Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/463c4fe8-9f0c-3099-a196-db01829be9e1.roa
File: 463c4fe8-9f0c-3099-a196-db01829be9e1.roa (raw, json)
Hash identifier: B+64lVDIZZRWk1cM62adem8DMzUzA7jlV6bbxE2jaoU=
Subject key identifier: 16:16:EF:E1:0F:18:A9:22:D2:A0:EE:0A:19:75:08:D7:5A:0C:AB:46
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0F4DD7B80D72FB4D16180
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/463c4fe8-9f0c-3099-a196-db01829be9e1.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 41264
IP address blocks: 104.133.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:f4:dd:7b:80:d7:2f:b4:d1:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=58384d7f-7d73-4373-b0b8-75865e991b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0d:66:de:76:e0:32:23:a1:d6:d5:dc:46:c7:
70:d2:39:c0:1b:d0:ff:26:d4:5b:03:df:53:67:7c:
a6:5c:9c:03:d2:8b:09:44:6a:38:91:d5:64:28:5e:
c9:08:ba:c4:6b:d7:30:ab:0a:78:a8:b6:8e:5f:44:
7a:3c:07:b1:13:17:a7:b4:76:1c:c5:22:07:7e:0b:
3f:1a:8c:fa:76:3a:b8:39:20:26:91:eb:49:48:e7:
ea:f4:20:02:77:8f:c1:1b:04:c9:7c:97:5c:51:6a:
c0:a8:d4:8b:4b:b4:1f:00:e2:57:0f:de:f9:04:b7:
e8:25:8f:1e:34:3d:85:92:16:d8:69:c2:93:eb:6e:
d9:00:53:b5:29:4e:28:89:75:3a:0b:58:1e:f5:42:
17:26:5a:33:6b:7e:6e:bf:ed:5c:d7:60:62:3e:93:
18:42:66:5a:cb:60:81:f9:65:e7:0b:84:d7:20:21:
e2:b9:ef:7c:b8:33:8c:35:8c:3d:8b:9d:2b:3f:fe:
2e:7d:9a:4f:55:54:56:30:b8:b2:35:e2:ad:be:ff:
1d:90:7a:67:bf:cc:f7:7c:7c:11:f0:32:ee:43:3b:
4d:91:ce:91:8f:ba:d3:cd:c0:88:bb:c8:6e:14:3d:
78:fd:35:d4:dd:36:93:15:48:4d:fd:56:7d:94:35:
ab:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:16:EF:E1:0F:18:A9:22:D2:A0:EE:0A:19:75:08:D7:5A:0C:AB:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/463c4fe8-9f0c-3099-a196-db01829be9e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:44:61:12:0d:60:c9:b1:2f:5f:f5:ff:81:c0:36:05:90:52:
07:b2:d0:8e:81:b6:db:bd:28:06:bb:cf:15:46:95:38:54:3c:
75:8f:f4:6d:b4:4a:55:27:72:32:43:cd:d6:01:3e:c0:92:31:
eb:40:e3:2e:88:ad:01:11:7c:96:f5:2f:19:b9:74:d8:18:2d:
a7:ff:09:0a:36:64:cc:4d:72:56:59:e3:fe:3c:2c:cd:7d:eb:
b6:e6:a5:62:cc:20:80:49:82:ff:4f:3d:81:b0:24:c5:72:ab:
6f:e8:72:81:d1:fe:d6:78:41:57:2d:35:7c:16:00:bf:8d:0a:
88:9d:fa:b0:06:a2:7e:e0:40:c1:23:9b:d8:de:49:bc:9f:cd:
db:b7:0f:e9:8e:69:64:db:bc:12:06:d6:49:dd:a9:da:0c:65:
98:03:48:50:cb:54:f2:e9:1f:93:3d:b9:ce:1a:eb:6c:f5:50:
ae:6a:d7:46:a3:e3:2f:2e:71:93:e7:c5:0f:b9:8a:e2:66:44:
26:e9:0a:77:d7:c3:22:6a:87:72:e6:ea:aa:a0:40:91:cf:d4:
f3:5d:25:5e:86:6c:33:35:26:23:5c:b2:05:75:1c:89:05:35:
23:32:38:5e:a7:52:1c:05:7a:93:ad:be:7d:f3:46:0a:f3:a8:
77:55:6f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:27:14 2025 by rpki-client