Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a45a2ce5-4a66-3163-9b69-ebf870ca4bc7.roa
File: a45a2ce5-4a66-3163-9b69-ebf870ca4bc7.roa (raw, json)
Hash identifier: AIdZtmMb6nQ5FN6QgZJ8xsi5Fqg28CM22XjqdwWumEs=
Subject key identifier: F8:69:2B:D5:A1:09:CC:3C:A0:90:9D:0F:3B:CD:79:76:76:F2:F0:86
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0E2F235805735601A8140
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a45a2ce5-4a66-3163-9b69-ebf870ca4bc7.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 41264
IP address blocks: 104.133.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:e2:f2:35:80:57:35:60:1a:81:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=258a082e-a29e-486f-a5c9-2cd8dafb4b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:44:ae:8b:fd:2d:b5:26:93:fa:80:72:13:96:
ce:a8:3f:7f:7f:86:be:bb:96:08:06:e5:a9:90:1e:
71:30:87:1e:4d:6a:3e:ca:3d:90:99:78:ad:50:16:
86:0c:f7:60:fb:a0:83:2a:70:16:93:70:d7:b7:86:
56:7f:e4:6a:cf:27:94:06:e5:e4:78:9d:d9:7b:76:
a8:15:87:35:93:ea:b6:49:54:6f:dc:b9:3c:d0:7c:
76:3b:87:fc:8a:19:97:1a:70:8f:fe:c6:df:fd:e6:
2e:2e:67:0e:f7:17:7c:0b:60:6b:b3:c7:cf:75:7b:
f3:e5:8e:1d:d9:11:17:83:e2:c3:16:e0:2b:05:45:
67:5f:17:b5:6d:43:6c:9e:e1:2c:a2:5e:40:00:fd:
5f:7d:ac:ff:ba:ba:16:cc:58:fd:67:91:a5:70:52:
a6:8d:a1:23:cb:41:ca:40:ab:bc:8d:d9:b9:82:e5:
25:24:3e:0c:97:99:53:c7:67:a7:b2:64:49:d5:b6:
c6:62:4c:29:35:61:b7:e0:fa:3a:2f:73:5e:b7:01:
dc:c8:db:8c:c9:ac:af:d3:77:50:bd:da:04:fa:99:
e2:8e:ed:3c:32:58:88:13:86:ed:be:e1:7f:0b:18:
37:55:bf:72:3c:cb:b8:da:45:51:6f:b8:1e:df:9b:
ab:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:69:2B:D5:A1:09:CC:3C:A0:90:9D:0F:3B:CD:79:76:76:F2:F0:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a45a2ce5-4a66-3163-9b69-ebf870ca4bc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:f0:ab:85:88:44:14:00:9c:7e:98:9e:3b:26:ac:8e:7c:bf:
67:0f:69:2d:8c:b6:df:de:0f:0b:93:54:63:24:2c:3a:26:ba:
12:7f:bf:4c:7c:18:44:6d:4f:6a:b2:43:2b:88:2e:52:33:b2:
0c:8d:b6:83:bc:3a:40:03:2e:a2:ec:d8:c1:a2:19:82:08:89:
cf:0a:7b:3c:b4:d1:ba:18:a9:8a:a4:f5:19:cb:ce:29:3b:ce:
e7:ff:37:1a:57:44:e3:86:74:a2:fb:99:9f:e0:03:88:f5:2c:
f4:6e:3a:44:18:cf:c4:a2:99:9c:8c:f7:02:53:39:0f:01:af:
60:8e:9b:9e:f9:db:98:f8:bd:0a:30:7c:da:5f:75:e8:8b:71:
89:e0:52:24:20:5e:b6:24:5e:09:e0:e4:91:ce:28:b4:f6:22:
14:e4:cf:9c:ba:ee:f6:18:7d:d1:15:e6:09:e1:54:1e:06:c1:
33:13:9d:be:63:ac:7b:ce:54:09:1a:93:ba:1e:88:8c:eb:03:
b3:5e:6b:1b:0b:56:61:67:14:06:87:ee:ae:c5:10:eb:b3:78:
17:20:6a:01:54:6c:86:dc:90:21:d3:99:13:61:96:52:9b:ce:
d1:28:13:7f:f5:e0:ee:9e:77:61:da:a7:4a:af:6b:97:af:65:
fa:81:34:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:41:55 2025 by rpki-client