Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2ec1aa97-7f08-3746-baaf-089c0424ed88.roa
File: 2ec1aa97-7f08-3746-baaf-089c0424ed88.roa (raw, json)
Hash identifier: gI/5sQM7PuSOfV8NqHTUQbkFrcDAUjULMT2MWGfhFBI=
Subject key identifier: B6:B2:8B:AA:7E:7F:A6:F4:93:B1:9C:2F:CB:2C:5E:52:3F:8C:34:3A
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848AF2B9B3A1FEE47F1A8CF2800
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2ec1aa97-7f08-3746-baaf-089c0424ed88.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 41264
IP address blocks: 104.132.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:9b:3a:1f:ee:47:f1:a8:cf:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=9617d195-e075-4221-a18f-e578daa72e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c4:11:4d:e0:ef:a8:7e:09:47:7c:d6:03:bc:
74:05:c2:79:31:e9:d6:55:e4:da:6d:cf:ca:e1:02:
fc:d1:4f:00:0c:dd:a3:27:d5:2a:2a:25:fb:cd:5f:
bd:21:c7:c7:1a:aa:8e:09:ee:20:a5:6d:08:b5:c6:
30:65:e7:c5:d3:73:fd:87:09:01:fc:bd:26:b0:d1:
44:3e:3b:c3:1b:51:d1:28:e1:11:e1:4e:3f:ac:f2:
9c:1e:4c:28:e7:40:55:8d:7c:c8:4c:34:98:bc:94:
a3:61:d5:03:dd:02:b7:e5:04:82:4a:2c:8e:86:cd:
a8:f3:8b:5f:87:1c:1b:eb:95:df:71:b8:18:c2:95:
de:a0:1c:a6:72:4a:62:06:a4:b2:9e:0f:eb:c1:91:
5e:1c:b2:31:95:a2:2c:e3:2b:9c:72:6b:9f:55:e6:
20:ce:d5:d8:bd:97:da:3a:50:6d:a7:33:8d:ca:25:
3e:f9:97:48:3f:1f:c1:55:6e:56:2a:d1:8b:2c:31:
48:d7:7d:d4:56:44:56:df:f3:d8:b3:fc:3d:f1:be:
3a:e0:52:c6:5c:72:ca:fc:6f:e4:73:73:56:e2:f3:
4c:9a:0d:6a:13:a7:fd:d9:54:f1:9f:df:d0:24:98:
a9:fe:f5:28:84:a8:aa:03:be:7c:0c:b3:d3:b4:64:
58:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B2:8B:AA:7E:7F:A6:F4:93:B1:9C:2F:CB:2C:5E:52:3F:8C:34:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2ec1aa97-7f08-3746-baaf-089c0424ed88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:af:33:eb:dc:fc:af:cd:27:6f:5e:55:be:77:0e:f8:48:ca:
d1:67:98:33:d0:f6:76:17:35:41:94:9c:7b:53:13:e3:53:86:
4a:d0:1d:00:d3:e0:fe:ff:5e:80:b5:f8:28:21:45:70:f9:c0:
ea:dd:87:c8:8c:11:6a:ba:bb:9d:d1:22:28:58:af:4b:2c:dd:
15:89:fe:10:c8:c0:fc:58:e2:5f:fb:15:08:af:9c:53:db:75:
ff:f6:5a:66:40:04:a2:aa:fa:27:6a:bb:c9:32:8a:8c:4b:06:
f5:b4:00:88:4b:c3:2a:ca:a5:6c:4d:ec:36:1a:54:4a:81:29:
4a:00:54:a8:85:f6:07:e8:90:8f:a0:66:a5:73:ab:5b:b3:32:
d2:9a:f6:01:77:5a:56:a9:e4:ce:a0:62:1f:66:d3:c7:e1:da:
3e:c7:5b:1a:fb:76:75:7f:4c:4b:78:98:fe:59:d1:11:d9:8f:
0f:c6:c7:4e:cf:4c:6c:6e:eb:e8:ca:60:8d:c5:f8:e7:3b:83:
d8:41:6b:48:82:01:8c:eb:07:48:21:05:14:c7:83:dd:32:84:
fe:c4:d9:4e:f4:66:8f:70:5f:3b:f4:aa:4b:06:05:99:8a:0f:
f1:70:7d:c1:44:d0:5e:9e:cb:8d:ec:06:35:0b:60:73:6e:87:
03:9e:26:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:43:56 2025 by rpki-client