Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/42f180de-0318-31a1-a52c-970141c3e9c7.roa
File: 42f180de-0318-31a1-a52c-970141c3e9c7.roa (raw, json)
Hash identifier: zKEavhIihwiWLsSneJJX6d2ZdQPz7ddJb/sibn2mXt0=
Subject key identifier: 74:52:94:66:38:32:CC:CD:C7:8D:1E:C8:0C:F1:29:8C:1C:D4:2E:5E
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0DB86B0F3B72108876040
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/42f180de-0318-31a1-a52c-970141c3e9c7.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 15169
IP address blocks: 104.134.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:db:86:b0:f3:b7:21:08:87:60:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=f676784e-04d6-47f0-84f1-6a7cfdf115d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ec:45:c4:31:b1:4a:93:23:0f:3f:7c:00:a3:
91:62:c1:52:4f:56:98:25:34:21:aa:7e:cf:02:a8:
4a:52:69:ff:b6:93:c1:0a:8e:61:6e:18:e3:d5:85:
30:dd:b1:48:de:c9:ea:cc:e5:3c:6e:c3:98:52:2d:
52:05:97:ac:5a:bf:ce:45:91:ec:cd:8a:4d:b7:bb:
c4:1e:6a:4e:76:3a:0b:81:88:0e:4a:cd:a8:76:ad:
58:1f:3c:ac:fb:85:e3:cf:95:6f:66:d9:3c:00:ce:
4e:a8:76:c3:b6:11:52:f6:8c:0e:e9:37:89:14:75:
6f:a3:7b:28:54:9a:ff:b1:62:31:62:55:40:5e:76:
cc:81:5e:cd:c3:7e:30:a7:94:de:80:dd:c4:cb:fe:
cc:87:26:2c:51:ec:40:d2:5f:44:28:9a:1f:25:ba:
53:df:16:6c:ef:cd:5e:98:29:91:28:f2:8b:10:2d:
b0:98:35:1e:f0:79:ed:be:1b:18:82:b4:d2:9b:42:
0c:f0:d5:f0:e9:06:d6:fe:68:45:7d:1f:da:3f:98:
08:fd:90:c0:89:df:aa:20:7d:a1:6b:e7:73:17:5d:
b7:c3:d1:7f:08:e7:67:23:09:cb:82:43:3c:c1:a6:
38:0f:75:a1:0d:d9:52:a8:ff:af:d3:9b:78:20:14:
6d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:52:94:66:38:32:CC:CD:C7:8D:1E:C8:0C:F1:29:8C:1C:D4:2E:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/42f180de-0318-31a1-a52c-970141c3e9c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:47:e1:8b:5a:9e:1a:f6:dd:a5:ab:fe:5b:ba:7b:7b:89:4e:
80:a0:b8:f1:ed:e6:a4:94:cc:e3:1d:5b:23:46:c4:e5:08:41:
56:c9:6c:64:ff:8b:ca:ba:2b:8f:c1:45:0b:87:40:a9:09:7f:
c0:5c:02:71:a4:6e:2f:cc:10:77:01:a8:d9:47:54:8a:ca:3b:
33:6e:15:95:6d:07:4d:ac:9e:97:65:a7:d1:e7:1e:45:d2:15:
aa:f7:bd:51:db:c9:e2:10:26:f0:c7:3a:8c:c0:02:cb:75:ce:
9c:44:f4:01:f6:82:dd:ba:84:15:a7:b9:a8:2b:80:43:6d:11:
cd:4a:d7:84:6c:4b:d2:00:91:4c:09:10:8a:10:e6:fb:26:9e:
75:be:e3:8a:fa:c6:61:62:0e:2a:ff:43:b3:0c:50:4e:63:e9:
5b:37:36:8f:b9:5d:76:38:d0:40:32:47:8a:fd:52:87:7e:71:
b8:d1:94:8e:33:2d:95:f3:4c:df:79:57:42:3c:f8:3a:f3:91:
7f:94:d3:17:19:2e:71:42:3e:b9:e9:80:9a:b8:bd:89:0e:17:
20:c0:1a:54:8c:a5:7d:7d:ef:fe:0e:e5:d8:29:10:a6:5d:7d:
9b:01:41:da:9c:e5:70:1c:70:63:bb:ce:0d:f1:eb:e5:5b:5c:
a9:1e:50:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wNuGsPO3IQiHYEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk
ZjY3Njc4NGUtMDRkNi00N2YwLTg0ZjEtNmE3Y2ZkZjExNWQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuxFxDGxSpMjDz98AKORYsFST1aYJTQhqn7P
AqhKUmn/tpPBCo5hbhjj1YUw3bFI3snqzOU8bsOYUi1SBZesWr/ORZHszYpNt7vE
HmpOdjoLgYgOSs2odq1YHzys+4Xjz5VvZtk8AM5OqHbDthFS9owO6TeJFHVvo3so
VJr/sWIxYlVAXnbMgV7Nw34wp5TegN3Ey/7MhyYsUexA0l9EKJofJbpT3xZs781e
mCmRKPKLEC2wmDUe8HntvhsYgrTSm0IM8NXw6QbW/mhFfR/aP5gI/ZDAid+qIH2h
a+dzF123w9F/COdnIwnLgkM8waY4D3WhDdlSqP+v05t4IBRtRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHRSlGY4MszNx40eyAzxKYwc1C5eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDJmMTgwZGUtMDMxOC0z
MWExLWE1MmMtOTcwMTQxYzNlOWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaIaQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFdH4Ytanhr23aWr/lu6e3uJToCguPHt5qSUzOMdWyNGxOUIQVbJbGT/
i8q6K4/BRQuHQKkJf8BcAnGkbi/MEHcBqNlHVIrKOzNuFZVtB02snpdlp9HnHkXS
Far3vVHbyeIQJvDHOozAAst1zpxE9AH2gt26hBWnuagrgENtEc1K14RsS9IAkUwJ
EIoQ5vsmnnW+44r6xmFiDir/Q7MMUE5j6Vs3No+5XXY40EAyR4r9Uod+cbjRlI4z
LZXzTN95V0I8+DrzkX+U0xcZLnFCPrnpgJq4vYkOFyDAGlSMpX197/4O5dgpEKZd
fZsBQdqc5XAccGO7zg3x6+VbXKkeUCU=
-----END CERTIFICATE-----
Generated at Fri Apr 4 08:37:29 2025 by rpki-client