Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/83f31cc2-f6ab-368f-8f77-17f96b37e55b.roa
File: 83f31cc2-f6ab-368f-8f77-17f96b37e55b.roa (raw, json)
Hash identifier: lDybWiGW28v2AHwyzxgt7N6X19Rm3BWXkfqqU0LJ4GA=
Subject key identifier: 47:1D:18:D7:1D:74:DB:C6:FE:E2:B1:BA:04:84:2E:38:05:E2:72:D7
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848AF2B9C208255973C0D814F00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/83f31cc2-f6ab-368f-8f77-17f96b37e55b.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 41264
IP address blocks: 104.132.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:9c:20:82:55:97:3c:0d:81:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=9e908fa9-2485-4c92-8b58-39fd2473709c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c8:22:a9:eb:22:b7:09:0b:c1:c3:7e:0f:d1:
11:39:87:b9:ff:da:ad:53:ac:bb:8c:d7:92:74:ba:
0c:83:b8:20:f4:de:4b:58:25:bc:08:fa:2b:0b:96:
a0:4d:81:ec:dd:47:83:f9:ca:24:8b:44:dd:49:fb:
06:c1:0d:4e:dc:58:11:ae:43:0b:a2:e6:f5:4d:3f:
6e:ef:d5:c5:58:2f:f9:ac:0d:60:64:b5:0e:dc:88:
48:26:3a:1f:20:79:42:d4:58:99:30:78:5c:9d:ff:
e8:e9:52:0f:22:aa:a0:cc:2b:24:b7:dc:c1:de:a6:
1b:34:7c:60:36:aa:74:58:47:dd:f5:27:13:ee:73:
4a:0c:c1:74:82:d0:f5:7e:cd:78:18:1b:37:a6:f5:
0d:2e:32:8c:8d:71:3a:68:98:11:f2:0d:e4:c0:d7:
0b:89:60:f3:e2:3b:78:96:e5:2e:cd:86:c2:1a:d2:
29:7d:d9:87:a3:ac:c9:2e:a7:3c:59:a9:5b:02:0e:
b0:b8:07:e5:04:83:99:a2:fb:c2:dc:dd:95:31:6a:
b0:8f:1a:2b:09:fa:9f:6c:82:7a:eb:f2:fc:ad:ee:
78:8c:e3:40:a6:49:ff:e2:10:19:b6:99:27:aa:53:
86:f9:0c:73:bf:d7:66:35:de:8e:2f:e8:08:e5:9e:
50:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1D:18:D7:1D:74:DB:C6:FE:E2:B1:BA:04:84:2E:38:05:E2:72:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/83f31cc2-f6ab-368f-8f77-17f96b37e55b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:ff:f5:e0:c6:85:1b:e3:c7:34:24:c5:ff:d6:fa:aa:28:8c:
b3:95:76:a6:9b:44:23:5b:65:f7:91:c8:7e:fd:c7:3e:0f:97:
06:81:b9:75:4c:c3:6c:b6:bd:38:66:61:5a:fc:2c:d2:36:08:
44:7f:bd:54:9e:50:14:51:a2:e5:34:43:13:e0:f8:f8:4c:bd:
57:de:76:7c:5c:60:a5:e0:b4:72:86:e3:4f:ed:c5:cf:df:7a:
8d:13:d8:ea:cf:56:46:9e:45:f8:8e:20:29:df:48:cd:e0:60:
54:79:39:67:f4:9b:02:70:2b:6c:82:c0:57:f0:89:a6:20:41:
42:63:38:f0:3d:23:75:c1:df:51:ae:16:ff:e4:a1:f6:e4:ac:
29:f1:ec:dc:eb:0b:67:cc:95:be:89:50:14:55:67:d3:a2:bf:
61:67:1d:e0:9c:9c:ba:46:de:2a:a4:e2:a7:a5:ec:38:38:5f:
c6:b4:bc:3b:5d:d7:ea:23:ed:78:dd:0a:57:ad:ba:89:a7:17:
8c:60:3a:b0:ec:6e:4e:b5:ef:d8:02:32:60:ec:ce:c5:c7:d0:
31:ac:71:31:61:ed:31:29:66:6c:4e:3f:33:b9:12:29:af:5a:
05:44:a2:7c:db:8a:b5:98:96:dc:b9:65:f1:52:76:f7:41:b9:
5e:3b:41:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:44 2025 by rpki-client