Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6810cb0c-7131-3cef-8938-f75d3d0e9214.roa
File: 6810cb0c-7131-3cef-8938-f75d3d0e9214.roa (raw, json)
Hash identifier: iWveBnhg5j5JqL3JBJgImvyYvaFpesigG5WBatebiiI=
Subject key identifier: 58:4C:AB:AD:D3:33:87:39:CE:54:EA:F7:83:EA:32:FB:64:F3:10:B2
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0FD94C8359528ADFE7580
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6810cb0c-7131-3cef-8938-f75d3d0e9214.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 41264
IP address blocks: 104.133.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:fd:94:c8:35:95:28:ad:fe:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=752a7ef4-2677-444d-b8fc-d5cde7b9de99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:dc:bb:55:16:f9:2d:09:f2:7e:a2:01:91:c2:
b8:bb:2e:1e:a8:64:04:18:63:a7:27:14:6c:bc:e9:
c6:6a:d1:70:a1:e4:9b:27:6b:06:57:8a:c0:2b:47:
66:af:0a:e5:13:f9:ea:57:ec:e3:c4:16:f5:0a:62:
b4:0b:e2:18:7a:c9:c0:8d:7a:51:ff:72:fd:75:52:
32:bb:8a:09:43:ab:0f:d8:12:44:c5:73:6c:06:1c:
81:f9:bf:e0:06:70:8f:9c:45:82:ab:35:dd:cc:ee:
e2:04:83:95:a7:90:3e:f4:02:e4:80:a8:b8:49:15:
d5:0e:60:47:44:2b:37:30:79:bf:33:01:a6:18:91:
7d:67:d9:32:29:ff:a9:c3:27:ef:a8:8f:00:75:bd:
3a:8b:df:ea:6d:94:c6:54:a7:97:de:47:65:54:74:
63:3c:d6:f1:74:b4:9f:41:d2:b3:d7:11:c6:67:22:
a0:33:ce:7b:d9:4c:ce:51:d8:b0:a0:f3:10:2e:3a:
d5:76:be:f2:b9:10:2f:f3:c2:9c:34:b0:7b:e3:cc:
45:5f:b8:90:05:28:4b:f6:3f:2c:9b:b7:ae:16:89:
3c:c5:90:1b:54:20:e6:43:10:3b:e4:f7:07:e8:c4:
84:4a:06:70:7e:75:85:6a:1f:51:b4:03:51:2c:e4:
55:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4C:AB:AD:D3:33:87:39:CE:54:EA:F7:83:EA:32:FB:64:F3:10:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6810cb0c-7131-3cef-8938-f75d3d0e9214.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:c5:cb:c8:a0:f5:bd:c5:0e:c5:f4:58:f8:2a:8e:c0:c1:92:
05:05:48:f4:16:77:02:d7:63:cb:ac:9c:7b:49:df:f2:75:53:
16:8b:1c:a9:86:09:95:61:cb:f6:0d:ac:51:45:c0:f7:b9:c6:
58:6d:1c:21:06:7c:2c:e5:42:54:47:ed:49:dd:e4:e4:ac:07:
cc:9c:0e:24:6e:7b:18:cd:b9:10:8d:ea:04:f2:6b:6f:45:a5:
ef:3e:28:6a:78:6b:3a:ef:89:82:71:c5:1b:b4:fa:3a:75:7b:
06:9e:58:50:1a:23:96:42:fb:95:97:97:75:ad:aa:dd:35:1d:
44:ee:39:47:ae:ac:c6:99:1a:ca:a0:d9:fc:63:ec:28:b9:06:
87:97:b4:a9:cc:b8:98:e0:9a:6e:b1:1d:61:58:a7:28:ea:2e:
69:44:91:9a:f3:05:67:fd:9b:25:9b:05:93:66:54:6f:d4:12:
61:42:c2:59:74:c5:8e:b9:e2:3d:aa:a1:f3:c4:a5:49:8f:a6:
cb:85:24:b3:3f:a7:2d:ae:33:22:89:25:62:e8:d3:bd:4f:17:
b8:d5:a5:ea:0b:97:02:5e:a5:0f:8c:14:9c:46:4d:81:98:96:
92:a8:95:0e:00:d4:54:a0:0d:ed:4c:67:28:bb:d4:af:80:04:
8c:9b:6f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:36 2025 by rpki-client