Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/aae8fb29-3ef2-384b-a735-b66b837eca38.roa
File: aae8fb29-3ef2-384b-a735-b66b837eca38.roa (raw, json)
Hash identifier: oULfCf+qxraZrvX1m8Dob+TTvDCYyTc3ncNrwi17tpk=
Subject key identifier: D2:04:87:C5:74:E2:1B:9E:85:67:1D:B2:35:6B:69:C6:5A:70:69:24
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0F99DF5A450BA66DC5480
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/aae8fb29-3ef2-384b-a735-b66b837eca38.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 41264
IP address blocks: 104.133.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:f9:9d:f5:a4:50:ba:66:dc:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=3974968f-75b3-465f-ac39-1e7eaadf1f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:52:01:58:8c:d4:b0:d4:95:bb:67:3a:9a:e5:
1b:fd:46:da:20:03:39:40:a7:26:95:62:ca:b1:11:
22:ea:67:b0:c3:3c:66:d1:09:fb:8d:17:60:c8:2f:
b6:2b:54:21:ee:5c:a9:2d:0b:27:77:15:04:eb:dd:
6c:85:2f:05:36:04:c8:46:38:c5:88:22:ff:a0:60:
26:12:ec:59:e6:93:31:a3:23:9a:71:19:fa:1a:c0:
d7:bc:e5:dc:80:f2:d5:be:7a:af:d5:2e:48:cb:a8:
3c:be:ef:ff:af:82:c4:85:85:ce:12:b6:50:c1:fd:
7d:61:90:70:e5:bc:bd:9c:7c:93:b8:04:eb:97:5b:
5f:d6:4f:ac:59:11:66:10:21:31:8c:a6:05:82:02:
e6:f2:a8:bb:7f:33:08:c8:a4:44:9f:b7:fd:55:89:
03:ad:d6:2b:f0:f1:69:12:4f:6b:e5:6c:e7:0d:93:
0b:68:5c:d9:00:89:c1:d6:bb:11:d0:4c:8e:ff:b0:
18:49:9e:f9:4c:40:7b:71:e8:35:9e:d0:1c:26:57:
7c:39:32:46:6b:01:de:f4:86:2e:b1:60:f3:84:43:
8e:56:20:b1:23:a0:bf:21:65:0d:24:d5:90:33:17:
e7:34:16:6d:b4:58:d3:b4:25:5a:e6:05:f6:5d:3f:
ae:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:04:87:C5:74:E2:1B:9E:85:67:1D:B2:35:6B:69:C6:5A:70:69:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/aae8fb29-3ef2-384b-a735-b66b837eca38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c1:7a:c4:77:df:fa:45:cc:8c:82:da:0e:99:b7:35:12:03:e7:
12:6a:14:3d:66:88:df:92:d5:81:c3:15:ea:3e:dd:2e:d2:9d:
43:ee:12:94:d1:3a:7d:92:37:00:2e:45:02:a6:9d:e8:c7:96:
74:78:47:fa:e8:3a:72:11:c7:34:1a:7b:7f:9b:46:c1:e7:60:
63:d3:af:ff:2a:54:e2:30:af:61:07:45:fd:50:65:9c:a0:b3:
15:b4:5a:fb:b6:48:08:53:e5:bc:de:e3:1c:41:c7:10:34:2a:
e5:8e:2a:7e:a7:ee:76:de:2a:db:36:91:a4:ec:df:0f:9b:50:
d7:05:b2:22:4e:58:f7:09:4b:c9:36:f6:54:f6:93:8a:15:25:
a6:54:26:49:81:31:48:3d:9d:91:03:33:27:3a:a7:cf:f6:82:
02:5c:ba:57:fe:39:3b:b2:2e:dd:a5:3f:00:08:4e:21:55:46:
d0:e3:5b:5c:f0:6d:2e:97:22:01:53:92:49:45:80:17:8e:c2:
32:50:b6:e3:88:38:0d:dc:8b:be:fa:b1:e2:d2:ea:6a:2a:da:
be:e0:f0:3c:63:b4:0c:db:12:76:60:eb:e8:1c:d3:7d:73:0b:
20:dc:7a:b7:97:86:cb:f7:16:78:d9:0a:89:de:c7:b7:7a:c6:
f1:44:36:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:41 2025 by rpki-client