Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/39da2133-de58-3ba5-8738-587be956e596.roa
File: 39da2133-de58-3ba5-8738-587be956e596.roa (raw, json)
Hash identifier: XAmbl37IoZveTVAY4vTSAW98y27dcZDr/fUAJfD3PY8=
Subject key identifier: B5:9A:13:CD:FA:A3:8D:CA:ED:04:4A:A2:5F:90:D8:66:7E:8D:DE:6F
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B1F64759782B86366DDAA800
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/39da2133-de58-3ba5-8738-587be956e596.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 41264
IP address blocks: 104.132.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:47:59:78:2b:86:36:6d:da:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=418b359a-625e-47cf-a492-3fd84ec2fa0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b7:79:64:b7:d6:68:aa:60:f4:1f:eb:cc:47:
8f:0b:ed:c4:79:08:21:57:e4:88:c9:4c:06:1d:28:
cc:40:7a:d9:13:8e:ab:ff:82:ae:ed:29:80:e3:71:
04:ce:b1:09:d9:92:1e:a2:f0:ac:d4:49:68:ac:41:
d3:f7:c3:54:67:3e:95:2a:b3:0e:7f:84:26:29:dc:
02:d2:34:cc:c0:26:17:9c:e8:1c:f6:89:1b:27:a3:
60:3a:bf:e2:ae:67:94:24:2c:19:5e:ec:92:32:54:
79:20:75:b0:92:d2:a1:8e:fa:39:00:fa:d9:fe:3c:
b9:5e:87:c6:a5:c4:b4:16:a1:fa:96:d0:05:f8:95:
d1:4a:12:99:7d:da:85:7a:86:3e:08:09:9e:35:09:
47:e2:a8:0c:3b:ac:07:47:e0:9c:39:83:22:57:bb:
fa:f3:fc:a9:a7:d7:0f:07:d5:43:89:d0:45:24:02:
92:ea:25:e0:d3:61:08:17:05:cf:76:8f:04:5f:a0:
e2:37:bb:02:bb:12:e0:47:04:cf:32:12:ea:e6:86:
0d:a1:61:24:ed:8d:5f:cd:6b:95:6d:9d:47:44:7d:
31:bc:03:4f:85:eb:e1:a1:2c:98:24:6b:d7:11:9f:
48:d2:78:a4:25:c9:74:c5:af:28:6b:10:2f:89:be:
5c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9A:13:CD:FA:A3:8D:CA:ED:04:4A:A2:5F:90:D8:66:7E:8D:DE:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/39da2133-de58-3ba5-8738-587be956e596.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.206.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:8f:61:ca:7c:44:30:47:01:09:b3:ab:61:d5:9b:05:c8:93:
3c:f3:e0:99:1e:e7:0e:2c:95:1a:2d:85:44:5b:8f:5a:6f:13:
76:7b:f1:a7:54:5b:4a:78:94:db:0b:54:85:d6:f1:50:75:1d:
c0:9a:8e:0e:0a:76:ea:44:04:8c:5a:7b:3d:ee:84:6a:ec:cc:
45:a7:d4:c6:6f:49:d0:fb:42:3c:07:27:e9:23:f9:ce:55:e8:
29:3d:4c:93:a9:2e:2a:75:af:74:f3:e9:62:92:6e:59:d7:41:
e2:65:3e:dd:ab:af:e5:f8:b9:3e:66:bd:52:07:8d:c1:e1:56:
ed:cc:70:2c:75:6e:d3:64:2a:c9:95:73:a3:72:1d:04:fa:3f:
9e:b9:dc:6a:73:d8:f0:da:eb:75:31:26:dd:89:45:c2:b9:2a:
15:4f:6e:41:b2:54:b1:e9:ec:0e:d9:ea:b5:d1:18:b7:3e:a9:
32:f4:74:7c:ed:43:25:08:ff:9b:1f:67:b0:77:fa:e6:b1:fe:
c8:be:69:bc:5b:dd:4f:af:b4:b5:31:7f:57:ad:01:2f:b4:49:
35:ba:a6:3d:64:0b:5f:8f:59:3a:fe:9d:2a:98:27:3e:97:d9:
06:9a:74:66:cc:98:4e:96:fb:7c:02:82:0d:63:52:2b:9f:5c:
71:db:ed:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:48:00 2025 by rpki-client