Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6191e4a8-833f-3dd7-886b-ff0f2402992a.roa
File: 6191e4a8-833f-3dd7-886b-ff0f2402992a.roa (raw, json)
Hash identifier: VoVmmsJh4cr7llMjQC08Bd89kvMuLhRcdBmUCfB+NPY=
Subject key identifier: 3D:2F:71:AB:9D:E8:00:4E:18:DF:32:C6:33:4F:A8:33:54:FA:96:10
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0F795812D14F82105744C
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6191e4a8-833f-3dd7-886b-ff0f2402992a.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 395973
IP address blocks: 104.134.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:f7:95:81:2d:14:f8:21:05:74:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=525e9f1f-cca2-4cb4-a19f-59957a55cc18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:09:52:88:26:37:b5:18:fc:c3:26:45:86:b4:
d6:4d:25:0e:14:8c:cf:95:25:52:a2:51:a6:54:24:
58:7a:3f:12:ea:9c:cb:78:2a:45:a0:ac:73:61:58:
1a:3f:b4:7a:3f:d7:01:ce:28:85:cb:5f:de:a7:7d:
95:fb:17:a3:23:b4:47:de:86:b9:35:f0:5a:89:30:
e8:dc:41:41:03:ff:93:ab:06:9c:6e:86:f5:3f:cc:
8c:ad:b8:f1:c4:9d:6d:98:3c:58:da:28:12:cd:80:
2b:18:ef:01:59:7b:a4:14:1f:0a:8c:58:78:ef:23:
96:bb:6b:b7:a2:04:b8:35:b9:88:2d:6a:bc:e8:a4:
42:ca:00:2e:f8:e1:de:65:8e:ce:d2:3e:59:d3:a5:
5a:61:58:a5:6d:05:32:6a:54:cf:e1:c5:d5:c3:61:
ba:00:88:df:f9:3f:4d:7e:89:2a:cd:ca:77:ed:f4:
62:d8:f6:29:33:fa:6b:7f:8e:ed:8f:4b:cc:58:33:
a7:c4:eb:b4:b0:1d:3a:aa:fa:ca:1c:29:67:a4:f8:
ad:9e:76:ea:f4:ea:62:1c:87:d7:47:83:1f:1a:01:
d9:5b:e4:e2:ae:49:d4:0c:eb:df:58:ac:a6:50:f6:
13:64:df:d1:04:6d:09:5a:3a:86:3d:52:fb:42:68:
fe:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2F:71:AB:9D:E8:00:4E:18:DF:32:C6:33:4F:A8:33:54:FA:96:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6191e4a8-833f-3dd7-886b-ff0f2402992a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:d6:cb:6c:3f:c7:33:a4:5e:27:a4:c5:b0:b0:70:8c:ec:fd:
5e:36:39:e4:61:f7:b2:92:e3:fe:99:d3:26:f1:5e:9f:10:03:
54:ae:5d:ae:a3:ac:62:89:b3:59:0f:d5:00:5a:45:6c:a9:da:
96:3a:30:3f:82:38:4d:6d:a7:bd:5d:ab:33:51:39:66:ae:6f:
8c:e8:a4:f4:69:e7:6f:48:4f:e8:78:54:3c:48:5e:90:3c:00:
8f:5e:7b:b9:17:2f:2c:3d:6c:a4:e8:bc:d4:33:a7:1b:a5:24:
ed:56:e4:32:0c:7e:b8:a2:46:c4:bd:d8:1d:b6:74:a8:bd:66:
bf:e4:69:3c:3c:1f:ca:34:86:83:61:6e:0b:95:c5:7f:19:42:
2b:5c:a9:bf:d9:1e:0b:5e:ec:55:e6:00:0a:3e:22:42:d1:87:
73:34:34:3b:c9:3f:4e:26:ec:9b:50:0b:3f:9f:17:83:10:ea:
f6:4e:da:41:e5:6c:84:54:48:d4:c6:74:63:5a:3a:4f:3a:da:
be:da:23:fe:a9:0b:ba:26:89:d7:1f:a2:58:a4:11:04:29:60:
0e:83:7b:ee:5d:3c:42:56:66:49:3a:5c:b8:35:11:93:8f:73:
1f:fe:ce:e2:02:ea:36:b0:25:33:fe:09:c3:71:3d:78:c1:1d:
2b:3f:a4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:48 2025 by rpki-client