Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3588427b-bba9-3548-84b8-e4c0bb26d466.roa
File: 3588427b-bba9-3548-84b8-e4c0bb26d466.roa (raw, json)
Hash identifier: OlwcVCGOrYf9nUvhEZiFpTGraaq0rM8sk/A8p0IbZvo=
Subject key identifier: 3C:56:B9:F9:F5:ED:81:A2:FF:2E:96:17:DA:7C:72:B6:D0:9C:EC:E9
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848BFEBB4F82F7E195875F13460
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3588427b-bba9-3548-84b8-e4c0bb26d466.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 395973
IP address blocks: 104.134.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:b4:f8:2f:7e:19:58:75:f1:34:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=3d774369-cb7a-4a9a-9120-5b85ad92e9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:35:2f:75:a1:31:1c:ca:2a:c4:4a:a8:ec:28:
37:ab:d5:6f:7f:10:4f:6d:44:6b:e7:47:5e:3e:a8:
4a:d9:1e:0b:3e:0d:f0:25:bc:4a:c0:3c:39:40:b9:
13:72:a4:19:91:c2:03:cf:66:8e:a1:c1:25:aa:0b:
5d:72:05:59:4a:c6:73:8a:45:2c:48:d8:29:d8:a6:
68:1f:4a:d1:18:06:53:7f:4c:eb:52:ab:df:fd:b2:
bc:d7:eb:cd:71:d3:bf:19:8b:3d:40:d8:df:26:19:
7b:54:97:7b:4f:b5:a1:1a:21:fb:54:9b:6b:22:ec:
c9:9f:6d:61:b8:2f:fd:75:84:cb:0a:14:e1:e8:aa:
1d:99:0c:1e:a2:5f:19:9c:c6:07:73:98:84:7b:5d:
fb:76:e1:b1:6c:01:0e:02:d8:de:8e:aa:bb:06:56:
8f:0d:a8:16:e4:c5:a4:14:fa:54:76:25:84:d1:dd:
01:9d:60:9d:45:88:df:d9:d4:8f:7d:82:89:91:59:
a5:2e:b3:17:9e:ae:a6:0f:c7:4d:59:7f:d0:7f:7f:
cb:7a:4f:7c:0e:01:54:98:7e:9b:d2:68:07:65:13:
2b:74:46:2f:c6:cd:41:b3:19:cd:c6:08:79:7b:b3:
6d:b7:c3:38:ac:c2:e6:eb:10:b2:f6:06:1f:ef:9d:
32:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:56:B9:F9:F5:ED:81:A2:FF:2E:96:17:DA:7C:72:B6:D0:9C:EC:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3588427b-bba9-3548-84b8-e4c0bb26d466.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.184.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:f5:5f:87:e1:8c:d9:3e:9f:27:8a:85:f1:15:cf:39:c3:b9:
66:ef:2d:d7:31:93:2f:b5:54:c7:5c:21:b0:81:f0:a8:63:8f:
e9:14:1b:2d:ac:a6:23:db:32:e6:ef:9f:0d:23:fc:b1:52:0b:
bc:21:23:77:f7:66:6d:a6:01:20:39:d1:6e:1b:9b:00:2a:79:
6d:35:72:92:e5:51:d5:47:a7:de:dc:61:e8:0d:51:ac:c4:92:
f4:49:d5:67:91:cc:ae:fa:2a:f5:01:6e:3c:67:4f:0b:75:31:
00:51:2e:ba:05:4f:f3:b8:0e:cc:b7:bc:f9:b0:88:eb:c7:4c:
3b:7f:6a:54:88:95:7d:25:85:a8:35:17:59:0b:32:c2:02:a0:
f4:70:eb:8a:47:a6:ee:84:c4:53:4b:9c:f7:db:23:b1:2e:bd:
18:c4:0a:06:78:ac:c7:a2:04:00:fd:f4:d0:d7:bf:84:ef:8f:
86:d1:24:87:4d:0f:f7:f1:bb:2e:00:c5:b9:45:a4:b6:ec:21:
a6:5f:b0:85:1b:63:54:7c:4b:98:13:ac:91:75:2d:13:f1:84:
ad:04:9b:36:7b:b7:dc:3b:52:2d:c5:2a:ed:c9:bd:43:bb:8d:
f7:e4:01:a7:85:68:fb:a9:39:00:ba:ae:ab:e0:69:6b:d9:3a:
12:24:32:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:57:25 2025 by rpki-client