9aM2wF053fVBr6QhH7cOu+s3IESuc=
Subject key identifier: 84:2B:CC:9F:AE:E1:07:1F:13:C3:01:0F:38:81:19:B8:57:9D:BF:5C
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0DD38E4EE3DBF306B3A50
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2a9eea5e-ffaf-37fb-a6f3-dbe7b04dfa08.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 15169
IP address blocks: 104.134.154.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:dd:38:e4:ee:3d:bf:30:6b:3a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=d76c47c6-bb87-4ef8-b9c4-8c68f39e5f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5c:fd:1d:35:da:70:30:75:e1:10:5f:8f:ca:
ec:67:3b:6e:af:8e:45:8d:e7:fb:20:ac:15:63:bb:
3f:1e:59:fe:09:c8:a7:c6:f4:09:b2:86:6b:e4:0f:
c8:20:e4:44:0c:52:75:4a:fa:cd:4f:03:2e:b6:b5:
df:63:93:d4:b4:bb:c9:ee:eb:09:bc:74:cd:d9:26:
2f:8d:11:ca:40:8c:e0:d0:b5:e7:be:bf:5b:dd:be:
44:f3:00:94:a9:0b:b9:02:35:51:9a:8a:66:5d:63:
5e:1c:ca:e0:e2:95:a5:7e:95:73:1e:ed:bb:89:5c:
f6:27:d2:51:fb:10:85:b8:97:87:8d:f2:21:30:a5:
76:bb:40:1a:7e:03:bb:60:3c:39:97:41:94:fe:61:
5e:58:19:2f:cd:7c:31:51:f8:48:a6:f6:92:a0:09:
61:bc:da:f3:0f:e0:8b:05:c4:0f:cd:78:66:4e:b8:
22:f5:18:10:e0:ec:d4:a2:eb:d5:e0:b5:65:f7:f7:
f2:c3:27:17:84:ff:c2:64:16:5c:77:90:09:c4:b1:
0b:b0:ec:ae:aa:c8:80:82:2e:1c:e4:6a:14:08:d8:
fc:80:13:d8:de:77:a6:dd:20:1c:59:5f:8c:52:a3:
52:63:27:c7:e2:b5:8c:17:84:0d:53:fe:bb:6c:3b:
a2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2B:CC:9F:AE:E1:07:1F:13:C3:01:0F:38:81:19:B8:57:9D:BF:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2a9eea5e-ffaf-37fb-a6f3-dbe7b04dfa08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.154.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:95:4d:8e:ba:0f:52:64:78:b0:76:cc:78:d8:78:9d:47:c5:
6b:2f:7d:43:23:e1:72:7d:d0:92:4c:40:2b:80:7a:23:27:bf:
51:e4:0a:21:64:99:3c:dc:e6:c1:31:16:47:f7:ff:13:ae:ea:
9c:60:16:e3:6c:8d:0e:c5:23:54:2d:a1:7d:f1:da:40:5a:fe:
04:ed:f6:63:f3:76:36:06:c0:9d:7d:3f:52:a6:5e:7f:96:15:
54:82:61:70:78:52:68:fb:33:bc:f5:f8:44:97:d2:db:0c:31:
04:b6:66:5b:0e:48:3a:7d:30:3d:90:ac:8b:84:e0:9d:33:c1:
32:3c:1d:97:03:d4:2e:0a:93:15:52:54:1f:d1:09:78:9c:5f:
73:74:b8:c8:96:e1:ea:15:47:c2:10:4d:49:28:47:1b:1a:8f:
4e:5b:73:29:a2:8c:7d:cb:e3:51:dd:d4:d3:cd:10:c1:f6:16:
89:79:0f:67:e7:b4:18:4b:05:60:f2:b9:38:30:23:17:6b:55:
48:d2:98:03:35:9a:5f:5b:a1:33:ee:0c:df:14:12:d4:52:61:
5c:2d:c3:93:30:13:a5:eb:2c:13:a9:81:0a:e7:e1:13:a6:66:
d8:fa:7c:22:89:ec:4d:51:4d:ed:16:32:58:9a:db:68:2d:00:
bb:63:14:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:25:08 2025 by rpki-client