Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5e2c2e6e-6764-3a3a-ad7d-e654e20646c8.roa
File: 5e2c2e6e-6764-3a3a-ad7d-e654e20646c8.roa (raw, json)
Hash identifier: KX67RofmiFjFb79GTbZZ35CFDtkASC/Gcvf9bGW9ZAw=
Subject key identifier: 95:C1:91:5A:1E:1B:A7:60:F6:DD:CB:BC:1B:1B:2A:B3:29:8B:FC:C5
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848BFEBCF0A947C56E48DC9AB80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5e2c2e6e-6764-3a3a-ad7d-e654e20646c8.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 15169
IP address blocks: 104.134.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:cf:0a:94:7c:56:e4:8d:c9:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=445487d5-ac66-4eb5-98d4-d5fe7e34fb40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d5:ff:7e:34:e8:66:45:b6:91:3e:c0:61:5f:
5b:a5:c3:dc:8e:a4:75:e3:ae:c1:41:cb:e3:46:29:
51:5d:02:f7:aa:d5:0a:54:45:0e:83:fb:60:3b:b4:
13:e2:cc:dd:d7:a6:05:2d:7c:6a:83:f7:62:d2:0b:
26:92:1c:dc:94:52:25:cd:b0:75:39:43:02:b3:d8:
20:3d:06:2e:1c:01:7a:7e:46:5a:87:37:a7:0b:c0:
ac:7a:5e:18:a3:ad:b8:68:90:2c:8d:69:4b:48:b2:
54:4c:ca:75:bb:66:88:70:5e:60:2e:14:48:c9:2d:
fc:a2:9e:e7:95:25:49:e6:8f:0a:68:59:c7:bf:f1:
d0:c2:5f:38:fa:a0:b2:b7:e6:43:b9:7c:fd:78:ac:
42:4c:53:83:8e:62:32:2d:50:c3:f2:bc:b5:38:64:
3a:a5:b0:95:fe:62:88:91:f1:42:a9:57:39:74:7f:
ba:ab:c5:b4:c0:9c:0d:8f:9a:d5:29:34:4f:eb:63:
2b:39:a5:8a:3f:d7:ff:38:35:d6:0e:70:e3:e0:3f:
4a:2e:41:a9:b4:ea:96:21:ab:55:e7:1f:e3:2e:72:
25:32:36:7a:93:f0:89:df:29:d6:9e:64:00:61:f4:
49:2b:ac:e5:f6:55:fa:47:46:e4:ac:d7:58:ac:47:
f4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C1:91:5A:1E:1B:A7:60:F6:DD:CB:BC:1B:1B:2A:B3:29:8B:FC:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5e2c2e6e-6764-3a3a-ad7d-e654e20646c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.229.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:ee:80:98:8a:62:a6:ed:d7:76:53:6c:e6:ba:6f:98:a0:49:
b2:79:f3:3c:4f:27:19:ce:ac:ed:fe:2d:07:d0:9d:a5:9d:17:
7a:0c:4a:db:50:c5:0a:90:13:fa:6e:2f:87:47:37:04:e1:b9:
18:b0:8b:f1:0e:63:9d:4e:63:70:ec:2d:93:9d:06:4e:73:dd:
17:f1:1b:74:28:a7:e4:8c:25:f6:c7:d7:1a:2d:d5:51:bc:9b:
0e:a9:cb:91:99:00:0c:1b:35:46:4c:52:91:e7:04:39:bf:eb:
7a:04:0a:0f:db:35:b8:a4:b3:9d:f8:4e:ab:eb:13:da:31:a2:
27:6e:89:30:c7:12:4b:0f:e2:0d:0e:d3:47:59:55:ac:38:9d:
99:f0:40:89:ce:14:b7:2c:46:cd:91:f8:ee:14:11:aa:fa:1e:
aa:7c:a2:f5:bf:8e:90:31:3c:34:6b:4b:6a:bb:f8:2e:a8:e8:
9c:85:bb:d8:40:25:bd:73:ab:1a:18:f6:3b:9c:5e:bf:d7:3c:
2a:48:c7:2e:10:d4:1e:d7:20:b0:32:4a:93:90:2e:1a:4b:6d:
cd:5e:3e:51:67:0c:fa:fd:97:ce:f4:52:ed:81:90:6e:a9:fd:
96:f5:b0:3f:cf:a9:d9:a4:8a:af:05:5b:a3:7c:9a:f6:d9:15:
44:66:78:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:48:33 2025 by rpki-client