Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/920302e4-d68a-3cf8-adc0-7f78b56c6836.roa
File: 920302e4-d68a-3cf8-adc0-7f78b56c6836.roa (raw, json)
Hash identifier: f2+9R2dMaCB0JNxUlmTtdWZY8HWqjYkjODVpZlBvIhk=
Subject key identifier: 31:6A:7D:51:10:31:FA:DE:15:FC:68:B5:51:2A:93:F1:39:4C:5A:4B
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848BFEBC9B8D33801A529BB4980
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/920302e4-d68a-3cf8-adc0-7f78b56c6836.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 15169
IP address blocks: 104.134.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:c9:b8:d3:38:01:a5:29:bb:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=5f1d46a8-d05b-4348-851c-0c93454968e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ef:7c:34:4e:e1:21:fb:51:10:83:2d:07:46:
98:ba:13:ee:96:4b:cb:94:9d:ee:f4:4a:d4:ba:5f:
95:b7:59:b7:75:09:4b:97:da:f5:1e:80:96:08:cc:
56:bd:5b:8a:cf:6e:2f:3d:5e:03:a0:f7:fc:14:b0:
85:db:20:84:ba:c5:79:c1:65:59:5d:c6:a4:0d:e0:
de:2a:14:68:6b:ad:8a:c2:95:02:8e:6d:e6:66:bd:
e9:d3:03:fb:6d:9e:43:8f:d1:2f:06:b9:2e:c3:9f:
0d:95:6b:fb:7f:93:2e:24:16:ed:06:e3:47:cd:71:
cc:52:42:4f:da:12:f1:b3:d8:6c:64:b7:81:a4:f0:
5d:0f:93:d3:75:60:b5:da:46:40:0c:57:62:76:c4:
8f:c0:2a:04:41:23:a0:6a:f7:88:a5:06:13:8b:5f:
df:d2:7d:87:01:95:7d:14:9e:35:95:b8:8b:aa:e5:
c3:01:2a:2d:da:34:bb:04:5c:b9:00:73:92:7d:b5:
29:3b:30:1f:e9:6b:28:14:ea:06:bb:6d:5e:15:ea:
1b:9d:a4:4c:e8:82:4b:8e:68:8c:cb:b6:bb:2f:36:
b1:d0:8a:bb:10:2d:50:ad:fa:44:3a:00:2a:14:f5:
87:6f:b3:89:69:07:b5:6f:15:3b:86:42:ad:1d:56:
b2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6A:7D:51:10:31:FA:DE:15:FC:68:B5:51:2A:93:F1:39:4C:5A:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/920302e4-d68a-3cf8-adc0-7f78b56c6836.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:a4:31:4e:f6:41:0a:fc:fd:ac:4d:26:a9:a5:b7:62:95:b3:
22:71:7b:dc:e9:cf:d0:4f:f0:dd:08:3c:c1:ba:6c:01:cb:16:
b2:8e:ad:6c:62:df:e0:e0:b2:c5:d5:cc:5e:25:b1:ee:89:df:
f4:dd:af:25:05:c4:e5:e2:e8:d7:48:a2:04:42:99:32:f6:aa:
67:15:1a:7c:b9:58:b8:6a:13:cc:4c:68:dd:51:91:2a:01:76:
c5:87:e0:ee:ee:44:59:5a:8e:b9:e7:fc:a4:f4:8f:c9:1b:c5:
5d:84:6e:01:a6:14:ff:0d:5c:da:28:d1:00:94:ed:22:46:7a:
c7:d7:8a:3f:9f:8d:c9:4e:d3:cf:06:c8:78:b3:8a:c4:ac:77:
a4:f8:b0:18:f2:ca:95:5d:5d:03:66:dd:81:63:6e:06:4e:4b:
64:bf:ad:b4:3e:32:96:a1:6e:0c:71:87:86:07:46:c2:32:12:
cf:f9:09:f5:0c:b4:32:b5:70:db:3f:12:25:ab:63:5b:97:dc:
d9:3b:d2:f8:ca:e8:61:b8:e4:db:49:79:94:7f:ac:f0:6d:2a:
1d:ef:e1:ec:e2:bd:03:60:14:00:96:88:14:db:d1:c0:24:1c:
1f:8b:a1:28:46:14:12:0a:59:da:ba:64:37:51:c0:86:b4:19:
a2:8b:9e:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/68m40zgBpSm7SYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
NWYxZDQ2YTgtZDA1Yi00MzQ4LTg1MWMtMGM5MzQ1NDk2OGU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+98NE7hIftREIMtB0aYuhPulkvLlJ3u9ErU
ul+Vt1m3dQlLl9r1HoCWCMxWvVuKz24vPV4DoPf8FLCF2yCEusV5wWVZXcakDeDe
KhRoa62KwpUCjm3mZr3p0wP7bZ5Dj9EvBrkuw58NlWv7f5MuJBbtBuNHzXHMUkJP
2hLxs9hsZLeBpPBdD5PTdWC12kZADFdidsSPwCoEQSOgaveIpQYTi1/f0n2HAZV9
FJ41lbiLquXDASot2jS7BFy5AHOSfbUpOzAf6WsoFOoGu21eFeobnaRM6IJLjmiM
y7a7Lzax0Iq7EC1QrfpEOgAqFPWHb7OJaQe1bxU7hkKtHVaygQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDFqfVEQMfreFfxotVEqk/E5TFpLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTIwMzAyZTQtZDY4YS0z
Y2Y4LWFkYzAtN2Y3OGI1NmM2ODM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABmkMU72QQr8/axNJqmlt2KVsyJxe9zpz9BP8N0IPMG6bAHLFrKOrWxi
3+DgssXVzF4lse6J3/TdryUFxOXi6NdIogRCmTL2qmcVGny5WLhqE8xMaN1RkSoB
dsWH4O7uRFlajrnn/KT0j8kbxV2EbgGmFP8NXNoo0QCU7SJGesfXij+fjclO088G
yHizisSsd6T4sBjyypVdXQNm3YFjbgZOS2S/rbQ+Mpahbgxxh4YHRsIyEs/5CfUM
tDK1cNs/EiWrY1uX3Nk70vjK6GG45NtJeZR/rPBtKh3v4ezivQNgFACWiBTb0cAk
HB+LoShGFBIKWdq6ZDdRwIa0GaKLnlg=
-----END CERTIFICATE-----
Generated at Fri Apr 4 08:34:30 2025 by rpki-client