Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3b98884f-6544-3561-9a52-f8ff6f884f01.roa
File: 3b98884f-6544-3561-9a52-f8ff6f884f01.roa (raw, json)
Hash identifier: lNqO5RbsssFe0DlGkX7CEFr9S3cBscAuJmAX8UPcABM=
Subject key identifier: 02:36:25:82:E9:9B:8F:DB:EB:59:09:A7:2F:09:6C:A9:6E:CA:AE:9E
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848BFEBD71EB0869CB20057EC80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3b98884f-6544-3561-9a52-f8ff6f884f01.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 395973
IP address blocks: 104.134.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:d7:1e:b0:86:9c:b2:00:57:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=3a1b9054-a9e1-49c0-9bb6-85b62bde9772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dc:3f:e3:8d:49:98:bf:0b:50:16:e4:33:cd:
83:50:d5:04:63:e3:de:b9:0f:be:21:d0:c3:60:87:
81:e7:b8:ae:6c:09:dd:a6:af:a2:67:b2:3d:6f:b9:
1c:36:f7:12:14:45:04:c8:af:78:72:61:4e:a0:5f:
56:3c:ba:14:52:3d:1c:51:c0:fb:71:b5:1f:fd:f3:
a4:4b:3d:63:23:40:c9:1e:7a:05:66:c4:a3:c6:2c:
4f:b2:35:30:ea:6d:b7:e2:9b:a9:12:d6:08:c8:57:
8c:4c:59:02:b0:05:fb:50:b8:e4:e6:8a:94:74:36:
47:8e:54:20:2b:78:4a:9d:bd:77:8b:05:4a:fa:61:
e5:d6:9b:91:51:1d:1f:78:f9:a6:92:31:9a:e4:73:
2d:0e:d4:05:cb:e3:ae:62:e8:97:d6:b2:0b:c6:95:
bf:41:25:8b:c2:63:e1:2b:88:82:b6:f1:44:46:b6:
c6:7d:60:42:1a:81:a8:88:45:35:9b:94:d6:8d:dc:
26:bc:a2:bd:91:f2:23:85:53:07:b9:09:a5:6f:52:
8b:d9:90:53:59:36:bd:f1:ad:13:af:59:a8:ba:9f:
b9:d3:07:ff:a6:32:09:69:78:d5:c5:be:56:21:04:
29:73:6f:74:6a:ac:e8:d4:54:23:3b:b9:e0:b7:40:
99:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:36:25:82:E9:9B:8F:DB:EB:59:09:A7:2F:09:6C:A9:6E:CA:AE:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3b98884f-6544-3561-9a52-f8ff6f884f01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.187.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:7d:7e:1b:3f:91:88:45:38:34:c6:f7:0f:7d:ef:12:5e:14:
b0:6a:e8:3f:53:13:9d:ac:6e:b6:42:98:fb:ea:89:07:0e:2a:
5f:17:04:11:80:91:9e:3c:12:18:f8:27:66:df:62:cf:b4:65:
fd:e0:9a:a4:35:e5:9a:e6:7e:55:ed:ff:f5:3c:e5:23:a8:46:
6a:6f:0a:32:3d:89:83:71:60:e9:ce:c8:e1:66:a9:8e:94:62:
41:e7:b5:46:59:40:e3:6f:9a:bc:3a:5a:14:07:55:65:5b:3d:
fc:88:19:17:87:fb:e6:0a:c2:e2:80:a4:21:e9:b4:e0:02:04:
48:c8:cd:d3:0d:b7:a9:aa:8c:f0:2f:b0:ca:41:56:a6:4f:ac:
22:2d:3c:77:c8:be:6e:15:cf:d7:9f:f9:f7:fc:df:c6:cc:42:
b6:d0:86:c8:26:f3:4b:54:5b:fa:cb:f4:e7:3f:63:59:ee:00:
5a:92:8a:12:6e:bc:6e:ae:8e:83:fa:90:bc:3e:d6:6e:0b:b3:
03:93:b9:57:2c:97:c3:62:68:95:a1:27:03:87:a6:dd:e9:8c:
7f:9b:26:42:fa:e5:f3:1f:2f:86:3d:69:15:91:f7:74:9e:9f:
bc:3b:c1:2a:cb:68:00:c1:fb:50:e3:79:b2:15:52:64:81:58:
8e:57:51:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:31:56 2025 by rpki-client