Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/79fb5224-2185-307a-972f-aefdd9878f1b.roa
File: 79fb5224-2185-307a-972f-aefdd9878f1b.roa (raw, json)
Hash identifier: E4kw6/0bwf7+JNzqAFgz28gKlV9L5Lkqr7rQ3c4ugxA=
Subject key identifier: C4:0C:9C:5F:EE:6C:BF:9B:91:23:C3:B0:FE:8C:EF:B4:7C:59:84:94
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B1F64BC9B7D6D85B0F24BF80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/79fb5224-2185-307a-972f-aefdd9878f1b.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 41264
IP address blocks: 104.133.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:4b:c9:b7:d6:d8:5b:0f:24:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=51389040-b1d7-40ab-b089-4f3261efdaf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c7:6e:a1:d8:5f:a3:e9:5a:bb:74:d8:36:b7:
59:f2:f2:c7:59:c0:76:17:77:01:4b:1c:7d:14:6c:
57:e1:8c:64:f9:c7:08:df:41:1c:d6:94:9f:99:74:
56:e2:62:d4:48:20:65:cf:9d:c9:d7:7f:1c:8b:7e:
9c:33:43:22:f7:e0:a8:db:c8:eb:67:62:4f:d7:d9:
a9:41:99:4e:02:4a:d2:97:25:dd:30:0e:26:ac:36:
a0:93:dd:6d:37:80:15:3c:bf:89:12:d3:05:05:76:
14:6d:eb:cb:e1:ed:bc:f7:b5:34:f1:10:f6:de:2b:
1a:46:68:a8:2e:92:ac:21:b9:8e:02:27:77:05:b0:
6d:d6:8c:45:3c:04:77:f2:aa:06:f5:5f:90:df:f2:
e7:c7:2d:40:b2:56:74:d2:9c:c4:8b:d3:0c:3a:9c:
07:42:50:37:71:7b:e5:0e:de:7c:e9:68:f7:1b:02:
8c:10:83:21:c3:e1:9d:ad:8a:a0:d5:3e:fa:2f:ad:
87:bc:26:35:66:c8:ac:f3:f1:da:8e:06:45:6d:d6:
96:9f:b3:75:da:1c:6a:7b:db:05:8e:ce:61:de:ca:
0e:96:57:ae:2c:85:ad:70:b5:df:ea:34:5d:24:9e:
6a:b4:b1:b3:b8:87:ff:e1:05:ec:cd:67:40:70:d3:
30:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0C:9C:5F:EE:6C:BF:9B:91:23:C3:B0:FE:8C:EF:B4:7C:59:84:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/79fb5224-2185-307a-972f-aefdd9878f1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:1d:63:3d:17:3f:59:98:83:79:18:05:b3:d6:3d:72:39:26:
2e:fc:12:ac:d1:d5:24:5d:d4:5a:b1:e1:a1:ca:76:22:d3:32:
1f:d7:ae:9c:7b:10:b2:b5:63:10:74:60:df:47:8c:12:83:6f:
eb:15:d1:22:30:38:4f:f9:c5:cf:ce:1c:36:25:6d:21:59:bf:
c8:b1:71:fb:7f:07:76:4b:69:51:73:a1:75:02:61:a7:dc:70:
ee:86:02:a4:06:1a:b6:a8:29:be:eb:c7:25:3c:d5:ee:d3:39:
6c:6d:0e:ed:4c:7e:b1:54:ba:b4:a9:bf:ea:23:76:c8:b6:44:
94:c6:13:0e:b2:c8:cd:2e:63:f0:8d:4f:d7:90:44:25:50:43:
c4:38:9a:0e:bc:d5:f8:53:b3:58:aa:4f:47:f0:47:4d:c9:a4:
9f:47:26:6d:b8:f3:dc:b9:d7:b2:81:6d:fb:45:a7:18:b2:14:
eb:7d:dd:4f:02:39:33:4d:32:a3:97:08:6d:73:f0:3b:6d:96:
0c:65:b8:1b:23:7c:8d:53:94:fa:61:da:c6:e5:55:d8:cc:08:
8c:00:54:f3:8c:9a:6d:15:8e:dc:6c:1c:03:51:9e:d8:88:09:
2d:06:a3:41:7b:ca:a6:9d:4b:8d:08:5d:14:fb:51:10:d7:8c:
54:04:ca:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9kvJt9bYWw8kv4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk
NTEzODkwNDAtYjFkNy00MGFiLWIwODktNGYzMjYxZWZkYWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMduodhfo+lau3TYNrdZ8vLHWcB2F3cBSxx9
FGxX4Yxk+ccI30Ec1pSfmXRW4mLUSCBlz53J138ci36cM0Mi9+Co28jrZ2JP19mp
QZlOAkrSlyXdMA4mrDagk91tN4AVPL+JEtMFBXYUbevL4e2897U08RD23isaRmio
LpKsIbmOAid3BbBt1oxFPAR38qoG9V+Q3/Lnxy1AslZ00pzEi9MMOpwHQlA3cXvl
Dt586Wj3GwKMEIMhw+GdrYqg1T76L62HvCY1Zsis8/HajgZFbdaWn7N12hxqe9sF
js5h3soOlleuLIWtcLXf6jRdJJ5qtLGzuIf/4QXszWdAcNMwQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMQMnF/ubL+bkSPDsP6M77R8WYSUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNzlmYjUyMjQtMjE4NS0z
MDdhLTk3MmYtYWVmZGQ5ODc4ZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIV/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIcdYz0XP1mYg3kYBbPWPXI5Ji78EqzR1SRd1Fqx4aHKdiLTMh/Xrpx7
ELK1YxB0YN9HjBKDb+sV0SIwOE/5xc/OHDYlbSFZv8ixcft/B3ZLaVFzoXUCYafc
cO6GAqQGGraoKb7rxyU81e7TOWxtDu1MfrFUurSpv+ojdsi2RJTGEw6yyM0uY/CN
T9eQRCVQQ8Q4mg681fhTs1iqT0fwR03JpJ9HJm2489y517KBbftFpxiyFOt93U8C
OTNNMqOXCG1z8DttlgxluBsjfI1TlPph2sblVdjMCIwAVPOMmm0VjtxsHANRntiI
CS0Go0F7yqadS40IXRT7URDXjFQEyvg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:41:21 2025 by rpki-client