Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3a607d95-94d6-32e6-9b60-354ca5f27c4f.roa
File: 3a607d95-94d6-32e6-9b60-354ca5f27c4f.roa (raw, json)
Hash identifier: OdH8BwvYv3zuyEOZwu+SMbI66nr24PUiNCZ0EDcml4I=
Subject key identifier: E6:BD:94:FD:6D:D1:38:F9:8A:FB:6B:92:80:4A:95:B6:0F:49:19:9D
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0DCB2744FD21C411619A0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3a607d95-94d6-32e6-9b60-354ca5f27c4f.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 41264
IP address blocks: 104.133.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:dc:b2:74:4f:d2:1c:41:16:19:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=6e02058e-fa2d-4bb9-bc30-cafb7562bf8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:73:f2:c9:69:7f:57:35:c4:c8:70:68:04:98:
c0:af:0d:79:c5:92:ca:96:c4:d7:f4:98:3d:b3:9f:
a5:00:a4:d5:90:07:07:79:d6:03:a7:0c:eb:e3:2f:
f2:ba:d3:6f:8d:5b:55:af:90:79:e3:fa:2e:a3:5f:
b5:c1:bb:a4:de:ea:1f:bd:38:77:e6:21:04:01:24:
47:39:48:42:f8:25:1c:89:36:8f:dc:20:22:48:73:
93:ca:63:40:5d:50:f3:b1:3a:64:a2:73:96:4a:b6:
f1:98:e4:78:3f:c3:74:7e:a6:a4:9f:d6:37:32:89:
eb:6d:3c:b0:13:e7:57:0c:2c:3a:c0:28:f3:1e:ff:
33:0e:96:44:d3:78:d9:99:38:ef:f8:4d:fb:8d:7d:
e2:db:a3:e9:62:d0:7f:75:a7:45:a3:2f:50:f4:f7:
47:9f:00:15:99:27:71:00:e1:b9:38:d9:1b:33:49:
00:e1:34:c3:9f:8b:3a:0d:57:a1:26:ef:db:8e:6f:
88:d5:49:f4:48:33:5c:c3:90:79:9f:c3:bf:ef:c4:
84:1f:82:c5:8f:fd:88:7f:a2:42:7b:b1:86:ba:f0:
a6:30:f0:c9:93:1d:b0:b5:22:bc:c3:d1:ef:e3:be:
39:ba:24:6e:16:c0:05:33:b0:6f:2b:1b:3c:34:f0:
3d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BD:94:FD:6D:D1:38:F9:8A:FB:6B:92:80:4A:95:B6:0F:49:19:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3a607d95-94d6-32e6-9b60-354ca5f27c4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:06:86:a0:08:6b:df:8a:33:ef:0b:11:13:da:e7:b5:c5:fa:
a5:24:0f:5c:47:fd:ff:3d:26:1c:8d:a3:8e:08:2e:c7:71:98:
3f:fa:22:66:c9:a5:09:1d:4d:0d:f7:84:f0:00:18:9c:bd:e7:
c1:f1:62:99:53:28:70:2d:05:43:46:0d:ca:41:80:e2:ec:11:
a4:c8:ac:b4:56:7a:95:d4:82:82:22:3c:1b:71:ab:19:27:70:
b9:af:9a:b7:bc:21:5e:4f:19:18:0c:73:5f:19:d9:28:09:86:
ec:ae:53:3b:d7:5c:44:29:30:ea:12:01:4d:ea:b1:11:e9:38:
10:0d:e9:71:11:b8:c8:f8:54:f8:04:5f:d8:71:ce:bf:e9:87:
ba:b4:a0:4c:22:45:95:a3:d6:7e:22:90:25:a8:ab:db:26:c4:
c0:76:90:30:20:4b:35:83:bf:7c:97:46:b1:19:8f:e0:28:a6:
7d:8d:36:2f:2d:7e:8e:30:aa:f6:c5:80:0e:4b:e7:dd:1a:3b:
1d:d6:ed:4e:6d:10:78:7b:14:08:f7:36:1a:24:ff:ed:17:87:
5e:02:15:02:76:0e:21:0d:2c:2f:97:57:7e:9d:b5:6e:a1:74:
cc:87:72:5f:23:7d:f8:8c:e4:bf:27:9a:d2:81:f1:8b:21:5d:
65:6c:3b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:38:32 2025 by rpki-client