Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/971c0aba-2882-33af-b5c2-5d49fdd45247.roa
File: 971c0aba-2882-33af-b5c2-5d49fdd45247.roa (raw, json)
Hash identifier: lgCs38RhKgtkbXCqlWrzqrBRdIf7O3uwUVWbo22M3kY=
Subject key identifier: E4:1E:F4:CF:30:F1:58:AD:28:30:E7:3A:6E:C1:C3:F0:D3:6D:5C:63
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0E25A7220306A306BA500
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/971c0aba-2882-33af-b5c2-5d49fdd45247.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 41264
IP address blocks: 104.133.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:e2:5a:72:20:30:6a:30:6b:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=29b38b42-20db-4748-9d9b-716b931de024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a9:5a:4f:d1:8b:8e:07:24:16:44:9e:25:5c:
28:55:28:20:09:e7:0d:36:ac:1f:8d:02:be:3a:61:
e5:77:f8:97:16:57:9c:7b:10:12:68:11:59:62:d1:
a2:af:f6:11:3f:83:6e:97:04:6a:87:92:c2:f6:db:
ac:e0:30:04:2c:c3:4d:90:7d:09:2e:b3:c0:3c:34:
13:e7:c8:a4:ac:9d:40:f9:3e:25:8a:c3:0b:15:a9:
77:08:b9:8d:57:5d:da:3f:dc:1f:6a:ed:23:2d:c8:
1a:7b:84:e4:00:13:60:3b:5e:46:b0:16:eb:bf:27:
5a:05:4c:4e:10:bd:e4:e4:e2:04:70:b0:58:bd:e9:
56:0d:42:58:f3:fb:9a:14:29:16:2e:f2:74:57:61:
a6:54:a3:00:a2:45:cb:66:aa:ce:f1:e7:30:b0:1b:
ed:6a:50:df:91:4a:5a:a6:e5:81:bc:76:43:61:a1:
a0:94:9d:2c:49:48:1f:c4:4d:63:d8:58:de:95:fb:
72:16:90:0d:45:f1:30:b5:2e:9a:b0:5c:e0:72:45:
65:23:d2:e1:c5:ef:4a:09:15:0f:70:15:5d:07:09:
6d:4a:68:4a:38:cc:af:be:c0:24:d3:d8:4e:93:33:
b0:87:59:44:e3:16:79:50:80:cd:69:e7:fb:0c:72:
83:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1E:F4:CF:30:F1:58:AD:28:30:E7:3A:6E:C1:C3:F0:D3:6D:5C:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/971c0aba-2882-33af-b5c2-5d49fdd45247.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:69:6c:af:a4:b5:86:40:aa:c4:c2:03:b6:8d:0a:81:8f:c7:
cd:16:cf:f0:6f:44:cd:12:5a:ce:fc:08:9f:66:25:73:0b:f7:
cb:9c:4b:c6:44:84:99:32:ea:50:c1:13:ec:8e:4c:ad:9a:9a:
83:cc:87:21:bd:8a:3e:54:bf:56:a8:0a:b1:d7:98:7c:8f:c4:
a0:7d:8b:a8:a1:26:4c:d1:5f:dd:d1:3d:fa:58:3c:38:6d:e4:
87:f1:0c:6f:1b:ee:df:10:98:64:d1:61:27:15:79:ec:f3:8e:
00:a2:74:b2:d0:72:36:79:0e:7a:4e:48:e9:88:07:ba:b8:42:
9a:2e:91:27:4b:36:df:c7:1c:14:9f:98:bf:08:c6:21:2e:e7:
2c:02:0c:30:0a:6f:35:86:3d:23:e1:10:2e:00:04:fd:f3:82:
3c:fa:25:ef:b7:08:11:e7:fc:89:f6:65:c6:bb:88:5a:8f:68:
4f:da:65:e2:18:ea:d2:c0:0c:9d:21:b3:e5:d6:5a:86:17:0b:
66:a4:4b:ef:ac:9a:60:4e:17:88:d7:6a:d9:f0:54:e5:c5:6d:
ea:eb:24:ae:93:d2:b0:a4:81:e3:09:1e:56:b9:5f:06:45:b5:
f7:41:60:98:f9:47:41:a6:fe:ee:2b:40:32:23:cd:20:32:3c:
3a:98:05:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:54:29 2025 by rpki-client