Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/835bca5d-f2a6-3f25-b937-96751a3a2d7b.roa
File: 835bca5d-f2a6-3f25-b937-96751a3a2d7b.roa (raw, json)
Hash identifier: 12ydvfHL9voWuMTEDM7OoYf0gWLUgP9JBiiHQ6hUWrc=
Subject key identifier: 20:9C:F0:06:0D:1E:3D:00:4A:C9:18:1D:6A:2D:28:AF:77:CD:48:33
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848BFEBBC51D58BBCF83E24F900
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/835bca5d-f2a6-3f25-b937-96751a3a2d7b.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 36411
IP address blocks: 104.134.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:bc:51:d5:8b:bc:f8:3e:24:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=bedc0a87-684b-48b0-8bb1-8fb97dafed89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7b:fc:22:64:26:0f:55:71:06:e5:91:7c:37:
d9:c5:c6:77:43:44:35:3e:f3:34:db:97:05:7f:bc:
ff:f5:33:7d:07:f8:8a:b6:85:b8:8b:c4:f3:73:bd:
21:12:1f:c5:1d:8a:df:9a:1e:f2:fd:f3:02:23:31:
17:1a:7a:13:8b:b1:96:91:11:82:4c:5c:4d:d5:7c:
d7:fa:6c:ca:a6:20:0a:83:97:a5:47:af:96:fb:35:
3c:5a:0b:b6:93:36:bd:92:d2:4b:a4:11:ee:f0:81:
34:88:44:35:95:b4:f9:51:11:a3:d1:32:fa:cc:21:
35:ba:c5:4f:a2:b9:9e:f2:71:f0:9b:33:38:a6:c1:
3b:1a:ff:56:c1:6c:37:1d:70:b5:a5:e1:17:8f:12:
8d:05:3b:d6:e2:3c:fe:88:53:33:fd:5e:4a:bb:70:
4e:44:d0:c6:8f:07:68:50:48:45:fa:0a:8c:f9:f0:
8a:bd:30:48:0e:ed:8f:a2:fb:bb:06:53:72:20:5c:
8e:6e:b0:f0:e5:8c:a8:c5:6e:39:29:c3:89:0c:df:
6a:66:01:2d:77:46:dc:4b:7e:59:8c:63:d7:73:41:
04:2c:82:ab:71:b3:4e:77:69:76:df:92:20:3d:26:
8a:24:d7:55:65:64:de:f9:ae:de:f9:f0:8e:df:f1:
d0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9C:F0:06:0D:1E:3D:00:4A:C9:18:1D:6A:2D:28:AF:77:CD:48:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/835bca5d-f2a6-3f25-b937-96751a3a2d7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:94:14:4f:7a:fc:44:c8:ea:bb:72:35:4a:9f:46:c6:5c:f7:
cf:ac:ce:a7:7e:c1:22:d1:55:77:0a:a3:f8:71:e3:4a:26:53:
c1:3c:83:1a:66:cb:10:fe:4b:d7:d8:82:c7:c1:fb:45:87:04:
9f:9f:62:97:c2:a1:b6:87:e7:df:f0:23:71:c9:84:ce:77:a1:
24:89:79:32:ad:ed:8d:55:9b:33:92:2d:94:a5:3c:69:fb:48:
aa:2c:6e:e5:6c:50:bf:d3:52:25:c9:05:52:49:40:84:b6:68:
17:63:11:e0:38:c7:ea:e7:34:26:a5:72:26:0d:78:08:0e:6b:
16:b7:02:b6:be:9a:21:bd:e4:7c:ea:e1:18:8d:e4:dd:e9:dc:
b1:37:70:ba:0d:20:da:4b:b1:06:4a:a2:39:d5:d0:0f:8a:b2:
74:2c:d2:17:db:20:5c:9c:83:be:8f:9d:4e:d5:67:7c:67:97:
eb:83:a4:c7:76:7b:6b:d4:d9:b3:49:3a:a0:07:90:88:34:26:
f5:95:5c:75:31:e2:8a:a6:a5:30:6a:f0:51:c1:74:ab:ab:29:
06:60:cb:25:88:83:d7:ea:71:97:b8:90:ae:5e:54:b7:f9:36:
9b:71:cd:42:19:da:d5:f2:08:38:55:d3:dd:7b:60:e0:81:a0:
14:07:0d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:32:09 2025 by rpki-client