Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/72f7ec78-9699-3393-ac5b-e6e0ba7da4a5.roa
File: 72f7ec78-9699-3393-ac5b-e6e0ba7da4a5.roa (raw, json)
Hash identifier: 4YZmii3/R/pl046GLvj3xTHiQmXcQvPzHy5aUNbbIew=
Subject key identifier: EE:5F:BD:15:60:34:CD:F1:92:21:3C:B5:57:BB:D7:EF:8F:96:45:F9
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0EAAA2A4C9A01B9925DC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/72f7ec78-9699-3393-ac5b-e6e0ba7da4a5.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 395973
IP address blocks: 104.134.168.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:ea:aa:2a:4c:9a:01:b9:92:5d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=f697d548-1d99-4b60-b718-7d60eebff8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b6:a4:0b:52:0f:e9:08:49:fb:81:93:ff:d7:
88:26:8f:ab:81:77:dc:f4:2f:cb:f4:3e:9b:f0:be:
41:59:ea:9f:ca:9f:d5:35:55:61:40:23:e6:07:dc:
33:e5:6c:c0:2c:ca:7c:59:2e:37:72:9f:74:9f:20:
dd:06:41:c1:1c:2a:d8:4d:1c:a2:41:53:35:95:53:
6c:70:3a:eb:a1:c6:ad:55:f9:0a:73:53:47:a5:9b:
26:17:bd:98:08:4b:09:9c:5e:06:16:4f:30:07:8c:
78:53:7c:7f:34:0f:9a:fd:dd:f1:25:e4:31:bf:94:
20:62:65:16:b3:66:65:ea:88:6c:d3:a9:14:a2:37:
24:43:6d:7d:13:ad:83:b1:a2:80:fe:2d:58:aa:b4:
51:32:87:46:b3:f3:72:7c:08:3c:af:53:47:31:7e:
9c:fe:03:a4:36:d3:df:fe:35:46:ca:b2:af:0e:1c:
f5:47:12:61:d8:a9:05:61:c0:5e:78:13:0b:3a:b0:
8d:c7:39:25:01:1f:2a:55:e3:c1:87:cd:ab:18:d5:
91:b9:55:38:e9:3d:7d:65:04:68:44:19:3d:3d:29:
14:59:07:41:3d:32:67:1b:63:74:91:21:64:01:7c:
bc:08:84:7a:35:78:17:01:f5:e1:84:ac:ec:9c:21:
66:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5F:BD:15:60:34:CD:F1:92:21:3C:B5:57:BB:D7:EF:8F:96:45:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/72f7ec78-9699-3393-ac5b-e6e0ba7da4a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.168.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:12:0b:4b:4e:b4:3e:65:2d:a0:74:f0:7f:7b:4e:17:1f:4f:
45:38:25:a6:f0:c1:4c:31:08:59:57:ab:9d:2c:75:5a:74:71:
02:dc:47:7c:fb:e8:5a:7d:8c:22:20:a7:e2:29:92:19:6e:08:
0d:07:57:c6:9b:3f:97:4a:11:20:a9:10:53:39:b4:50:73:cb:
54:d6:4a:86:6b:b5:dc:9d:3b:55:36:44:a4:48:a5:38:87:f5:
ed:f6:be:14:61:51:d3:2a:de:e4:29:76:5b:b4:b2:e6:75:da:
34:d1:8a:a5:26:c0:cc:c7:3d:19:2b:77:da:1b:f5:32:3f:74:
b7:88:c6:d6:2d:9f:b6:ba:01:af:b1:cf:43:61:90:99:a6:2a:
f2:19:9d:ab:d4:47:94:e2:22:4a:36:f8:85:83:a4:20:a2:97:
f0:5f:fb:1a:e0:72:7b:7c:41:86:90:de:8d:88:1b:73:6f:2b:
ac:6d:7c:ae:7f:1c:5d:39:77:52:db:61:24:86:f4:13:c8:01:
30:59:74:98:2f:54:fc:bf:4c:1a:1f:ff:d0:51:48:a8:f8:4f:
82:ab:8b:ff:61:cf:7e:a0:34:21:ab:65:1a:32:4e:77:fb:b9:
9e:66:da:a5:5e:fc:7b:74:45:20:23:e8:03:c9:57:21:03:df:
e5:42:c1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:49 2025 by rpki-client