Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/56bd50a7-fd2c-337b-b17f-e320b3dbc28e.roa
File: 56bd50a7-fd2c-337b-b17f-e320b3dbc28e.roa (raw, json)
Hash identifier: DMzoaw1tVFDIf1AkZ6BHe5DDVm+72EjS0qMK0ZXPqps=
Subject key identifier: 0A:B1:14:A5:69:58:DC:8F:AC:E5:AE:92:D9:BA:33:5B:F2:5D:0B:89
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0DF84878C67FA9A4454B0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/56bd50a7-fd2c-337b-b17f-e320b3dbc28e.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 15169
IP address blocks: 104.134.148.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:df:84:87:8c:67:fa:9a:44:54:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=51c194f5-0a21-4fe3-8a0f-66d2d213de1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:48:a9:8a:d2:89:17:20:b1:06:f4:c2:d4:97:
18:70:6b:96:cd:3c:15:6a:23:2a:e6:a1:10:de:2c:
e4:c3:9d:52:6a:a1:f3:34:08:02:d7:d4:86:58:31:
f4:e1:3f:e7:b2:e2:fe:2c:7a:1a:c1:b0:69:80:0b:
7e:c6:e6:63:60:af:6c:b6:f9:70:1d:f9:c8:8b:0b:
50:80:85:11:74:7a:ec:7c:cc:74:92:a7:fe:5b:9f:
6e:04:3c:6f:62:74:ad:ff:ee:95:ab:b9:a0:0e:b8:
9c:a6:54:b9:f0:2d:5b:f8:f6:e5:46:99:0d:3e:4f:
13:8a:4e:a4:be:ee:36:63:be:bb:d8:07:d0:24:5c:
07:74:7f:d9:c6:6d:7e:34:b4:1f:32:6a:e4:61:58:
12:b9:b2:f4:f9:42:0a:c6:4d:8a:46:9c:e6:fc:0c:
98:20:2f:16:20:19:e9:5b:2f:4b:3c:88:e2:2c:11:
6a:f4:44:a2:0f:53:f1:0e:a4:fa:00:48:dc:9b:c5:
aa:06:4a:74:d7:01:21:4f:d1:af:84:6f:bb:47:e5:
f9:41:04:b5:cd:52:6a:aa:00:61:52:84:2a:06:fe:
b7:b8:93:e8:7a:12:eb:06:cb:26:2d:e6:c2:4c:81:
61:fd:80:46:3d:5b:30:47:89:d6:af:13:b5:57:91:
79:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B1:14:A5:69:58:DC:8F:AC:E5:AE:92:D9:BA:33:5B:F2:5D:0B:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/56bd50a7-fd2c-337b-b17f-e320b3dbc28e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.148.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:8b:c3:af:34:fe:6e:11:38:26:ea:ba:43:1a:a6:75:eb:84:
e3:ee:cc:d5:64:89:fc:b2:72:ef:1b:7e:0a:cd:c4:37:37:c8:
e5:fb:de:61:f8:37:4d:69:88:57:4f:c5:6b:ca:28:f2:8c:52:
60:06:47:e6:b3:3a:bf:74:0c:3f:25:7f:76:17:b2:be:61:bb:
05:95:79:62:86:c3:11:4a:a7:97:d6:8a:5c:2b:a3:22:9b:48:
3b:9c:0c:81:49:58:14:65:cd:17:fe:5a:1d:e5:ee:c8:ce:28:
bc:28:c6:ed:94:04:b0:32:da:43:56:ee:25:e0:f9:e4:b8:2c:
d7:2b:5e:41:a6:63:a9:32:e5:3b:73:6a:55:cf:86:c2:7b:ce:
48:61:4b:33:78:b9:07:cd:6f:9d:56:cd:34:8e:b7:f1:8c:bb:
64:c1:50:a8:08:ca:34:26:e8:25:53:d3:3a:51:0c:64:25:73:
5e:06:a4:82:8e:bf:d0:9c:b2:79:b8:99:1a:f0:c4:b2:ef:47:
50:95:64:a2:9b:46:fe:49:e0:26:37:5c:ae:5b:a9:d6:d0:e5:
25:df:7a:c0:9c:cf:91:02:ea:73:bd:33:b9:32:f9:0f:41:e5:
52:51:11:84:42:e6:11:af:fe:06:f9:35:0e:c6:4f:78:0a:9d:
e2:3a:8c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:25:09 2025 by rpki-client