Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/94db22cd-388d-3bb7-a7c6-a34d3d11551c.roa
File: 94db22cd-388d-3bb7-a7c6-a34d3d11551c.roa (raw, json)
Hash identifier: sLO3I9qI1ha6IGrJlMws7bBGaPdB8KM0YpWbYbFm9JA=
Subject key identifier: 46:B2:D3:10:B8:57:5C:42:5E:72:51:70:2B:C3:57:39:F8:35:92:FB
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0E7E7CBFD29329875FD40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/94db22cd-388d-3bb7-a7c6-a34d3d11551c.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 41264
IP address blocks: 104.133.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:e7:e7:cb:fd:29:32:98:75:fd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=bde80ead-dedd-41c0-ba3c-b967d8806ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d5:1e:66:e0:db:51:8e:3b:76:43:77:94:ec:
7c:1a:88:d5:18:d4:75:1d:66:e6:9b:d1:4e:df:fd:
03:35:9f:f3:13:7a:c6:8a:36:21:14:d8:d8:2e:73:
7b:d8:12:76:52:d3:56:6b:d8:5b:b0:a0:93:02:97:
aa:b8:1d:13:f1:d8:9f:5b:f1:05:43:65:e8:f8:b7:
20:11:a6:34:a4:18:d1:89:1b:d0:84:99:dc:d4:14:
78:c7:44:fa:64:78:d2:74:b4:17:8d:cd:a3:45:97:
9c:ee:79:65:03:dd:b1:30:b7:e7:7e:f8:e8:d5:de:
15:0f:3b:55:94:53:b5:66:db:b5:85:99:f8:a1:48:
2f:4e:71:6a:ab:26:d8:55:55:5f:6e:2b:cc:c3:b8:
53:00:74:c8:79:a8:c7:08:40:a7:08:d2:fd:60:59:
c4:98:26:a6:b5:af:a2:1b:f7:a2:e1:04:d9:98:04:
40:ca:af:2b:41:9b:e1:af:8c:4c:0c:de:c4:7f:fb:
60:ba:d0:58:c2:87:d7:a1:c6:63:d5:51:4d:7f:b5:
28:24:e9:31:68:92:27:fc:4b:35:5e:e2:46:df:99:
9b:33:cb:92:9c:ae:43:8b:31:83:90:8f:24:30:4f:
f1:56:21:62:dc:07:b7:e1:8d:a8:9b:79:60:85:9d:
58:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B2:D3:10:B8:57:5C:42:5E:72:51:70:2B:C3:57:39:F8:35:92:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/94db22cd-388d-3bb7-a7c6-a34d3d11551c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:7b:8f:48:11:00:34:64:91:0e:e8:ee:2b:04:f6:44:a5:ad:
64:56:03:d8:8a:51:eb:ca:01:7f:af:27:7c:ad:39:0b:39:ba:
b0:2c:af:23:a2:05:1e:90:2d:3a:b9:81:da:58:c7:00:c5:ef:
1d:b8:3a:f2:8f:14:2c:d6:31:85:47:b3:6e:f3:12:18:5f:cc:
11:aa:94:a1:9a:8c:1f:4c:7b:34:89:32:35:e3:4a:91:ff:05:
d0:f8:08:57:06:74:1b:44:61:ec:3d:9e:b5:94:fe:f0:51:be:
53:2f:51:05:11:6e:96:d9:39:1e:3d:f5:af:80:ba:15:ea:ac:
aa:2b:ba:e6:d2:53:ff:52:9a:cf:30:1d:69:e1:f7:50:d4:d3:
aa:f6:9a:6a:02:e4:ec:19:3f:b9:c0:7d:f6:37:0d:b1:bd:08:
b3:2f:fd:26:a0:82:a7:b0:ea:61:7e:3b:2f:f7:a9:19:87:c1:
05:09:c4:be:ed:88:04:43:9b:b6:9d:a7:b9:ca:12:50:8e:65:
25:76:b6:65:84:38:a5:d3:8c:01:78:48:a0:04:ac:a6:ec:4e:
e8:47:7f:de:13:90:71:db:c5:18:ce:36:c0:33:7d:5f:33:c8:
37:41:3f:d3:c6:3c:48:a3:d4:b8:8e:c4:22:3a:f2:5d:62:59:
66:ca:92:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wOfny/0pMph1/UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk
YmRlODBlYWQtZGVkZC00MWMwLWJhM2MtYjk2N2Q4ODA2YWQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9UeZuDbUY47dkN3lOx8GojVGNR1HWbmm9FO
3/0DNZ/zE3rGijYhFNjYLnN72BJ2UtNWa9hbsKCTApequB0T8difW/EFQ2Xo+Lcg
EaY0pBjRiRvQhJnc1BR4x0T6ZHjSdLQXjc2jRZec7nllA92xMLfnfvjo1d4VDztV
lFO1Ztu1hZn4oUgvTnFqqybYVVVfbivMw7hTAHTIeajHCECnCNL9YFnEmCamta+i
G/ei4QTZmARAyq8rQZvhr4xMDN7Ef/tgutBYwofXocZj1VFNf7UoJOkxaJIn/Es1
XuJG35mbM8uSnK5DizGDkI8kME/xViFi3Ae34Y2om3lghZ1YzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEay0xC4V1xCXnJRcCvDVzn4NZL7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTRkYjIyY2QtMzg4ZC0z
YmI3LWE3YzYtYTM0ZDNkMTE1NTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIX8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABF7j0gRADRkkQ7o7isE9kSlrWRWA9iKUevKAX+vJ3ytOQs5urAsryOi
BR6QLTq5gdpYxwDF7x24OvKPFCzWMYVHs27zEhhfzBGqlKGajB9MezSJMjXjSpH/
BdD4CFcGdBtEYew9nrWU/vBRvlMvUQURbpbZOR499a+AuhXqrKoruubSU/9Sms8w
HWnh91DU06r2mmoC5OwZP7nAffY3DbG9CLMv/Saggqew6mF+Oy/3qRmHwQUJxL7t
iARDm7adp7nKElCOZSV2tmWEOKXTjAF4SKAErKbsTuhHf94TkHHbxRjONsAzfV8z
yDdBP9PGPEij1LiOxCI68l1iWWbKkpQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:20 2025 by rpki-client