Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a409e585-8d9e-38d9-9ed4-2981a1968af3.roa
File: a409e585-8d9e-38d9-9ed4-2981a1968af3.roa (raw, json)
Hash identifier: +8qEUweHZ7oljkwBD/cH+NCMuIjR7vn56veqJJy8hCw=
Subject key identifier: BA:07:7B:AA:57:40:34:21:59:34:2C:8F:4B:A1:66:02:5A:C5:65:CB
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B1F657BA97C4CFE2F6F49900
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a409e585-8d9e-38d9-9ed4-2981a1968af3.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 41264
IP address blocks: 104.132.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:57:ba:97:c4:cf:e2:f6:f4:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=9b3f8b29-cf53-41b7-b3c6-2a9399fcdcd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:82:25:d8:46:fc:61:00:2f:15:d7:fb:bd:33:
8e:93:01:62:a0:d3:7a:de:9c:0a:36:a1:79:76:ef:
b9:ba:2c:96:a3:88:4c:9d:e1:1a:57:34:a4:a6:46:
fa:25:b7:51:68:d6:b5:4e:0c:c5:24:43:ea:5b:de:
1c:27:94:15:23:f5:69:e3:ad:f7:63:f3:3c:19:c8:
34:95:95:c1:9e:a4:07:21:f2:df:1a:bb:c8:49:ee:
61:50:ac:bf:f5:dc:a0:c1:18:c1:ac:73:44:69:42:
fd:10:c9:41:da:f4:7f:23:28:60:ce:60:80:5a:b7:
31:ac:e4:61:f1:7e:9d:5d:af:3e:ed:ee:50:7e:2c:
3c:7d:2a:65:81:24:09:fb:b2:9c:ea:57:a8:e9:33:
cf:59:5c:d9:fc:1d:18:16:83:3f:91:78:38:28:67:
60:89:28:3c:6c:66:0e:46:38:a5:fd:f1:1d:cb:dd:
9f:6e:fa:be:74:d5:40:74:5f:52:85:6b:64:29:25:
57:4e:42:1c:15:da:4a:83:54:6d:21:96:62:0f:4a:
e2:c0:af:72:ad:93:3b:47:19:bd:20:e1:cc:09:2a:
ac:41:e4:98:c7:8a:2d:41:d9:27:47:0a:f0:56:2b:
c1:93:15:95:35:93:20:02:4f:99:77:cc:bc:42:bd:
43:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:07:7B:AA:57:40:34:21:59:34:2C:8F:4B:A1:66:02:5A:C5:65:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a409e585-8d9e-38d9-9ed4-2981a1968af3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:ba:5e:89:03:9a:e7:67:12:bb:cd:b3:5a:c5:a9:df:04:7e:
87:66:b8:5f:58:69:69:69:1f:db:b2:5a:5c:86:a4:34:9a:fd:
d4:4a:8f:4e:b1:8c:2e:cb:a0:bd:8d:1e:70:d8:8b:69:32:51:
5a:19:8b:c7:42:78:75:62:a9:69:cd:85:5d:77:2c:79:c0:ab:
04:e0:56:08:a8:70:94:df:c7:c3:64:30:36:6e:aa:f5:da:a4:
7e:de:98:0d:dd:b1:c0:16:a7:b7:25:96:b8:a1:28:fb:ab:2a:
ef:a5:3c:32:3a:0c:3c:4b:c8:58:ae:a6:a0:e1:d3:e0:8b:e5:
c6:d6:e5:2b:1d:47:dd:5b:db:1a:08:f9:ef:3c:31:58:04:f4:
7a:4e:6a:f1:c3:6d:92:9b:bc:b9:61:b0:06:35:81:80:d2:9a:
e6:14:a1:f1:33:30:25:27:31:eb:2d:4b:00:17:bb:06:61:20:
82:2d:dc:22:64:bb:e7:77:84:ba:ce:02:f2:0b:49:16:1a:2f:
62:97:8f:89:a1:ff:49:eb:4d:9a:bf:fd:cb:1f:26:2a:b3:9f:
7e:49:de:48:7b:eb:ca:37:a8:1c:fb:b5:90:b9:0e:11:2f:b2:
13:6f:11:93:aa:fa:91:90:c0:ad:31:23:92:68:94:c9:1a:2f:
49:90:05:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:38:56 2025 by rpki-client