Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/865d1c5b-c929-3798-b082-9af8c561194a.roa
File: 865d1c5b-c929-3798-b082-9af8c561194a.roa (raw, json)
Hash identifier: dZuU9lncyXenVutgBQwktZ1ryl+CIKjrSgcs3EARHlc=
Subject key identifier: BD:2B:F0:8A:A2:9A:D5:07:12:75:AF:57:D4:13:09:BB:E6:98:B1:F9
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B1F64AD6D192AF4AA88C2260
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/865d1c5b-c929-3798-b082-9af8c561194a.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 41264
IP address blocks: 104.133.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:4a:d6:d1:92:af:4a:a8:8c:22:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=6be7a0b7-313f-4a80-8780-659ee15da851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7f:5b:de:40:41:57:f8:63:27:b2:e6:36:ba:
c3:42:22:d5:41:32:bf:27:c6:d4:3e:e9:39:87:a2:
36:9d:f3:50:24:27:3c:b2:9e:11:11:4f:34:ec:04:
0d:f8:af:b2:50:6c:fb:2a:8d:0b:00:6a:04:bb:c4:
34:a1:b2:75:b7:41:c9:5f:08:f3:f5:5e:96:47:c3:
03:97:c2:c6:33:42:bd:90:cc:a4:3d:e8:2f:a5:62:
b2:23:20:b4:f4:b5:92:b7:74:14:d1:6d:81:b2:1a:
0f:3d:7f:cb:20:cc:e6:97:86:c2:d1:98:2f:7e:d6:
c5:f2:8e:45:8a:0e:60:6c:b8:6f:1c:27:af:de:df:
7a:a1:a2:42:9f:6e:54:75:44:8a:27:07:0c:cd:9d:
cb:6f:b1:2b:1c:28:75:c8:1d:9e:6a:b1:e0:30:45:
3a:ab:d2:d6:9d:06:02:f2:12:5c:41:1a:f1:7f:ca:
78:42:03:03:45:0e:b2:6c:66:75:df:b3:a6:65:72:
9b:81:74:e6:db:c9:f1:e9:03:2e:cf:d8:e9:1b:ea:
88:d2:b2:e7:7c:e1:4f:aa:bf:1e:62:51:1d:12:63:
2c:c3:3b:fd:d8:38:4a:98:90:43:36:61:02:b8:26:
25:ee:d7:08:86:fb:1c:be:f7:8e:30:ae:de:5a:cf:
e2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2B:F0:8A:A2:9A:D5:07:12:75:AF:57:D4:13:09:BB:E6:98:B1:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/865d1c5b-c929-3798-b082-9af8c561194a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.113.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:e3:4b:ca:c3:3c:ef:97:41:4c:c7:a7:27:3a:a8:da:a6:95:
cd:31:94:75:a6:2a:2a:ea:6d:45:3a:42:12:0a:2c:7d:a2:66:
e9:50:87:b1:b9:2e:6b:93:22:39:8a:97:48:46:d5:0a:eb:5d:
f9:ac:1d:82:64:aa:85:3d:07:d8:6c:8c:81:db:04:1b:29:d3:
be:51:25:2f:95:f1:9b:1d:3e:59:f7:c7:00:fe:9d:4f:70:22:
f9:32:1b:05:92:bd:b7:d8:bc:18:38:2e:67:ef:8a:2d:10:a7:
4e:54:bc:fb:39:a7:29:ef:ee:9a:d8:f1:01:b9:4f:1c:bb:9a:
54:4a:53:3f:28:8d:b2:9c:95:a7:96:b0:aa:37:d4:78:05:1d:
08:16:9d:0b:c3:14:2f:8d:f9:2e:8d:c0:61:9d:68:36:87:98:
d1:00:8d:aa:d5:f2:1f:99:1d:53:f7:67:44:b6:3b:ca:77:fe:
92:93:92:b3:9d:e4:9d:d6:0a:41:98:c3:cc:ad:d2:0d:dc:07:
a2:92:0d:4e:d3:4f:af:de:af:c7:7e:c8:44:83:cf:f8:c8:9a:
cf:e7:8a:5f:de:7f:27:c6:63:2c:e2:4a:73:52:74:02:00:c5:
2f:f3:cc:90:5a:5d:2d:7b:fa:b3:eb:a0:a3:37:c9:47:ef:08:
c4:e5:47:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:38:47 2025 by rpki-client