Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9e68af77-07fc-3196-a424-0e5192a94064.roa
File: 9e68af77-07fc-3196-a424-0e5192a94064.roa (raw, json)
Hash identifier: J398hnF4YJy1P7cFqeoHq3Y/l0hlKGPKJ3dTC9cVvIk=
Subject key identifier: 05:52:96:D7:EA:0B:87:92:CF:92:62:BC:72:4B:58:77:EA:C2:EC:D3
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B1F658126970F02A8F7EC500
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9e68af77-07fc-3196-a424-0e5192a94064.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 41264
IP address blocks: 104.133.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:58:12:69:70:f0:2a:8f:7e:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=7edbf6f8-2277-4886-8694-45eeda2f55b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c2:87:22:cc:61:38:d8:c0:1f:be:ed:f4:9a:
73:e3:6b:c8:14:10:d8:11:19:13:08:bd:b6:68:60:
6b:93:76:80:e3:2f:9f:a0:b1:fc:c5:24:3b:41:c6:
a6:d0:90:c2:86:93:3e:05:8e:9a:4f:59:15:ae:65:
f5:12:ac:a7:b6:c2:d1:7d:02:5e:ca:9e:27:47:32:
23:36:11:48:a1:0f:35:1b:bd:fa:de:b4:0a:15:52:
17:98:0d:03:fa:ef:9d:4a:59:2c:44:ed:e4:90:d2:
71:61:3d:4f:2b:97:42:26:5c:43:80:3d:15:db:16:
5d:e8:e5:7f:e8:9a:1a:00:58:30:ea:a7:fa:17:38:
b8:17:3b:a4:6a:b6:a9:fe:d8:f9:2a:c6:3a:7d:21:
4c:53:23:ce:5b:f9:6b:ad:d9:04:5f:a6:40:54:0d:
f8:b5:96:df:1b:73:bf:31:77:3b:d6:69:fa:73:53:
ca:5f:d4:a0:65:91:06:54:e3:ee:22:37:04:62:63:
e4:83:ca:d7:f3:3c:bf:46:35:9f:40:f9:01:cd:44:
ae:24:0a:84:a1:cb:e3:f4:1b:b1:a1:d1:d7:c0:f3:
e9:c8:5b:1b:5f:d1:7f:0c:07:80:18:2b:9e:d6:73:
fb:93:bd:8d:9c:09:3e:34:f6:60:d1:52:e6:5b:ec:
41:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:52:96:D7:EA:0B:87:92:CF:92:62:BC:72:4B:58:77:EA:C2:EC:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9e68af77-07fc-3196-a424-0e5192a94064.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:23:46:f3:5b:37:5c:ea:d0:0d:22:c8:6a:06:a1:fa:f5:36:
bf:d1:96:a6:8e:a7:42:75:98:1e:da:3c:ea:16:c6:0a:74:e9:
2a:18:82:b9:1b:f3:4e:a8:cd:ba:60:fa:b8:1e:5e:f7:fc:ce:
14:9d:ca:84:67:e2:d3:dd:71:29:08:89:20:5f:38:8b:bd:24:
ba:b2:c8:ce:a4:5c:d5:b8:aa:ee:57:97:9d:c9:c9:12:ec:b4:
4d:88:49:1c:dc:69:5d:81:26:d0:c2:72:f2:f7:eb:a9:60:c9:
99:69:bd:42:46:c1:e6:45:1e:59:32:b4:d5:13:d8:ea:13:de:
ac:36:ea:f2:ee:24:be:75:dd:6a:49:b6:95:df:78:f9:3b:e1:
05:92:04:0c:8a:fd:4f:7e:e5:0a:62:87:bb:79:af:ee:84:67:
2b:d9:92:e1:e9:a6:b7:80:08:5e:d8:5c:cf:87:4c:9c:4a:0a:
74:65:db:01:e3:79:2e:e1:7a:0a:00:9f:6b:d2:1b:94:09:2f:
ed:92:8a:b6:b5:fe:5a:28:ef:07:59:81:20:f9:fd:65:78:73:
ef:9c:bc:f2:74:64:f6:5b:65:88:cb:31:d8:3d:46:12:8b:ce:
0d:d6:3b:11:0d:97:ca:ab:8f:f9:0d:91:6d:4e:9d:0b:51:93:
5e:d7:8d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:45 2025 by rpki-client