Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9e4e998d-c819-3e6a-9cd8-1f0e52693b6b.roa
File: 9e4e998d-c819-3e6a-9cd8-1f0e52693b6b.roa (raw, json)
Hash identifier: f/efRIbn2pIM3cwCjBqvXvm+JqQb+z9zag5IgEK5BB8=
Subject key identifier: 56:EF:92:44:43:26:4E:73:A7:1B:17:15:7A:2E:6A:68:DE:4B:41:BA
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0DEAF810AB9305CB3FD40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9e4e998d-c819-3e6a-9cd8-1f0e52693b6b.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 41264
IP address blocks: 104.133.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:de:af:81:0a:b9:30:5c:b3:fd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=9b98f571-d508-4573-aa18-0d28d29d6849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:64:ee:93:e4:e9:34:44:30:e1:2f:5d:b8:31:
a5:3d:48:ef:0c:b4:b0:41:20:b6:2f:7f:1c:58:38:
8c:c9:0c:18:78:b0:28:0d:5e:f4:81:18:28:af:1d:
99:83:8a:b9:e7:08:6a:ed:e7:15:42:94:4a:2c:15:
92:fb:dc:81:5e:a6:b1:16:26:31:0a:d2:07:9d:e1:
e7:db:14:b6:03:b6:6d:1d:5b:be:6b:89:a5:87:fa:
10:b3:dc:92:1b:1e:0c:58:54:aa:92:a0:9e:6c:9f:
26:48:2a:9c:68:f7:ed:3c:f9:aa:45:7d:7c:2e:44:
a6:bf:9a:ef:9b:3c:84:33:69:06:e2:bd:84:48:4a:
d1:ce:d2:09:53:50:91:4b:d5:f0:51:94:9e:a0:34:
4c:63:69:4b:4b:9b:09:fa:b3:a8:b7:9c:e2:4f:8b:
4a:85:9b:3f:ea:06:68:0a:63:4d:b4:2e:0f:ce:1b:
54:29:ef:a2:1e:53:31:86:b7:1d:e0:4a:7e:ee:ef:
1d:77:2d:b9:5c:84:7f:d9:70:bf:60:b6:82:f6:b7:
67:19:d4:55:b0:7b:e3:23:e2:fa:06:e5:bc:35:21:
47:bd:1b:f4:ca:82:eb:d5:db:a7:47:6a:5c:21:67:
51:72:e3:e3:b1:bc:4f:c8:a7:3c:f6:c9:4a:ad:17:
af:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EF:92:44:43:26:4E:73:A7:1B:17:15:7A:2E:6A:68:DE:4B:41:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9e4e998d-c819-3e6a-9cd8-1f0e52693b6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:b2:19:9c:23:cb:ce:3c:9f:97:67:f9:eb:4e:86:d0:c9:5e:
2a:3d:22:c8:4a:fc:c8:b4:ff:4b:14:3a:bf:36:c6:b6:10:01:
85:8f:04:e2:79:76:f4:e3:25:a4:ab:c0:a4:2d:ea:e3:50:35:
d0:7d:ac:f3:21:98:7f:3a:ec:f7:14:e4:1a:a6:3f:72:4e:27:
b9:4a:cc:95:5f:32:f3:21:61:26:b3:e3:f7:b1:59:ae:54:43:
39:61:aa:fa:aa:2d:c0:c0:66:5c:17:11:ec:19:71:7e:e2:bd:
30:fa:80:04:58:21:67:7a:94:6e:0a:ca:fb:1d:f3:5b:ed:fc:
67:9d:24:d4:ca:51:27:d3:ee:6e:ca:c8:12:eb:80:6c:75:7a:
4a:cd:7e:fa:51:c5:8e:1d:e7:51:4b:e6:2d:ab:d3:b9:64:c7:
3b:16:5c:45:c1:03:c8:9f:ef:c0:2f:64:ed:06:d2:42:a0:55:
2c:04:3a:15:6f:d6:fd:63:e8:da:0f:69:eb:7c:2a:02:26:f7:
5d:0e:3b:59:ad:2c:99:61:e7:04:64:fc:b5:84:bc:f2:64:63:
dc:7a:27:a1:e5:a1:3b:7d:06:8d:74:68:9f:fc:98:35:b7:a7:
dd:54:6e:f5:ec:17:0b:0a:f5:03:4c:9c:29:21:de:c8:85:23:
72:a6:89:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:47 2025 by rpki-client