Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/448e5339-25f5-3339-84a4-1e29679e812e.roa
File: 448e5339-25f5-3339-84a4-1e29679e812e.roa (raw, json)
Hash identifier: kkP1SNKB+Kwwqha1k9ya9MYXoXHjl6usjq3rVHYYUhE=
Subject key identifier: EE:48:97:17:B6:FA:45:7D:98:3A:F4:52:A4:0D:83:55:60:AE:30:F2
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0E561A7E0FF64F49F9A80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/448e5339-25f5-3339-84a4-1e29679e812e.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 395973
IP address blocks: 104.134.156.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:e5:61:a7:e0:ff:64:f4:9f:9a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=a38a5e45-7a54-4d17-a7df-288ed0ec658b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f3:de:c2:63:3d:5d:7d:2c:51:27:b3:84:a9:
1d:9d:6c:d2:82:b3:89:00:4e:9f:44:4f:11:41:1d:
fe:33:60:c4:c5:38:5b:8d:0e:86:a5:9d:61:74:5f:
99:64:23:0f:95:49:14:a2:82:a6:2a:65:c3:fe:0e:
58:6f:be:86:a2:0a:89:42:d7:d9:42:35:95:78:ac:
54:84:a2:bb:f3:9a:7f:46:04:9b:fd:82:c7:34:7a:
3c:10:a7:fb:10:63:e3:a4:38:2f:1f:b3:89:59:71:
81:8f:d9:8d:cb:89:6f:62:69:48:f9:51:23:c7:d4:
5f:87:95:c6:e5:ea:6b:96:97:1e:eb:f6:bc:49:0d:
99:60:f3:d7:c3:b1:0e:6c:e1:ec:60:99:8e:b9:4b:
e8:d6:bd:6f:69:9a:f5:ad:6b:b1:2e:49:2d:3b:02:
68:89:27:f6:d5:36:cf:8e:85:63:7a:67:a5:2e:f7:
91:eb:39:4c:aa:20:0e:7c:bf:83:02:f4:23:ce:0a:
ec:6f:fc:2a:17:f0:07:b4:17:94:a6:d7:f2:0f:5b:
9f:9f:05:85:80:11:35:41:5f:72:b8:71:bb:fa:d1:
22:ad:67:e0:30:0a:3e:2b:50:b8:be:3d:5f:40:a4:
60:be:4c:a7:69:f1:a7:0d:fb:5a:ad:ec:4b:4e:4c:
d9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:48:97:17:B6:FA:45:7D:98:3A:F4:52:A4:0D:83:55:60:AE:30:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/448e5339-25f5-3339-84a4-1e29679e812e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.156.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:d1:ed:3b:0f:84:b9:da:4e:d9:38:7a:63:c7:e9:56:ed:f1:
09:b0:c8:27:4e:0e:1d:fa:ea:dc:3f:54:88:6a:9e:2a:3e:80:
fd:3c:51:f6:7c:4a:ec:07:73:19:cb:77:5c:cf:b5:ef:16:68:
35:67:f4:35:7c:9a:a8:03:e0:b3:fd:9a:45:70:2e:ee:38:7d:
5d:db:c0:10:99:d4:7c:22:2d:ea:82:f0:d0:22:b8:eb:2b:67:
cd:27:aa:0d:49:eb:84:43:b5:24:07:ac:63:0a:b3:d0:30:c4:
a5:90:63:9d:c9:f9:61:72:8a:dc:64:48:9d:61:22:f0:a6:6d:
f2:5b:3a:2d:86:31:30:4d:a9:38:90:fc:e8:45:b7:03:bc:60:
2b:41:70:3d:cf:2a:95:ad:42:5d:f8:dc:b4:18:8f:52:d9:1f:
4a:47:59:88:c9:d7:24:0b:49:ad:fa:90:06:4f:ce:bc:0e:18:
07:8c:c2:6c:bb:4a:d4:47:70:95:a2:89:13:4e:18:a0:a0:ba:
6c:5e:2b:ff:98:37:29:91:3c:1f:d9:92:c3:e8:24:a6:bf:98:
1d:21:41:a9:46:cb:2b:26:ad:3d:fb:2c:57:07:d8:d0:f8:cb:
9a:1c:65:ef:e8:be:ac:3c:ca:c8:08:17:8d:91:9c:7d:33:a3:
c3:b4:de:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:41:19 2025 by rpki-client