Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8a866931-42d4-3e24-b1d4-8fe4bbfacad7.roa
File: 8a866931-42d4-3e24-b1d4-8fe4bbfacad7.roa (raw, json)
Hash identifier: /Y+NK9cMBVHBDGuAsSCZ0WRWQNVSTtvInpMMtCEimtE=
Subject key identifier: 1F:CC:70:BC:6F:DB:33:7B:6E:88:40:48:D8:5D:14:B0:49:CD:36:82
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0F776A5349B8DF4DC4880
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8a866931-42d4-3e24-b1d4-8fe4bbfacad7.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 395973
IP address blocks: 104.134.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:f7:76:a5:34:9b:8d:f4:dc:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=6ad11c29-afb3-4ebd-916f-a5715c51c3e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a9:3e:ea:24:1e:e4:52:1a:ee:0b:28:fd:e8:
f7:7e:b6:18:df:44:8c:18:a6:b1:e5:86:92:a1:e3:
66:ca:62:7c:c4:4b:de:c3:1f:18:f8:6a:46:10:28:
c0:67:77:77:b4:8e:98:27:42:d0:1a:c0:e4:f3:45:
bb:08:56:44:3c:2a:16:9f:e6:de:e2:cc:aa:7e:56:
1b:f4:68:7e:e8:e8:60:b9:a6:4b:1b:44:de:9e:f4:
b3:43:03:2a:03:d5:88:b7:42:05:db:2c:c9:4b:e7:
64:6a:f8:b5:b2:1c:df:2f:4e:3b:14:6d:46:bc:2a:
a7:e2:a6:de:60:8a:44:ec:4d:e2:fd:93:1b:90:dd:
de:47:47:43:a4:fe:09:fe:2c:a1:03:13:12:bd:93:
6a:52:f8:ac:2f:08:53:3b:e7:6d:29:c7:6d:95:1f:
31:bf:b0:fa:08:07:9a:15:79:f9:c3:57:20:de:6f:
34:93:c7:71:b6:14:cc:24:96:61:aa:27:67:11:63:
17:ce:98:f1:f1:b5:49:a7:5d:3a:16:b3:e3:49:b9:
99:29:5a:07:5e:b0:33:17:ac:61:81:2b:4d:be:cb:
bf:39:70:96:6a:a8:ac:d4:52:d9:16:d0:86:d4:ae:
82:f5:15:45:8c:00:31:fe:cb:8e:31:4d:5c:c9:60:
7a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CC:70:BC:6F:DB:33:7B:6E:88:40:48:D8:5D:14:B0:49:CD:36:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8a866931-42d4-3e24-b1d4-8fe4bbfacad7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.167.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:08:d9:50:36:48:31:d2:54:2e:81:fb:57:ef:c7:e3:02:2c:
c1:b3:a9:3e:cb:a0:62:b1:88:d7:6c:38:78:a9:e6:99:dc:1d:
f4:7c:1b:4c:7b:b5:e3:d3:33:ec:c9:a3:40:77:b6:78:25:89:
5f:83:50:c6:ba:fc:af:ae:be:e4:58:43:47:9e:b5:27:08:90:
cc:c9:cc:a1:fc:85:f7:bf:8b:d7:23:8c:09:67:18:c9:ba:cc:
02:e0:c7:00:61:f4:fc:1b:53:05:4a:6e:ca:8d:39:2d:5e:43:
c6:40:fc:3b:0d:e8:dd:b2:3f:3d:8f:99:1a:1d:24:6d:a5:45:
22:57:a7:e8:ef:8e:42:1c:0a:17:3e:81:e3:f5:b6:93:d6:c4:
9e:a1:a3:b3:3d:7b:6b:0d:f1:e5:58:43:77:5f:79:4f:87:a8:
bf:4b:1a:d1:18:f3:3b:83:be:08:21:4b:f5:c5:25:45:1a:cd:
8f:11:72:75:81:9e:b9:e1:9e:72:21:3c:74:4c:ad:76:8a:25:
13:d9:05:d4:a4:ca:88:10:b6:29:90:ad:3f:4d:89:dc:7c:4b:
f3:ac:d4:ec:c4:26:f5:e9:25:c0:27:4f:a1:ea:ed:dc:0b:6d:
87:cf:e3:14:73:2e:fc:9d:4c:d7:6e:7f:82:33:77:1b:b6:5d:
fc:f2:73:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wPd2pTSbjfTcSIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk
NmFkMTFjMjktYWZiMy00ZWJkLTkxNmYtYTU3MTVjNTFjM2U1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqk+6iQe5FIa7gso/ej3frYY30SMGKax5YaS
oeNmymJ8xEvewx8Y+GpGECjAZ3d3tI6YJ0LQGsDk80W7CFZEPCoWn+be4syqflYb
9Gh+6OhguaZLG0TenvSzQwMqA9WIt0IF2yzJS+dkavi1shzfL047FG1GvCqn4qbe
YIpE7E3i/ZMbkN3eR0dDpP4J/iyhAxMSvZNqUvisLwhTO+dtKcdtlR8xv7D6CAea
FXn5w1cg3m80k8dxthTMJJZhqidnEWMXzpjx8bVJp106FrPjSbmZKVoHXrAzF6xh
gStNvsu/OXCWaqis1FLZFtCG1K6C9RVFjAAx/suOMU1cyWB6lQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB/McLxv2zN7bohASNhdFLBJzTaCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOGE4NjY5MzEtNDJkNC0z
ZTI0LWIxZDQtOGZlNGJiZmFjYWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIanMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHkI2VA2SDHSVC6B+1fvx+MCLMGzqT7LoGKxiNdsOHip5pncHfR8G0x7
tePTM+zJo0B3tngliV+DUMa6/K+uvuRYQ0eetScIkMzJzKH8hfe/i9cjjAlnGMm6
zALgxwBh9PwbUwVKbsqNOS1eQ8ZA/DsN6N2yPz2PmRodJG2lRSJXp+jvjkIcChc+
geP1tpPWxJ6ho7M9e2sN8eVYQ3dfeU+HqL9LGtEY8zuDvgghS/XFJUUazY8RcnWB
nrnhnnIhPHRMrXaKJRPZBdSkyogQtimQrT9Nidx8S/Os1OzEJvXpJcAnT6Hq7dwL
bYfP4xRzLvydTNduf4Izdxu2Xfzycz4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:41:24 2025 by rpki-client