Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4b2512a4-05e5-39f6-92e6-6dbb0d9c8be9.roa
File: 4b2512a4-05e5-39f6-92e6-6dbb0d9c8be9.roa (raw, json)
Hash identifier: 8k40mGN7+9z9VobntObWMahFF8wuWvRiqjldVdlPhkY=
Subject key identifier: 4A:88:43:66:8A:6F:26:8A:27:16:06:64:37:35:BA:82:CF:C7:11:F0
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0DF6632DD62FE8095EF00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4b2512a4-05e5-39f6-92e6-6dbb0d9c8be9.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 41264
IP address blocks: 104.133.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:df:66:32:dd:62:fe:80:95:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=9d3f0c29-bca7-45c8-971a-43acd51d380b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:35:17:85:76:36:24:ed:10:1d:cb:8c:81:00:
b4:07:4a:ee:26:83:54:7b:aa:42:04:ba:79:19:4a:
8d:22:ba:19:1b:fc:1b:0d:49:0b:0b:61:59:84:37:
43:90:52:02:1a:82:84:c8:06:00:80:c9:55:a1:9f:
80:a7:bd:6c:19:2c:4d:b7:1e:95:44:0b:2a:98:51:
56:03:d3:25:9b:b8:b4:35:5d:87:24:74:f4:c9:38:
54:0e:3b:fd:89:37:22:ae:d1:33:80:49:b9:b0:e4:
a0:21:91:87:07:7c:22:e2:55:d0:f8:d9:63:83:20:
fa:0e:12:b0:cd:f5:f4:77:c8:2d:7b:71:6e:d5:e1:
5c:53:0b:59:ac:b5:4f:28:0d:7f:4c:82:f2:30:9b:
27:14:c6:8e:99:9a:35:bc:82:78:e7:17:e2:0a:2b:
58:83:0b:0d:ec:d1:e1:f1:ad:0e:7b:ec:b2:87:57:
b1:86:47:32:5e:c8:07:19:c7:03:8e:4a:c2:ce:9c:
cf:90:81:dc:1a:fb:88:6b:62:f2:fc:54:0b:09:14:
ac:3d:14:81:80:9a:7e:98:f0:64:24:dd:53:6f:88:
48:30:73:30:2d:6f:04:c2:92:18:7f:76:04:f1:29:
0c:c8:d2:11:d2:41:1f:95:91:9b:da:a6:8f:12:da:
4d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:88:43:66:8A:6F:26:8A:27:16:06:64:37:35:BA:82:CF:C7:11:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4b2512a4-05e5-39f6-92e6-6dbb0d9c8be9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:bc:2f:e5:b4:c7:7c:a7:35:9a:f8:0c:88:4e:aa:67:7d:4b:
f0:8a:16:cd:74:4e:cc:7e:3f:ae:e6:7b:f4:29:f1:68:b9:4d:
2a:e0:78:6d:3c:00:3b:80:8f:d6:86:85:8a:ea:b6:1d:c8:00:
64:5e:99:6f:20:a6:46:0b:86:fe:d5:ba:cb:88:7b:f5:29:48:
a3:0f:70:47:f9:f2:44:38:8e:4e:42:0b:dd:5d:9e:d4:02:7c:
b6:41:cd:82:6a:88:a1:28:e6:56:f8:29:00:56:39:f5:88:aa:
66:c8:6c:28:7c:51:a4:48:7e:f1:d5:a6:e7:fb:27:07:25:92:
dd:4c:e9:39:44:6b:09:da:38:d4:a1:11:f2:b8:dd:37:d6:eb:
88:d8:94:2e:0e:0b:9b:83:6b:e9:ad:85:26:be:e0:53:af:6e:
59:18:78:ca:7d:2b:a2:50:4e:f7:60:78:7a:5d:02:ee:95:bf:
57:45:ec:73:4d:9d:a3:b4:f1:13:db:01:a2:f5:7c:63:2e:68:
97:22:3a:8c:60:02:2e:2f:d5:82:8d:79:13:b9:45:5c:05:29:
ea:56:d6:98:c7:06:71:cc:c3:e0:27:a1:df:18:54:7f:5d:65:
65:f6:8a:5c:d9:3e:6f:08:6b:8c:cb:e4:a4:86:25:b7:c1:e8:
39:b0:c4:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wN9mMt1i/oCV7wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk
OWQzZjBjMjktYmNhNy00NWM4LTk3MWEtNDNhY2Q1MWQzODBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DUXhXY2JO0QHcuMgQC0B0ruJoNUe6pCBLp5
GUqNIroZG/wbDUkLC2FZhDdDkFICGoKEyAYAgMlVoZ+Ap71sGSxNtx6VRAsqmFFW
A9Mlm7i0NV2HJHT0yThUDjv9iTcirtEzgEm5sOSgIZGHB3wi4lXQ+NljgyD6DhKw
zfX0d8gte3Fu1eFcUwtZrLVPKA1/TILyMJsnFMaOmZo1vIJ45xfiCitYgwsN7NHh
8a0Oe+yyh1exhkcyXsgHGccDjkrCzpzPkIHcGvuIa2Ly/FQLCRSsPRSBgJp+mPBk
JN1Tb4hIMHMwLW8EwpIYf3YE8SkMyNIR0kEflZGb2qaPEtpNzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEqIQ2aKbyaKJxYGZDc1uoLPxxHwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNGIyNTEyYTQtMDVlNS0z
OWY2LTkyZTYtNmRiYjBkOWM4YmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACS8L+W0x3ynNZr4DIhOqmd9S/CKFs10Tsx+P67me/Qp8Wi5TSrgeG08
ADuAj9aGhYrqth3IAGRemW8gpkYLhv7VusuIe/UpSKMPcEf58kQ4jk5CC91dntQC
fLZBzYJqiKEo5lb4KQBWOfWIqmbIbCh8UaRIfvHVpuf7Jwclkt1M6TlEawnaONSh
EfK43TfW64jYlC4OC5uDa+mthSa+4FOvblkYeMp9K6JQTvdgeHpdAu6Vv1dF7HNN
naO08RPbAaL1fGMuaJciOoxgAi4v1YKNeRO5RVwFKepW1pjHBnHMw+Anod8YVH9d
ZWX2ilzZPm8Ia4zL5KSGJbfB6DmwxFs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:31:26 2025 by rpki-client