Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/65e05937-70fc-33a2-8ce4-b6ad7915d95a.roa
File: 65e05937-70fc-33a2-8ce4-b6ad7915d95a.roa (raw, json)
Hash identifier: gBMLeONxpSpOH2q1JblHeX3dLmcL4rvceEqaRL3OBBc=
Subject key identifier: B8:8E:52:B1:5B:8C:5E:3D:60:76:13:A5:5E:79:29:00:11:C1:B6:3F
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0E70C41D0827D96FF1180
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/65e05937-70fc-33a2-8ce4-b6ad7915d95a.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 41264
IP address blocks: 104.133.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:e7:0c:41:d0:82:7d:96:ff:11:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=41a826a3-b83b-48b2-8031-e944523836ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d0:1f:47:fe:e5:da:52:10:ba:9b:15:9c:59:
28:c0:f5:b8:4a:54:83:80:d7:1a:83:a1:5a:4e:f2:
1f:bb:00:df:4e:a3:f5:1e:71:04:96:e8:74:84:68:
de:dd:92:a5:ca:97:7a:f0:ad:ce:e7:d2:16:fc:f5:
9a:44:08:0f:f3:80:11:7e:fa:8d:2b:58:09:d1:67:
90:eb:01:8c:da:bb:8b:c8:ac:33:b8:ea:b4:db:09:
0f:d2:d8:65:a3:04:9f:d5:99:90:cd:b5:b5:2a:80:
bb:c8:c3:0e:dd:89:02:af:df:d8:21:2f:9d:9f:61:
f7:b7:93:79:53:4b:2a:62:df:f1:7b:85:9d:5c:40:
19:22:64:54:66:5d:34:63:ad:df:5f:d0:7a:90:09:
73:e6:88:2e:ee:ca:05:8b:9f:df:a2:a7:a9:c3:bd:
60:fa:f9:87:fb:c5:fc:d2:5e:4a:5f:fc:32:25:fe:
be:64:21:a4:32:e6:7d:bc:99:ec:98:3e:7f:5e:60:
10:f7:af:19:d8:d2:b5:14:4a:cb:a3:15:13:e1:58:
4b:04:55:8c:21:4a:36:39:ee:fe:62:0c:d3:3b:2f:
03:af:dd:e3:09:25:a4:c0:a4:23:e7:2b:9a:0e:6a:
cd:93:4e:a9:5d:42:0d:a9:1f:f1:dd:7f:c2:d9:38:
a5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8E:52:B1:5B:8C:5E:3D:60:76:13:A5:5E:79:29:00:11:C1:B6:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/65e05937-70fc-33a2-8ce4-b6ad7915d95a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.164.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:34:d1:7d:8a:c6:10:ed:86:bd:93:f6:74:b5:b3:52:38:ae:
a9:b7:aa:47:17:0f:96:ec:41:9c:aa:a5:1f:df:aa:7d:07:29:
b7:0f:8f:3f:70:a9:e3:4f:59:d0:70:d3:31:30:0b:f9:39:9f:
e7:7a:54:7c:5e:2e:7c:9c:07:28:15:33:6f:39:80:2b:d5:a1:
19:ea:de:38:4c:8a:88:b9:4f:b3:41:85:8c:42:c6:70:79:d2:
c1:1c:a6:87:46:e6:39:98:13:d3:a1:3e:be:32:c8:9f:ac:ff:
21:e1:b2:c2:cc:82:7e:65:04:d9:3c:e6:d7:e1:d7:2f:da:41:
bc:9d:d3:3b:52:ea:eb:83:16:19:d6:1f:bc:8b:36:81:73:6d:
fe:b7:74:a4:66:aa:91:ee:57:bd:b9:cd:ec:4d:5e:5a:da:b6:
9d:c9:af:09:29:e9:73:2a:91:f5:a2:15:3d:04:a6:ad:ac:5d:
e7:28:6c:21:ac:40:84:91:0d:e8:77:9b:ff:fd:49:c1:6b:fe:
81:d1:ae:e6:41:e8:4b:8a:c7:50:3b:f8:3c:c3:fa:92:5c:bc:
8b:7c:b0:3e:e4:0e:df:9b:2e:64:63:0a:a4:8d:70:41:73:77:
d4:55:ab:95:70:bc:7d:2a:74:c8:59:5a:9c:71:52:b0:87:e2:
d3:94:57:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:40:53 2025 by rpki-client