Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/38c60a09-b904-394d-a0aa-9a25d9c7787d.roa
File: 38c60a09-b904-394d-a0aa-9a25d9c7787d.roa (raw, json)
Hash identifier: K8EzmlDme389fsnNCVQT2uSJ5j16cWkTu1IMJBw/IcA=
Subject key identifier: 2F:27:0B:EC:87:BF:81:B5:A4:47:83:F6:47:79:8A:F7:5A:38:70:6A
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0E448483FE98C2BDECB40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/38c60a09-b904-394d-a0aa-9a25d9c7787d.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 395973
IP address blocks: 104.134.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:e4:48:48:3f:e9:8c:2b:de:cb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=92b94a8d-f228-4459-854e-3fc5b8c64b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:da:cc:4e:54:3a:2a:0e:55:d4:bc:71:fc:63:
e5:9b:69:8e:84:6b:24:24:d9:b1:79:0c:b1:8a:3f:
90:0d:7c:29:0b:70:f0:46:b3:0d:69:cf:76:01:c4:
ae:ba:a2:53:65:6b:f9:27:fb:6e:61:4f:60:9b:4a:
4a:5c:48:9d:69:9f:ac:2d:cb:29:58:b3:56:33:2f:
25:80:b8:bd:1c:f2:3c:34:97:96:5f:09:d4:ea:c7:
9f:a8:23:38:ef:7b:0b:55:8f:80:17:30:a8:26:5c:
8b:80:9f:66:db:70:c5:a1:64:08:9a:8a:0f:96:46:
b9:e0:55:93:d6:39:49:cb:41:5a:0c:b0:cc:05:fe:
19:7c:6a:48:96:f5:88:b8:51:b7:18:bf:cf:d6:09:
3a:28:55:77:a2:67:ed:f7:c4:91:25:96:69:d3:7c:
d0:f2:c5:62:fb:f4:ea:49:e0:e7:41:69:16:b6:ad:
8c:d7:a3:d3:b9:8a:68:d1:9a:78:0d:a6:f1:2f:85:
0c:39:ea:f6:7c:d1:07:e9:11:5a:a6:68:96:3e:7a:
69:e3:dd:53:2d:3c:87:b4:02:ea:6d:13:e7:7e:b1:
da:40:b0:9d:04:40:8c:ca:ff:ba:e2:4a:48:58:cb:
54:d4:87:de:4b:e2:41:09:6a:5c:18:31:d5:d4:a1:
ac:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:27:0B:EC:87:BF:81:B5:A4:47:83:F6:47:79:8A:F7:5A:38:70:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/38c60a09-b904-394d-a0aa-9a25d9c7787d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:ff:e4:c3:ed:77:c9:f2:7a:48:e4:86:b0:b7:11:df:37:08:
ea:43:ad:b4:53:a0:f2:6e:f5:04:4b:10:51:54:25:d1:2c:3f:
ce:70:d0:75:12:35:bb:be:90:b1:c1:7d:27:5e:e8:82:27:f8:
fd:09:41:f5:63:91:29:2c:87:d6:a3:22:e2:ad:1a:ac:a8:1e:
aa:f7:5b:ae:d0:ec:a2:fc:06:10:73:07:82:7d:ce:08:0d:02:
83:2e:ff:76:78:d7:73:28:65:1f:98:7e:ce:de:8d:25:c7:47:
da:f3:76:22:b6:13:79:32:fb:db:be:c7:a6:60:3e:72:d5:38:
58:98:c3:d2:dd:99:9a:ac:90:91:75:13:16:56:a7:a0:ba:85:
e3:8c:c0:70:d1:f4:6e:4a:75:e8:bd:05:60:46:ce:03:82:c6:
1c:42:5a:c1:7a:16:6f:fc:83:76:30:70:b8:e2:8f:31:56:96:
6d:35:36:f7:8c:1f:5b:42:b1:ec:59:26:1f:63:90:57:4e:e5:
41:10:45:50:4a:84:79:30:37:6a:c2:fa:c1:2f:75:2f:04:fc:
58:f7:02:52:e0:0c:0d:2f:84:0d:f3:fc:ba:92:9d:c2:30:dd:
ab:c4:94:72:8d:34:34:52:0a:ed:ae:8d:6f:d6:d1:87:a1:39:
43:ca:0b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:31:13 2025 by rpki-client