Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3bf92bab-dc83-35cd-b0a0-9b7808eea923.roa
File: 3bf92bab-dc83-35cd-b0a0-9b7808eea923.roa (raw, json)
Hash identifier: MtmhXYo+iB1QXK+AyHEU/6rvIQQXU0tLmt6S1cAk1R0=
Subject key identifier: 47:5F:04:CB:7E:12:FF:BA:0B:98:03:82:64:ED:B5:EE:5D:79:95:00
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0DEBC80D1EC7593B5DB60
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3bf92bab-dc83-35cd-b0a0-9b7808eea923.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 41264
IP address blocks: 104.133.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:de:bc:80:d1:ec:75:93:b5:db:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=94c3d265-c52c-4c1c-a7e2-ca97287570b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:35:16:c0:8f:ba:f4:d5:99:04:56:19:e0:14:
02:12:07:f7:df:ee:ec:77:0e:31:45:89:23:82:cb:
e1:34:b6:bf:b9:eb:f0:97:26:82:dd:43:27:4a:c3:
60:20:33:19:38:ad:92:b3:5d:93:3d:9d:fb:a0:46:
47:6e:e9:b9:ef:3d:43:3e:44:fe:8f:29:74:cd:be:
c5:bc:b2:9f:84:2e:2f:53:1a:f5:54:ed:f1:4e:e9:
bb:f6:94:34:b9:5b:f0:b9:a5:fe:bf:c0:8f:bf:a2:
41:41:1b:3f:ce:23:66:74:23:c8:29:0c:f5:47:a1:
a3:99:b5:2b:d8:45:56:0f:4b:48:39:f5:e6:ad:7a:
e4:e7:50:10:91:7c:03:a5:d5:60:e5:a4:eb:56:73:
45:39:1b:e3:3a:b2:d5:ae:69:69:a9:ab:c0:53:55:
f1:0a:87:dd:25:79:4f:ae:5b:f9:7e:1c:67:7a:bd:
c5:00:67:4b:df:08:52:5b:f7:09:c7:c9:46:6e:83:
9c:f7:1f:97:94:5d:7e:e9:67:5d:77:fa:d3:6a:38:
c1:db:22:c2:39:c8:1f:ef:d5:71:af:d5:7b:4c:04:
d4:0a:3d:fb:20:81:3f:4e:f5:21:02:60:06:a6:99:
f4:f6:7d:17:a1:b5:6b:7a:a1:c2:5d:18:cf:dd:49:
a1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5F:04:CB:7E:12:FF:BA:0B:98:03:82:64:ED:B5:EE:5D:79:95:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3bf92bab-dc83-35cd-b0a0-9b7808eea923.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:cf:47:e7:44:a7:12:9b:46:c8:c4:ed:2b:f5:f5:2a:c6:a6:
9d:af:25:d6:41:72:74:e6:49:bd:a1:61:7f:94:7b:a9:dd:03:
70:b9:83:2e:b6:70:92:0a:82:15:ab:90:e0:f6:c4:c6:7d:4f:
3d:58:d5:82:97:99:b6:fb:4e:c4:bb:b4:08:d6:70:fe:db:b7:
ca:b2:4a:33:85:97:d3:80:8e:46:5a:ee:81:07:55:eb:03:57:
b2:df:72:66:90:a1:0a:0d:ff:54:c5:d2:7b:e6:50:b3:5c:00:
32:9f:f1:d9:b6:e6:9d:5b:bb:79:45:72:dd:19:31:a0:92:c5:
11:07:97:f6:01:c7:28:b1:a9:7d:0d:9a:aa:e0:58:19:f3:d2:
d5:14:89:fc:3d:20:7b:eb:c5:b3:a6:3b:97:88:d9:4b:96:78:
f8:70:56:72:f0:ad:6b:6d:ad:84:69:e4:8a:d6:ef:56:90:30:
40:b4:50:70:b4:9c:df:c9:0b:ea:e5:e3:a3:00:b4:4d:ff:70:
0c:67:d5:2c:9c:00:9b:75:28:9d:f7:92:0d:71:9b:34:61:16:
04:54:63:dc:42:b7:34:97:f6:a9:8a:62:27:3b:d7:07:c8:d1:
45:7d:92:73:31:78:f7:ba:62:36:b6:c1:9d:d0:80:51:ad:ed:
37:dc:3f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:49:28 2025 by rpki-client