Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4bd6b89e-4bd1-3aa3-ae82-2561c1e5c5b3.roa
File: 4bd6b89e-4bd1-3aa3-ae82-2561c1e5c5b3.roa (raw, json)
Hash identifier: pKZuXZUNXT91RYhfesyS7sEpdIKF3zlJrEQgt+g59EQ=
Subject key identifier: F0:57:2F:40:1A:43:C5:55:22:79:84:90:F2:22:A9:64:22:59:D6:DF
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848BFEBD0AB681AC34F2FDDE75C
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4bd6b89e-4bd1-3aa3-ae82-2561c1e5c5b3.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 15169
IP address blocks: 104.134.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:d0:ab:68:1a:c3:4f:2f:dd:e7:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=2c84fa9c-2550-49bb-8e8b-4e98067f704e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5a:9c:bf:08:de:76:87:63:1e:59:d4:aa:c9:
ee:f4:2a:52:7d:43:f8:32:32:e3:20:8f:3f:dc:1a:
1d:4d:e9:8b:46:3a:74:bc:28:d0:c7:e6:3e:20:dc:
2f:c9:1a:f1:35:2a:67:17:87:dd:6a:39:2b:f9:33:
bd:1b:36:a7:c9:6a:31:4c:13:7d:58:a2:e8:3c:a4:
32:60:d8:6f:70:03:9e:47:b7:42:a2:c0:ae:f9:91:
ef:96:40:69:bd:77:00:d4:26:12:04:82:56:51:74:
2b:4e:74:11:13:72:77:1e:87:68:78:d3:b7:8c:91:
e3:1d:45:1b:bb:5f:dc:42:3b:30:3c:b3:64:29:68:
bd:c9:af:1e:c7:3a:f0:90:e0:8f:bf:83:df:e5:5e:
b2:f1:38:5f:ff:52:82:9a:d9:44:78:95:e2:47:6c:
bf:01:6a:f5:6a:85:1b:29:e2:ea:3c:58:2b:93:f8:
50:27:33:56:af:f4:71:db:4d:6a:3a:1c:24:ba:7c:
ef:94:b8:db:d5:ad:a4:2e:60:32:b7:b0:88:aa:a3:
1d:b3:04:b4:3b:71:44:17:06:c7:fb:c9:3c:9d:49:
00:79:bd:88:c4:2d:aa:c0:c2:5f:85:5d:fe:7f:96:
e5:ce:fd:52:a6:6d:e1:ab:a2:d1:a4:54:e5:15:f8:
c8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:57:2F:40:1A:43:C5:55:22:79:84:90:F2:22:A9:64:22:59:D6:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4bd6b89e-4bd1-3aa3-ae82-2561c1e5c5b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.248.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c1:4f:5b:eb:ce:8e:38:92:ca:4a:21:69:13:e1:3d:6a:a3:f8:
32:dc:04:53:55:01:ea:42:c3:5e:96:98:a4:7f:e1:86:71:d2:
2b:67:d3:54:01:25:95:a9:53:89:6c:3a:d9:a2:e0:a1:c2:25:
a4:80:a8:a9:78:e4:89:b6:a7:14:dd:62:87:10:30:90:09:a1:
84:97:e4:38:dd:29:55:57:bf:bb:40:19:8e:2a:1d:34:2d:2d:
c4:81:7f:9f:2b:2e:8d:0b:3c:a8:28:ae:55:97:ed:d0:b3:22:
11:1f:19:87:e4:36:cd:9f:b6:cc:11:ad:ab:23:48:3e:dd:f7:
8f:2b:97:6e:4d:4b:2c:93:d6:19:9f:be:c3:e7:26:7a:26:a3:
c3:49:da:8b:16:c8:e9:15:d3:cf:a6:18:55:a8:68:be:18:53:
66:30:9d:eb:0a:0a:c9:d0:2c:f9:af:83:ca:aa:0f:91:a0:df:
c6:71:04:a7:86:e7:b7:6e:2f:52:ae:19:9f:85:cc:aa:d7:24:
a8:9c:f9:55:b7:20:28:6f:3c:81:f7:30:7d:c0:f2:d2:f8:2b:
2e:2b:7e:53:d8:34:28:24:b1:3a:c9:a6:8c:0d:aa:fe:6d:cc:
5d:32:a8:18:5a:fc:46:66:ba:00:6f:31:20:69:85:a0:dc:d6:
89:10:d4:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/69CraBrDTy/d51wwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
MmM4NGZhOWMtMjU1MC00OWJiLThlOGItNGU5ODA2N2Y3MDRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFqcvwjedodjHlnUqsnu9CpSfUP4MjLjII8/
3BodTemLRjp0vCjQx+Y+INwvyRrxNSpnF4fdajkr+TO9GzanyWoxTBN9WKLoPKQy
YNhvcAOeR7dCosCu+ZHvlkBpvXcA1CYSBIJWUXQrTnQRE3J3HodoeNO3jJHjHUUb
u1/cQjswPLNkKWi9ya8exzrwkOCPv4Pf5V6y8Thf/1KCmtlEeJXiR2y/AWr1aoUb
KeLqPFgrk/hQJzNWr/Rx201qOhwkunzvlLjb1a2kLmAyt7CIqqMdswS0O3FEFwbH
+8k8nUkAeb2IxC2qwMJfhV3+f5blzv1Spm3hq6LRpFTlFfjIWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPBXL0AaQ8VVInmEkPIiqWQiWdbfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNGJkNmI4OWUtNGJkMS0z
YWEzLWFlODItMjU2MWMxZTVjNWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIb4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMFPW+vOjjiSykohaRPhPWqj+DLcBFNVAepCw16WmKR/4YZx0itn01QB
JZWpU4lsOtmi4KHCJaSAqKl45Im2pxTdYocQMJAJoYSX5DjdKVVXv7tAGY4qHTQt
LcSBf58rLo0LPKgorlWX7dCzIhEfGYfkNs2ftswRrasjSD7d948rl25NSyyT1hmf
vsPnJnomo8NJ2osWyOkV08+mGFWoaL4YU2YwnesKCsnQLPmvg8qqD5Gg38ZxBKeG
57duL1KuGZ+FzKrXJKic+VW3IChvPIH3MH3A8tL4Ky4rflPYNCgksTrJpowNqv5t
zF0yqBha/EZmugBvMSBphaDc1okQ1B0=
-----END CERTIFICATE-----
Generated at Fri Apr 4 08:32:51 2025 by rpki-client