Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9331c24f-fb06-3c1c-aab8-8836787a7f8e.roa
File: 9331c24f-fb06-3c1c-aab8-8836787a7f8e.roa (raw, json)
Hash identifier: cUcEbxATuAxl/TyweEHyp/qgYMWnDY+3qAVh9Dk7INE=
Subject key identifier: 6A:34:18:72:D1:64:A9:33:EC:03:C0:FF:29:E6:6D:85:30:4A:B3:5D
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848BFEBB5745FC7A61ACEEC0B80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9331c24f-fb06-3c1c-aab8-8836787a7f8e.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 41264
IP address blocks: 104.134.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:b5:74:5f:c7:a6:1a:ce:ec:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=3c7291b8-11e6-4183-b859-a9ed53a9ab3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6a:e4:bb:c6:c2:97:34:3a:ac:b5:77:e4:41:
b3:a6:15:1a:4d:88:75:71:bb:20:f7:6c:f4:4c:b2:
35:84:b3:c4:88:71:9c:d7:7c:f0:b8:da:bb:34:60:
b3:a2:a9:5c:4f:32:52:7f:c7:71:b5:f6:2a:8e:55:
2d:20:6a:0b:ae:bb:1a:82:84:b6:5d:06:ff:60:b0:
11:d1:db:58:ac:69:ff:f9:7e:8b:11:83:f3:0a:c7:
59:47:0d:52:76:44:f7:17:90:6a:e4:e1:d4:52:de:
4c:28:d8:b2:ae:68:53:21:15:90:3a:42:42:df:4c:
f1:34:ef:0e:74:65:fc:1b:47:b8:1f:3c:f2:0a:2b:
a1:85:4e:2f:79:e6:a5:55:3e:5c:79:b8:14:a4:90:
b4:98:dd:73:6c:f3:27:c1:10:3f:16:38:53:ff:36:
ee:75:62:19:d3:35:7a:97:a9:f0:95:a9:70:db:27:
d8:fe:64:82:59:44:c0:c6:5e:bc:f5:10:ab:b0:fe:
b2:50:ed:78:5d:96:18:37:32:14:4e:6e:20:66:57:
49:5c:9a:d9:79:55:86:0a:c3:dd:f2:87:f5:e2:68:
bd:34:e7:ea:f8:8e:8e:d2:c2:99:f5:0a:8d:cd:9f:
9f:7e:3c:d2:03:1c:90:28:e3:10:b6:f1:b1:0d:93:
e1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:34:18:72:D1:64:A9:33:EC:03:C0:FF:29:E6:6D:85:30:4A:B3:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9331c24f-fb06-3c1c-aab8-8836787a7f8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:54:b8:e7:8f:6d:ec:bc:af:2a:86:2a:79:f1:44:44:88:25:
b6:34:0b:10:35:95:0e:ec:f8:14:62:81:2f:a4:26:5b:de:db:
92:26:f5:90:4e:ee:c3:7e:79:1e:15:39:78:c9:b5:35:df:da:
14:e2:cd:48:89:8f:56:e9:29:70:fe:fa:45:60:a3:d2:69:1b:
01:7a:cc:b3:06:e8:bb:4a:cf:72:fb:d1:58:9b:be:0d:99:aa:
ad:1b:1f:70:3e:47:1e:2c:48:90:8c:b0:fb:a3:a6:8a:bf:2f:
76:12:50:7c:fd:a4:dd:9f:a3:11:1f:ba:ca:e5:70:e6:9d:7b:
8c:43:97:79:19:55:00:3f:0c:f5:12:70:36:4e:1a:92:38:95:
a2:7e:f2:8f:a7:d9:fe:ab:8f:c6:ac:79:7d:11:77:c6:54:9b:
21:17:c8:f5:f6:c0:ce:bd:b9:2e:92:90:da:3f:e5:fd:c9:3a:
5f:48:f2:9b:2e:6e:a5:80:6b:1e:23:a3:de:c3:0f:5c:2a:24:
91:31:a7:ef:e5:99:fd:cc:fb:1a:02:b1:01:da:b4:37:cd:ec:
c2:2d:66:6e:82:9e:b6:20:48:96:af:92:ce:cf:e8:ae:09:53:
6f:21:3e:0e:08:4d:72:71:e7:a2:90:88:29:b1:9b:0c:ab:40:
ee:02:b1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:41:36 2025 by rpki-client