Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8ca73e04-42e8-3c6d-b803-aa58877af6a7.roa
File: 8ca73e04-42e8-3c6d-b803-aa58877af6a7.roa (raw, json)
Hash identifier: T2f3UiWfATtJZX/FIbmTdRR37ArTWPXakj1r6iNb6Mc=
Subject key identifier: F5:B4:0B:79:EF:17:76:96:80:9F:AB:39:1E:A1:09:44:3A:F4:22:17
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B1F65A3938F49D941F844100
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8ca73e04-42e8-3c6d-b803-aa58877af6a7.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 41264
IP address blocks: 104.132.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:5a:39:38:f4:9d:94:1f:84:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=24549ba4-288e-4db9-a98e-eea67e5c9613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:07:e4:fe:c8:6c:64:2b:eb:56:41:1d:79:3c:
09:cf:20:62:01:9e:bb:9c:44:6c:0a:7a:7d:ff:4a:
43:67:c5:ba:ca:05:c5:e8:96:79:e8:df:6b:f9:55:
de:26:6d:52:6b:6d:de:41:be:af:db:24:ac:43:a2:
52:07:52:d1:fa:b9:85:8d:49:85:05:87:cc:e3:c2:
02:24:dd:73:bd:2a:6a:b4:39:5a:51:2b:74:47:cb:
23:29:3c:33:63:88:2b:c9:5f:49:3b:a8:4b:c6:79:
16:a2:6f:d6:e9:23:da:de:c3:15:f9:61:9e:8c:d2:
87:c1:a2:9f:c2:c5:c8:f8:30:67:3a:8c:62:13:2b:
61:85:dc:8d:51:62:2e:79:aa:e6:21:8a:cc:ac:fe:
f4:10:23:e4:47:b2:0b:34:d5:c6:36:d6:5e:6a:6c:
94:65:94:d3:74:30:79:e9:c5:a4:15:97:e1:19:78:
a8:09:bd:b9:5a:5f:66:ec:c8:46:d8:e2:86:2a:63:
3c:2f:e9:01:cc:8a:07:1d:04:2f:70:f2:80:9f:20:
53:cf:3f:3d:96:1f:30:55:31:32:81:79:6e:29:0e:
85:83:9c:3c:3b:d3:df:75:05:2c:b3:1b:3f:e2:6a:
ca:5e:f0:91:f1:4c:93:38:57:a9:98:cb:21:6f:58:
9e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B4:0B:79:EF:17:76:96:80:9F:AB:39:1E:A1:09:44:3A:F4:22:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8ca73e04-42e8-3c6d-b803-aa58877af6a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:81:85:2d:d8:08:4f:97:7b:40:ea:1d:06:7e:0b:1f:cb:be:
64:d3:b4:bf:c0:f8:b6:22:b9:b4:8b:2e:ae:e7:d6:2b:0b:f7:
f8:43:41:ba:4f:21:34:36:ee:be:db:95:d1:03:3e:5d:f8:0b:
ce:2d:5f:b6:8c:c0:e1:62:e2:bc:9f:76:fb:3f:4c:b1:50:48:
8a:7e:09:99:77:f4:69:ff:12:d0:74:d7:4b:8e:a6:c2:c9:f0:
7f:0b:3b:10:dc:2b:40:0c:a3:b6:2c:e9:6f:ee:11:40:7b:e2:
f3:d4:d7:29:2c:1b:7f:5c:e4:ff:b9:c2:a4:42:be:8b:a9:f7:
c0:8f:22:9c:62:5d:1c:5a:6d:00:06:c0:94:c0:84:a3:e4:64:
fb:cd:25:02:1e:19:fa:cc:08:35:1e:e8:c5:ab:c5:1b:fe:92:
c9:e3:c8:b6:79:70:79:5f:df:32:ce:46:a5:30:d4:da:e9:79:
23:5b:63:92:31:89:54:c3:e5:3a:92:11:59:04:55:8c:90:a8:
1b:9d:64:23:4a:e2:6c:f3:db:62:1c:31:e5:6d:8b:84:a6:25:
58:be:04:38:48:08:10:b5:db:34:0b:a9:de:23:80:0a:26:6c:
33:02:fe:11:f6:9d:a1:6e:50:9f:ea:b2:c8:20:13:9c:68:ed:
a9:b7:11:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9lo5OPSdlB+EQQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk
MjQ1NDliYTQtMjg4ZS00ZGI5LWE5OGUtZWVhNjdlNWM5NjEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAfk/shsZCvrVkEdeTwJzyBiAZ67nERsCnp9
/0pDZ8W6ygXF6JZ56N9r+VXeJm1Sa23eQb6v2ySsQ6JSB1LR+rmFjUmFBYfM48IC
JN1zvSpqtDlaUSt0R8sjKTwzY4gryV9JO6hLxnkWom/W6SPa3sMV+WGejNKHwaKf
wsXI+DBnOoxiEythhdyNUWIuearmIYrMrP70ECPkR7ILNNXGNtZeamyUZZTTdDB5
6cWkFZfhGXioCb25Wl9m7MhG2OKGKmM8L+kBzIoHHQQvcPKAnyBTzz89lh8wVTEy
gXluKQ6Fg5w8O9PfdQUssxs/4mrKXvCR8UyTOFepmMshb1ietwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPW0C3nvF3aWgJ+rOR6hCUQ69CIXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOGNhNzNlMDQtNDJlOC0z
YzZkLWI4MDMtYWE1ODg3N2FmNmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJOBhS3YCE+Xe0DqHQZ+Cx/LvmTTtL/A+LYiubSLLq7n1isL9/hDQbpP
ITQ27r7bldEDPl34C84tX7aMwOFi4ryfdvs/TLFQSIp+CZl39Gn/EtB010uOpsLJ
8H8LOxDcK0AMo7Ys6W/uEUB74vPU1yksG39c5P+5wqRCvoup98CPIpxiXRxabQAG
wJTAhKPkZPvNJQIeGfrMCDUe6MWrxRv+ksnjyLZ5cHlf3zLORqUw1NrpeSNbY5Ix
iVTD5TqSEVkEVYyQqBudZCNK4mzz22IcMeVti4SmJVi+BDhICBC12zQLqd4jgAom
bDMC/hH2naFuUJ/qssggE5xo7am3EQQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:03 2025 by rpki-client