Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/35f2fdd7-eab2-373b-8d33-29b3d462ae4e.roa
File: 35f2fdd7-eab2-373b-8d33-29b3d462ae4e.roa (raw, json)
Hash identifier: 5RFy0JxLiZLvJbG3Drb0bcftz+LjOM7qfxzxKjgepeQ=
Subject key identifier: D3:7C:F8:14:30:1F:2E:8D:09:74:1B:43:47:C4:5F:C7:F7:E2:F1:A5
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B1F64988E364334C84A7AB40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/35f2fdd7-eab2-373b-8d33-29b3d462ae4e.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 41264
IP address blocks: 104.132.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:49:88:e3:64:33:4c:84:a7:ab:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=a664415e-6564-4c63-8eaf-01ca20a3e2ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:18:8e:cc:92:0f:eb:ff:33:06:3a:1e:b7:46:
e0:a6:72:7d:41:ca:09:67:1d:08:7b:fe:09:aa:34:
10:67:55:0f:5a:cd:df:20:ad:a6:b9:75:83:33:b2:
00:71:a6:d9:19:cf:1e:60:07:d1:93:ff:3a:83:10:
c9:ab:3e:33:c7:30:c8:ad:c4:1f:58:cc:67:77:a1:
9e:60:ba:48:89:71:c9:24:1d:39:06:ff:be:ca:64:
a1:40:71:25:f6:70:05:d2:ba:5c:0f:91:da:f1:26:
90:93:ad:a4:d0:83:7b:d7:2a:24:6e:e5:d5:6e:c6:
58:32:73:34:40:a0:3a:30:35:b6:0d:44:78:70:cd:
89:09:5e:7e:f2:4f:81:7a:31:25:dc:81:d3:b7:2c:
a7:e3:07:f2:ea:84:1d:a2:33:c8:91:a2:9d:3f:ca:
1e:9d:96:d5:69:48:a8:4d:87:31:67:43:76:a5:c9:
1f:21:97:46:cd:53:6c:93:72:8e:7f:05:31:3b:5b:
ed:b9:f4:50:ab:85:a0:07:2a:7e:92:b8:12:0b:40:
84:c5:5c:04:ad:41:76:3b:12:53:11:44:17:18:07:
dd:8d:f3:ed:3f:e9:ab:d1:45:e1:1a:78:32:c5:94:
c6:f8:b2:2d:45:3a:ad:f3:fc:51:13:33:2b:d8:a7:
34:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7C:F8:14:30:1F:2E:8D:09:74:1B:43:47:C4:5F:C7:F7:E2:F1:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/35f2fdd7-eab2-373b-8d33-29b3d462ae4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:8b:86:09:3b:17:91:99:1a:f2:e1:59:c4:4b:bc:fc:e2:7f:
3e:2f:2a:4f:28:68:c0:dd:af:50:8b:69:84:f7:9e:c8:05:ee:
a3:31:ff:61:37:c4:b9:36:fd:8f:08:c6:7f:e0:95:8b:15:ff:
93:c3:fb:7a:eb:64:ed:52:fb:0a:66:21:36:f7:7e:81:aa:ca:
d0:c6:53:69:2a:41:63:1b:3c:5c:2e:6f:57:e4:67:bf:b9:92:
18:82:b7:ea:d5:9b:d9:41:7d:bb:71:b4:c6:c9:e2:f2:4c:4d:
f4:e5:c7:db:d3:a9:50:68:61:b1:bc:c2:f2:6a:2a:5d:fb:76:
20:13:39:de:36:de:01:8a:09:08:80:4a:07:88:2d:0a:ba:f8:
9e:c2:59:27:1f:18:cc:a5:0e:16:73:ee:ff:f4:52:15:c6:5c:
c0:48:ca:4d:ec:88:66:4d:d5:af:b7:82:38:26:fb:b8:7d:71:
21:f2:81:17:c4:c7:cb:73:ce:6b:d6:70:ed:a9:ea:2a:42:4e:
56:5e:6d:f9:8c:3b:04:ff:a9:7f:3c:a3:b1:03:51:32:59:3c:
5c:69:50:d3:a3:3c:e6:ba:4f:8a:b3:7d:dd:3c:54:b6:80:d2:
bf:59:b1:c0:e0:81:a9:a6:07:9c:d0:7c:9f:de:b1:ac:25:2f:
fa:43:70:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:07:32 2025 by rpki-client