Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a9c02dfd-8b93-3a11-b9bf-7f3d741fd787.roa
File: a9c02dfd-8b93-3a11-b9bf-7f3d741fd787.roa (raw, json)
Hash identifier: qziM3xrZgC6s/qF/oKb3hu/gLGaOVjZJnOvssFFfs/I=
Subject key identifier: A1:D1:C3:4B:D1:1F:00:CE:83:41:F5:6F:64:61:2F:A9:5C:60:FB:4C
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848BFEBD0716AFE8E3B9002B880
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a9c02dfd-8b93-3a11-b9bf-7f3d741fd787.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 15169
IP address blocks: 104.134.214.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:d0:71:6a:fe:8e:3b:90:02:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=3c15c09e-5308-438a-8d73-67a9a4063bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8c:b7:3c:e0:f6:d3:01:e5:8e:77:59:8e:c0:
c2:ee:56:7f:f2:c8:e9:14:2c:dc:07:51:11:be:bf:
86:61:23:f0:ec:e6:18:f9:39:49:96:0e:9d:f4:c8:
62:8f:11:3e:c0:af:c4:0b:46:50:79:71:ae:28:4d:
77:34:08:bd:fe:35:fb:f8:5b:01:b7:eb:20:99:5d:
9c:44:33:de:d6:7a:cd:2c:d1:3f:93:30:a2:c1:19:
7c:0b:d7:86:7e:c0:b1:05:01:49:c1:13:62:7b:98:
53:7f:0b:7d:d8:ef:0e:a5:d0:4c:6e:3b:de:18:b7:
10:0b:5a:22:46:c7:97:dc:00:74:38:02:f6:fc:04:
d0:45:20:44:22:be:1c:d7:b6:0a:a2:f0:a8:0c:18:
58:8a:87:c7:a1:ee:70:0f:59:f0:dd:a9:01:93:fe:
43:64:f1:6f:18:7c:bb:0c:ac:df:2c:23:3e:6e:cb:
86:6f:34:75:8a:61:1d:1c:df:dd:05:c0:33:07:9a:
38:9b:4e:ca:4f:10:73:4d:49:ec:5f:40:2c:37:77:
ef:26:5b:d9:64:ce:b1:e5:bd:dc:1c:cd:c4:6d:5f:
aa:1d:19:74:44:fa:3b:a8:39:aa:6c:93:45:92:3a:
ec:85:29:da:12:98:31:82:1c:0d:ca:7e:ce:f4:c7:
a7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D1:C3:4B:D1:1F:00:CE:83:41:F5:6F:64:61:2F:A9:5C:60:FB:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a9c02dfd-8b93-3a11-b9bf-7f3d741fd787.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.214.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:d0:c0:07:94:e1:3e:54:02:1b:ed:f4:f6:6f:41:ae:37:1b:
8f:69:0b:da:9c:5e:0e:50:cc:52:54:27:22:ca:f1:fe:cc:93:
da:ce:7d:5d:54:37:9c:21:f9:77:3e:8a:72:65:28:4b:6d:e9:
5a:11:57:fa:6a:b3:dd:b4:8a:c4:20:2c:87:b6:f4:14:27:d5:
b8:82:58:78:5c:be:d0:11:96:47:79:17:b8:9e:8c:e3:c8:85:
b7:42:3c:d7:fd:37:0f:7e:4c:e8:d7:0d:b2:b8:0b:08:74:c5:
e5:73:1c:9a:7e:c0:e7:19:38:bf:3f:55:0f:70:b0:7b:70:2c:
2c:f2:0a:72:e1:55:61:83:18:cb:0c:d9:a9:57:a5:4d:52:51:
18:37:9c:ca:83:f4:28:2d:be:05:20:98:f2:87:f0:37:0d:c9:
d7:7b:d8:72:02:29:03:7e:ca:7a:45:b5:28:22:e7:28:35:12:
9b:30:0c:65:b5:ac:0e:d8:16:fc:df:f7:fc:9c:21:17:65:e5:
98:e7:1f:67:8d:80:c3:8c:73:b0:2a:87:a3:c0:f7:b8:1e:6c:
89:28:e0:8d:53:f8:ef:2b:05:03:79:3a:78:91:31:c3:69:2b:
08:04:69:a8:00:de:bc:58:8d:cc:3b:c2:e1:c1:b7:e7:ab:93:
f2:bf:0b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:04:59 2025 by rpki-client