Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/aa7a4294-6b2d-311e-a680-5a6ffb95a547.roa
File: aa7a4294-6b2d-311e-a680-5a6ffb95a547.roa (raw, json)
Hash identifier: 7IpFelSOftj+PfPR2kGev31cbYUleMrd0gs36hHxVXI=
Subject key identifier: 37:7E:4A:0C:0B:F8:72:03:F9:DB:25:A9:2A:2C:56:90:BB:26:04:D7
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848AF2B998F8271F8A059E6F400
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/aa7a4294-6b2d-311e-a680-5a6ffb95a547.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 41264
IP address blocks: 104.132.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:99:8f:82:71:f8:a0:59:e6:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=65ef0bff-02c0-42b9-bf4b-7029ad0a86cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8f:63:20:fb:d9:d3:43:40:07:77:09:52:83:
c1:ad:70:e5:b6:0e:7e:47:e3:42:ee:7a:3d:43:9b:
a7:63:7e:95:e1:91:f5:e7:5b:3f:fc:72:d2:7c:17:
8f:b2:54:4a:5f:bc:92:d2:36:47:8b:84:1c:7a:21:
d0:9b:b3:3a:b5:be:41:07:2e:e6:01:d8:52:6c:45:
14:58:4a:e8:61:ef:31:cd:dc:52:46:5a:ac:b2:28:
85:83:e7:c9:f6:7c:43:0c:1f:7b:35:94:07:78:a2:
ac:48:07:5a:af:08:8c:12:a7:02:d2:fb:87:8e:ba:
5d:55:cd:ad:55:cc:b3:18:19:9e:85:51:1a:72:a9:
c3:d3:d9:f8:e3:df:94:3f:d7:fb:6a:9b:d4:d6:e3:
d7:61:76:52:85:85:96:0b:03:d0:91:a6:e1:d5:07:
3e:b0:48:eb:24:b3:e9:44:0d:58:c3:95:17:fd:e1:
bd:7d:51:ed:54:a2:e7:5c:8b:9d:a4:ef:9f:42:d8:
72:7f:ff:8f:a3:da:74:42:6c:85:6b:e8:d4:9b:66:
3e:39:db:37:c8:46:05:5c:98:e5:63:d9:45:63:a6:
e7:40:6a:a0:45:4a:05:14:60:52:04:0d:3b:11:db:
38:15:75:71:50:fc:db:da:13:3a:22:ed:4c:6b:69:
f4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7E:4A:0C:0B:F8:72:03:F9:DB:25:A9:2A:2C:56:90:BB:26:04:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/aa7a4294-6b2d-311e-a680-5a6ffb95a547.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:8c:8b:81:84:0e:1c:71:38:ea:4e:38:11:35:f3:93:97:2f:
6b:97:37:23:7a:35:7f:f8:1c:02:b2:89:3a:8f:1e:6a:98:e9:
b8:b5:97:58:da:48:1c:42:29:33:79:d9:8c:b8:f1:5c:12:e8:
49:3a:8e:7f:77:cf:6d:0a:8d:97:46:c6:8b:93:dc:0c:b1:4a:
b0:91:e7:2f:5f:4c:e0:15:bb:06:e4:48:a6:5e:2c:dd:58:75:
5e:ba:37:e1:ed:56:b7:91:2a:8b:ac:eb:b2:c3:c1:0b:40:09:
62:f8:ff:7d:82:54:62:f3:b7:01:75:df:77:35:d3:db:f1:fd:
ee:0f:cc:8d:30:1c:1e:19:63:40:a9:14:77:df:64:d7:c9:52:
7f:6b:bd:58:66:e5:ac:1c:fd:a0:6b:04:8d:5e:c5:33:b6:eb:
a2:b0:7f:15:25:b7:8e:c0:9d:f0:e9:75:8a:3f:28:1f:0d:89:
6c:39:72:80:6c:20:28:d2:72:63:ff:74:35:7e:5b:b5:a5:ed:
4b:48:87:21:85:0a:84:c1:1e:b8:18:91:98:95:c3:06:30:65:
78:02:a0:d1:e1:28:c5:12:ad:76:17:1d:08:14:01:69:cf:fc:
3b:45:90:18:5b:82:a8:ad:76:07:62:07:e5:36:a7:7f:8a:ef:
01:3c:a3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:48 2025 by rpki-client