Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/529312e5-1edf-3c98-ace4-e52543a5adf3.roa
File: 529312e5-1edf-3c98-ace4-e52543a5adf3.roa (raw, json)
Hash identifier: Uj7g1wsp/2ytiE0xh3w2XCapi7IosHAbzmJ01xEthb8=
Subject key identifier: 6C:F3:12:91:C2:C0:D2:77:76:42:56:17:2F:56:B1:5C:75:36:16:B4
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848DEA12B0A460BF0E419A95A00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/529312e5-1edf-3c98-ace4-e52543a5adf3.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 41264
IP address blocks: 104.132.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:2b:0a:46:0b:f0:e4:19:a9:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=8743c5fb-0167-4fc2-971f-405a2cdf5b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:16:f0:3b:f1:d7:0c:3b:d2:05:47:23:75:ea:
69:ed:4c:06:c6:ce:d4:86:c7:04:89:f2:92:39:a1:
7a:d8:82:07:2b:16:b5:22:a2:14:e5:ac:e1:f7:14:
15:ae:49:15:a9:d5:72:19:65:5c:e2:e6:83:4b:ae:
c5:df:3d:4f:06:c7:2a:c5:39:89:17:f1:6d:06:c4:
61:45:5e:3a:76:c1:6d:45:d6:79:08:a2:fd:15:d7:
4c:db:91:89:60:fe:42:fa:6d:e2:70:1e:8b:68:f3:
f4:da:e5:4a:73:fd:a5:b7:1f:08:10:28:ba:dc:2c:
96:b4:0f:f1:d1:0b:60:38:c3:4e:e3:d5:ec:9f:fc:
a5:01:14:69:41:3b:ee:fe:d4:d4:81:aa:29:20:25:
f5:76:6e:73:cc:e5:dc:68:d4:c5:25:9f:c6:de:ca:
fd:aa:02:64:2a:61:55:dc:4b:18:eb:54:9a:6d:38:
54:b5:69:27:0e:a4:dc:99:b7:cc:f8:08:f2:12:22:
dd:2a:40:ba:3e:ac:b3:25:08:eb:a7:e4:6e:47:30:
59:97:90:9f:23:39:1e:50:f8:d9:91:f5:20:3c:c9:
5f:17:0f:71:50:29:00:5b:c3:a8:8c:33:48:60:f3:
a6:18:e5:a2:f7:90:e0:01:5d:33:ae:c9:44:0b:15:
26:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F3:12:91:C2:C0:D2:77:76:42:56:17:2F:56:B1:5C:75:36:16:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/529312e5-1edf-3c98-ace4-e52543a5adf3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:1c:ac:14:21:0d:29:74:98:f2:34:81:78:70:62:6a:b0:28:
5f:ce:6b:fd:91:df:df:71:dc:ba:8c:28:e0:6a:d6:ba:4b:42:
c7:46:b7:dc:a2:5e:82:cc:39:03:c4:61:0d:b4:14:54:65:4c:
f1:f7:19:d2:ef:d4:7c:0e:a1:fb:7c:a2:1f:30:da:e3:d8:35:
7f:f2:05:08:52:ca:6c:ed:49:42:ca:3a:9d:7b:6e:d5:8c:56:
13:ae:d6:f9:fa:b4:db:f8:c0:d8:76:67:6e:a7:80:15:06:29:
30:a8:f9:b5:75:19:f4:2e:9f:00:20:87:a8:d3:73:da:94:5d:
5d:c9:25:f8:14:bb:f6:8f:48:b9:3b:97:e6:57:b2:89:2d:f5:
19:38:c9:15:9b:08:dc:fc:ba:2c:d6:4d:c8:d4:e7:67:44:87:
0e:17:f7:2c:6f:63:45:a2:a5:b3:40:14:3d:df:4e:0b:ee:ea:
08:66:f0:4b:2a:84:92:b4:74:e9:34:be:1e:c2:db:0a:52:8a:
b4:c1:ca:fb:c9:a2:81:fe:fb:05:4a:a2:81:41:42:c5:46:ee:
bd:62:e3:b4:bc:d2:6a:a7:38:5f:de:8e:7a:83:c3:70:82:64:
58:b1:11:0b:79:69:4a:cd:56:99:61:c8:35:48:5a:7f:46:d5:
04:14:b5:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoSsKRgvw5BmpWgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk
ODc0M2M1ZmItMDE2Ny00ZmMyLTk3MWYtNDA1YTJjZGY1YjI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxbwO/HXDDvSBUcjdepp7UwGxs7UhscEifKS
OaF62IIHKxa1IqIU5azh9xQVrkkVqdVyGWVc4uaDS67F3z1PBscqxTmJF/FtBsRh
RV46dsFtRdZ5CKL9FddM25GJYP5C+m3icB6LaPP02uVKc/2ltx8IECi63CyWtA/x
0QtgOMNO49Xsn/ylARRpQTvu/tTUgaopICX1dm5zzOXcaNTFJZ/G3sr9qgJkKmFV
3EsY61SabThUtWknDqTcmbfM+AjyEiLdKkC6PqyzJQjrp+RuRzBZl5CfIzkeUPjZ
kfUgPMlfFw9xUCkAW8OojDNIYPOmGOWi95DgAV0zrslECxUmQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGzzEpHCwNJ3dkJWFy9WsVx1Nha0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNTI5MzEyZTUtMWVkZi0z
Yzk4LWFjZTQtZTUyNTQzYTVhZGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIT/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEMcrBQhDSl0mPI0gXhwYmqwKF/Oa/2R399x3LqMKOBq1rpLQsdGt9yi
XoLMOQPEYQ20FFRlTPH3GdLv1HwOoft8oh8w2uPYNX/yBQhSymztSULKOp17btWM
VhOu1vn6tNv4wNh2Z26ngBUGKTCo+bV1GfQunwAgh6jTc9qUXV3JJfgUu/aPSLk7
l+ZXsokt9Rk4yRWbCNz8uizWTcjU52dEhw4X9yxvY0WipbNAFD3fTgvu6ghm8Esq
hJK0dOk0vh7C2wpSirTByvvJooH++wVKooFBQsVG7r1i47S80mqnOF/ejnqDw3CC
ZFixEQt5aUrNVplhyDVIWn9G1QQUtZ4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:37:25 2025 by rpki-client