
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9ebf3b5c-d8f4-3fae-96d9-b020ba0ad9c2.roa
File: 9ebf3b5c-d8f4-3fae-96d9-b020ba0ad9c2.roa (raw, json)
Hash identifier: rXreaqXEhQwgKcFUjz7TDhCtbmVCl2CUp14ogCSbXOA=
Subject key identifier: C0:DD:B2:FE:0E:BB:C4:0B:1D:25:05:F8:D0:A8:48:0B:E6:45:4D:15
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848AC60DB04701F6B499FA35A00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9ebf3b5c-d8f4-3fae-96d9-b020ba0ad9c2.roa
Signing time: Sun 26 Jan 2025 14:00:52 +0000
ROA not before: Sun 26 Jan 2025 14:00:52 +0000
ROA not after: Sat 26 Apr 2025 13:00:52 +0000
asID: 36411
IP address blocks: 104.133.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ac:60:db:04:70:1f:6b:49:9f:a3:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 26 14:00:52 2025 GMT
Not After : Apr 26 13:00:52 2025 GMT
Subject: CN=24bc85eb-5aac-45e7-880d-5aa990e08cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ae:14:6a:9b:6a:2d:0f:1b:aa:65:22:18:a9:
c4:39:4f:0e:13:6a:49:45:bf:bb:aa:a4:57:db:72:
1a:36:19:ac:15:d2:ab:02:98:83:7d:d2:8e:2c:6d:
36:dc:ff:57:ca:89:04:c3:ee:6e:30:2a:32:35:4d:
14:ec:2f:83:c5:d3:a9:20:78:1c:11:ab:eb:ca:fd:
ba:d3:46:26:de:99:f1:ea:92:25:cd:79:96:af:0f:
be:83:97:7d:0a:ef:af:67:48:0f:4b:79:ed:54:98:
50:16:6d:4e:f6:20:2c:a5:f9:35:d6:f1:24:73:d1:
ce:0d:6e:86:e7:a1:d7:be:b2:ce:7b:d9:b4:9d:1b:
15:94:fe:bb:35:e1:3a:bf:b2:b8:aa:00:0b:fb:99:
06:dc:fd:9a:6e:fb:c7:2a:f5:62:9b:36:4e:e9:e0:
3d:4d:89:d7:c4:bd:e6:93:76:c4:d0:b9:d3:6e:a2:
66:1c:9b:f3:15:99:62:bc:9a:4b:1f:71:7f:bb:da:
c6:6d:aa:f1:63:67:64:8e:d0:69:b5:ba:b0:1e:a1:
7d:aa:c3:94:80:c0:40:f0:73:ec:82:1a:10:eb:0e:
7f:01:2d:4c:25:f9:4c:e8:ce:85:c7:76:00:cc:a8:
6a:a9:02:ca:12:16:a1:44:21:ef:f0:ab:6c:2c:08:
9a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DD:B2:FE:0E:BB:C4:0B:1D:25:05:F8:D0:A8:48:0B:E6:45:4D:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9ebf3b5c-d8f4-3fae-96d9-b020ba0ad9c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:6d:8d:1f:d3:6d:f1:ee:2d:ce:7b:3f:b8:82:81:03:ae:18:
74:ae:32:8d:86:0b:c2:84:d7:48:a4:03:b3:8a:64:60:ba:08:
57:0b:27:a2:e6:08:ce:7c:26:71:73:4d:73:ac:92:86:2f:b2:
77:19:2b:b8:13:f9:81:11:28:38:5a:a8:f6:b1:af:3f:5b:b8:
03:b1:64:39:04:de:c6:8c:61:b9:ca:e3:5b:6f:fc:b0:be:f6:
0b:a1:d7:40:fb:83:a4:84:10:68:58:78:56:74:e8:5f:16:53:
f4:c0:3f:01:e8:78:77:78:02:c3:d4:38:c6:61:06:b7:25:6b:
81:ec:ed:cc:df:70:08:e3:53:af:62:02:bf:e6:78:0a:38:8c:
09:3d:dc:66:2b:f9:47:3a:7b:44:a9:a1:cd:8c:5b:f3:40:3e:
5f:cf:71:d6:c3:25:f3:d1:77:ac:44:90:8c:21:f7:64:85:7c:
3e:15:74:4f:92:90:a7:a2:30:32:ec:b1:65:ed:45:d0:c6:14:
f0:30:da:cf:a3:79:c1:8e:7c:a1:91:fb:03:63:89:44:d1:7e:
6b:43:ab:77:20:93:b0:ba:db:33:aa:b9:93:b3:09:d8:39:7f:
13:66:9f:8c:34:41:8f:e1:64:73:85:8c:d8:f2:03:18:c2:09:
4c:d6:9e:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEisYNsEcB9rSZ+jWgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDEyNjE0MDA1MloXDTI1MDQyNjEzMDA1MlowLzEtMCsGA1UEAxMk
MjRiYzg1ZWItNWFhYy00NWU3LTg4MGQtNWFhOTkwZTA4Y2QxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmK4UaptqLQ8bqmUiGKnEOU8OE2pJRb+7qqRX
23IaNhmsFdKrApiDfdKOLG023P9XyokEw+5uMCoyNU0U7C+DxdOpIHgcEavryv26
00Ym3pnx6pIlzXmWrw++g5d9Cu+vZ0gPS3ntVJhQFm1O9iAspfk11vEkc9HODW6G
56HXvrLOe9m0nRsVlP67NeE6v7K4qgAL+5kG3P2abvvHKvVimzZO6eA9TYnXxL3m
k3bE0LnTbqJmHJvzFZlivJpLH3F/u9rGbarxY2dkjtBptbqwHqF9qsOUgMBA8HPs
ghoQ6w5/AS1MJflM6M6Fx3YAzKhqqQLKEhahRCHv8KtsLAia0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMDdsv4Ou8QLHSUF+NCoSAvmRU0VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOWViZjNiNWMtZDhmNC0z
ZmFlLTk2ZDktYjAyMGJhMGFkOWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIXEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ5tjR/TbfHuLc57P7iCgQOuGHSuMo2GC8KE10ikA7OKZGC6CFcLJ6Lm
CM58JnFzTXOskoYvsncZK7gT+YERKDhaqPaxrz9buAOxZDkE3saMYbnK41tv/LC+
9guh10D7g6SEEGhYeFZ06F8WU/TAPwHoeHd4AsPUOMZhBrcla4Hs7czfcAjjU69i
Ar/meAo4jAk93GYr+Uc6e0Spoc2MW/NAPl/PcdbDJfPRd6xEkIwh92SFfD4VdE+S
kKeiMDLssWXtRdDGFPAw2s+jecGOfKGR+wNjiUTRfmtDq3cgk7C62zOquZOzCdg5
fxNmn4w0QY/hZHOFjNjyAxjCCUzWntY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:33:52 2025 by rpki-client