Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/712ce186-3f65-3b01-bf97-438903031744.roa
File: 712ce186-3f65-3b01-bf97-438903031744.roa (raw, json)
Hash identifier: lWZAhwVcdb6H3HMOKzuv5W2LYeZ6uEkPMHUtWHEED9M=
Subject key identifier: 46:9A:3E:F1:36:D8:79:83:4B:5F:CE:87:F3:6D:9F:48:35:FD:4A:89
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0FB96AAD3BD0BD44C4D80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/712ce186-3f65-3b01-bf97-438903031744.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 41264
IP address blocks: 104.133.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:fb:96:aa:d3:bd:0b:d4:4c:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=289973f4-342d-4974-ba05-f756c1f7f27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:25:22:55:9e:1a:cc:4a:c6:8f:a0:47:ed:c2:
dc:a1:3e:67:d8:ad:ee:16:9a:d5:5f:4d:5a:83:de:
70:3b:55:d7:9e:ca:08:03:69:d0:d8:b4:26:6a:df:
36:fd:1a:fd:06:df:92:4c:bf:0f:86:d7:ae:8a:eb:
a4:30:0e:cc:76:5f:93:d4:4a:2b:98:61:50:52:ac:
6f:1e:9c:83:b4:64:c6:d4:16:34:dd:3b:c8:62:7c:
de:86:99:d0:25:95:ff:93:d6:bb:fc:31:29:13:f4:
39:de:ff:c1:8d:ba:d3:75:e7:5f:dd:ad:f8:d6:10:
e6:f3:2f:15:50:ee:03:20:8e:89:c0:73:de:7b:2a:
82:86:f9:2e:da:92:9f:71:c9:c4:a4:f5:af:85:d2:
ff:c7:4a:5c:5d:cb:fb:eb:34:f4:a1:f4:78:99:de:
2b:45:ce:8d:b4:1b:42:10:93:f9:ea:57:88:76:01:
5d:97:e3:a8:d1:c5:36:eb:5e:80:6c:b0:1d:64:b3:
28:e9:2d:11:81:d0:40:cf:80:63:f1:c8:f5:db:51:
38:fe:64:f5:87:db:5d:96:1d:d3:1c:fd:e6:c6:cd:
e0:ed:60:bf:88:e3:68:a7:7f:b0:14:9b:c8:ab:9d:
ee:c2:8a:e1:aa:4b:e7:b4:f1:67:58:07:c7:fd:64:
31:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:9A:3E:F1:36:D8:79:83:4B:5F:CE:87:F3:6D:9F:48:35:FD:4A:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/712ce186-3f65-3b01-bf97-438903031744.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.65.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:a0:43:90:96:ef:ed:c4:e6:88:93:ec:7a:84:2f:9f:66:ef:
a1:4b:99:90:bf:78:7f:32:63:8a:2a:f9:8d:78:92:4d:b6:f1:
ef:12:38:e4:dc:fa:e6:0d:2d:9a:b4:bc:f7:ab:d0:50:3b:ce:
0c:5a:59:20:8c:e7:ff:de:bf:fd:ec:aa:2b:c6:9c:24:60:59:
0a:ff:fa:4e:e7:ab:0a:1d:06:e4:f4:98:ef:16:b4:4c:37:d4:
0f:cc:f4:97:b7:95:9c:a5:d7:83:9e:ac:c1:ac:1c:51:4d:88:
20:9e:20:72:e7:d2:3e:54:9b:16:46:1b:45:fb:a0:b8:ee:65:
e6:2b:8a:36:9f:38:34:e1:c4:38:0b:db:2a:d6:e3:14:8c:83:
32:89:94:3f:bc:a5:ad:91:5c:22:6b:f5:13:7c:d7:2e:bb:fc:
04:cd:e8:a4:9a:ef:a4:f0:ea:fe:4e:16:18:d6:0c:ae:71:33:
0b:bd:05:46:71:9b:51:1a:5a:35:b5:68:52:a8:0e:5d:2c:4a:
9b:82:a6:97:84:c3:b1:a8:e3:d4:03:1f:e2:30:1f:87:fd:df:
3a:5f:6c:df:b8:20:b5:62:66:5e:ef:ac:17:1d:14:ca:17:5d:
64:fb:08:af:b6:77:3e:b1:de:67:7f:58:62:ee:9a:8b:b5:87:
c1:21:16:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:20:24 2025 by rpki-client