Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/96b7a736-94e0-3ece-8b5a-b6268c20fa59.roa
File: 96b7a736-94e0-3ece-8b5a-b6268c20fa59.roa (raw, json)
Hash identifier: Zc+GwMJpgqGzUa2vGrhUB2lyaMtvQgnyku5AI2TtnUU=
Subject key identifier: 87:4C:39:E3:79:59:0C:5B:4D:A9:86:BA:5A:EE:AB:61:69:00:55:AC
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B1F6563C6E37F5C48D437A00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/96b7a736-94e0-3ece-8b5a-b6268c20fa59.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 41264
IP address blocks: 104.133.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:56:3c:6e:37:f5:c4:8d:43:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=5bd4024b-f2d6-4c42-a450-48e7a353d308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b7:15:75:6a:63:81:b3:2e:6d:76:e2:e3:c1:
a0:b7:86:07:c0:c2:9f:6a:e0:b8:0b:cb:e8:82:64:
af:bc:07:7c:6b:a1:b9:ee:e0:3b:37:a4:9d:27:86:
98:bb:37:fa:28:72:82:8a:da:f7:4b:db:cf:37:18:
d6:25:70:0c:f9:d9:2e:a9:a1:93:b9:ab:3c:13:fe:
c5:ad:66:85:bd:f7:67:ea:89:02:b1:de:1d:83:3d:
02:5e:8f:a8:60:bf:df:a2:fd:44:82:98:a0:b7:de:
7d:07:8d:ce:9e:7a:3c:33:8f:89:f8:c8:5d:5e:f4:
88:b8:e0:38:da:3c:43:e3:32:dc:58:6e:81:f5:f7:
00:61:83:86:c5:d0:42:10:61:b5:5c:96:96:cf:b1:
b7:c7:27:4c:68:ad:b2:91:fd:cd:c3:8b:d6:31:29:
fb:13:52:a6:09:c6:87:d8:f4:68:97:bf:0e:43:01:
94:54:d3:08:be:c5:c2:25:2a:e3:fc:1b:da:ae:d2:
12:2a:70:0b:4e:d1:05:03:47:37:4f:57:62:1e:52:
39:22:fd:ac:a7:86:b1:d2:87:90:7b:ee:27:68:79:
da:8c:fd:75:91:7f:07:7d:69:e6:2e:12:51:21:ff:
c3:7b:0b:f8:8f:bd:c5:ee:e8:bf:84:34:74:c8:fa:
b5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4C:39:E3:79:59:0C:5B:4D:A9:86:BA:5A:EE:AB:61:69:00:55:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/96b7a736-94e0-3ece-8b5a-b6268c20fa59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:4e:8d:0c:49:1e:15:b0:7a:2c:b2:35:f9:51:7b:f7:8e:08:
ab:cb:65:70:41:17:03:d1:ed:f1:6a:d7:ac:da:6a:62:59:b7:
c1:64:80:44:14:14:6a:84:a7:26:1c:24:96:ab:ec:0b:e1:75:
1e:ed:53:6f:65:68:58:0f:08:e8:c4:c4:42:86:59:40:99:64:
9b:b0:de:16:7d:0c:12:30:ad:cc:03:92:c9:49:1f:57:41:a4:
ff:ab:db:f7:a2:10:86:4d:93:7f:5d:2a:f5:6d:23:d5:f6:88:
95:cc:e4:cc:3a:b8:d2:9b:d0:32:c6:9b:82:4e:bc:11:b7:22:
ce:9b:e3:26:c7:ad:43:44:44:29:e6:12:78:50:fa:13:ca:03:
7f:57:0b:cd:50:99:b9:81:ac:be:87:bd:c1:c5:ca:ec:a5:55:
c5:e7:89:12:60:38:59:67:95:13:8d:ab:0a:f9:34:7f:97:d9:
6f:60:6d:ba:c0:e8:96:76:6f:37:bd:f8:b0:cd:76:a3:55:94:
6a:19:a2:f9:63:00:9f:37:7b:08:e9:46:1a:81:1b:e5:81:5f:
a9:f4:e6:ed:b3:e6:63:b1:5e:90:a7:0f:61:44:04:b7:12:56:
be:bb:d8:9b:3e:95:34:5e:e9:f6:d5:49:bb:91:25:ba:87:c6:
e3:71:f4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:33 2025 by rpki-client