Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/afc589e3-c1c9-3fe7-bc5c-aa02ab07d6d2.roa
File: afc589e3-c1c9-3fe7-bc5c-aa02ab07d6d2.roa (raw, json)
Hash identifier: j7BE8YZLK3p9AcpwSdOQOoUKhxM4SGW4C0rFLFuz2k8=
Subject key identifier: A2:9F:5C:10:93:7F:E8:B7:40:EB:10:77:BB:90:C2:73:7B:4D:C8:B1
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848BFEBD0E56ECB3A2D999B4200
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/afc589e3-c1c9-3fe7-bc5c-aa02ab07d6d2.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 15169
IP address blocks: 104.134.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:d0:e5:6e:cb:3a:2d:99:9b:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=485e8f00-9b3d-497a-8dbb-14f125fe20bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9e:b7:01:3d:29:8c:e9:4d:e2:87:99:16:f8:
28:30:56:05:ea:aa:74:14:63:d3:a6:c3:b1:a0:a5:
be:2d:e6:a9:f0:6f:ae:a7:2b:12:28:cd:a1:b7:b1:
fa:82:f8:bf:0e:05:23:dc:46:32:cc:42:98:a7:8a:
a4:71:58:8d:12:0a:ca:c6:e1:0b:ae:70:c3:8b:5d:
d0:61:da:a6:f0:77:28:15:09:d4:36:2c:e2:16:2e:
db:a5:e5:df:6a:b8:31:d8:5b:df:0c:a0:ab:ee:d2:
5f:7e:2f:95:c9:1c:8d:a4:ec:60:6a:43:4c:83:5e:
52:e5:e9:43:f4:1a:ea:e3:1a:04:c5:ad:a6:2a:8f:
6f:d0:e4:65:55:57:01:d3:9f:53:f4:e6:47:59:f8:
d1:f6:d4:b1:15:27:80:da:2e:f2:3d:a1:46:50:ed:
c0:e1:07:f6:a0:63:01:59:b3:3a:84:3f:2d:ba:e9:
65:8d:86:10:8e:0a:72:ad:60:7f:b3:56:e9:7c:47:
39:48:3b:8d:09:bf:02:21:d5:12:65:ca:5f:6a:f1:
e2:77:c4:51:59:79:d9:2d:4f:43:3e:36:4e:05:97:
9d:74:af:9a:2f:e0:76:17:20:6e:ad:69:46:46:83:
17:44:97:fb:b6:27:1f:06:c6:70:a3:e7:84:b1:99:
b0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9F:5C:10:93:7F:E8:B7:40:EB:10:77:BB:90:C2:73:7B:4D:C8:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/afc589e3-c1c9-3fe7-bc5c-aa02ab07d6d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:a9:41:48:74:6e:90:26:07:95:13:82:d6:f2:97:20:97:ca:
5b:8a:e0:4f:26:ea:32:50:7e:11:d4:d0:ee:b9:38:a2:e6:a5:
c9:70:78:db:fc:a3:6d:2e:cc:4d:44:67:25:b4:f7:b0:55:65:
ad:15:01:1d:5f:7e:c5:77:97:e6:c8:f7:55:9d:1c:37:97:2a:
15:ea:e9:47:28:b8:a9:e3:42:c7:66:ba:a3:c8:bb:53:c1:78:
9e:97:23:12:08:c1:8f:dd:1d:ea:ee:62:21:fa:ff:25:a0:33:
c6:28:f3:c9:28:3d:ab:e2:ae:92:47:9f:3a:ac:1b:fe:49:62:
42:f9:7d:09:ff:01:3a:b5:64:68:e6:f1:7c:24:06:12:b8:8b:
1d:00:96:5c:1c:e3:5a:83:32:15:f5:53:84:b9:3a:a8:2d:1f:
c3:c7:32:b7:0f:ee:54:6a:f7:f3:2f:81:e1:f7:14:a8:c7:10:
e5:c9:e9:bc:ed:69:50:fb:61:f9:27:8d:b8:04:d5:57:c9:64:
4e:93:ae:e7:67:db:4e:19:0b:bc:43:13:d5:9e:96:ab:a1:73:
2a:9c:cd:fd:de:59:66:b2:74:17:07:49:5c:4e:e8:33:5f:57:
2b:5c:b4:45:6e:5c:01:7b:c4:1b:0c:9f:5f:16:e9:b7:72:00:
64:37:ae:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:26:15 2025 by rpki-client