Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b2f1bdd6-6dca-3cb6-a8cf-779fd05a29d6.roa
File: b2f1bdd6-6dca-3cb6-a8cf-779fd05a29d6.roa (raw, json)
Hash identifier: KIm9GncvwKaQmf1uMZsHi0hHzc3RxAI37LkTLdCRlQI=
Subject key identifier: 09:73:72:CF:F8:5C:7F:C0:FE:60:C2:12:A1:87:F3:9F:F5:9B:16:F6
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848AF2BBA96A278DAEA3BE25D40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b2f1bdd6-6dca-3cb6-a8cf-779fd05a29d6.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 41264
IP address blocks: 104.132.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:ba:96:a2:78:da:ea:3b:e2:5d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=4f9b96fa-86db-4298-b310-67f9358d6082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3b:02:77:05:2e:42:a0:b7:1f:6a:4f:b2:8f:
77:f2:ce:ab:d2:72:8c:7f:e1:45:61:02:de:c4:16:
eb:b9:60:ed:75:9a:28:19:3a:71:77:fe:57:b1:33:
2f:44:96:62:7f:13:f0:f6:37:77:60:14:5a:11:c7:
80:33:86:a2:69:e1:c0:4d:fd:90:b3:29:b7:77:f6:
39:18:95:b9:2d:21:e1:c4:b0:24:96:c2:d8:02:4a:
bc:d3:52:3c:45:6d:0f:32:1f:86:84:7d:6a:6e:e4:
77:0a:33:93:52:82:c5:f5:d2:ab:e5:6c:bc:26:55:
9c:33:0b:73:80:d0:d5:34:6f:75:c1:60:2e:59:40:
8b:50:ba:fd:9c:d3:52:00:0d:c2:40:68:9e:57:39:
7b:36:b5:0e:c2:f9:69:41:66:3f:6a:ed:c4:f8:59:
5b:57:81:6d:39:c5:87:ba:8a:29:57:1f:97:e9:21:
c1:a0:ac:3c:06:9e:dd:a5:75:46:5b:7d:ed:3e:9b:
cc:af:ef:09:e1:cd:26:6a:5f:a8:88:55:4e:16:bc:
23:ec:9b:6d:4d:5a:3c:87:46:83:4d:a5:df:c1:47:
35:b8:ce:ae:66:b7:87:ee:d3:f8:f0:1d:64:51:b6:
23:32:16:67:45:f2:e0:fa:cc:81:14:95:de:e6:3e:
de:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:73:72:CF:F8:5C:7F:C0:FE:60:C2:12:A1:87:F3:9F:F5:9B:16:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b2f1bdd6-6dca-3cb6-a8cf-779fd05a29d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:5e:3d:18:4c:ca:43:f9:34:4e:c8:cd:15:d7:b0:db:7b:84:
8a:9c:f0:84:13:6f:df:0e:09:c1:08:d0:3f:57:e9:aa:b0:41:
5d:10:0b:dd:bd:96:af:e9:63:01:d9:77:c3:3d:58:2d:be:41:
82:f7:8f:14:f7:62:6b:a5:eb:dd:df:c3:54:93:33:fb:39:3c:
85:bf:59:88:61:9c:bb:1e:ff:55:6c:d1:0b:cb:d3:c7:7d:8b:
3f:c8:6f:3e:b2:89:c7:19:83:08:c8:b5:cd:c5:16:9b:f6:42:
6f:b9:6c:a7:22:90:53:9e:1e:6c:c7:8e:11:2f:0c:41:96:ae:
de:28:fc:26:76:39:4d:6e:f0:20:b4:7a:d5:23:4a:2b:2d:fa:
39:06:86:45:f6:39:ca:6b:08:1b:09:d7:80:47:39:13:0d:73:
7b:06:72:35:be:b6:0e:86:93:d1:82:ee:98:6c:45:31:84:47:
97:23:b1:74:44:1d:c9:b5:0d:b9:95:a1:b8:f7:cf:ef:05:1d:
8d:54:0f:e7:f6:80:54:75:57:b7:7d:08:4b:d7:40:fd:2e:f7:
fa:0c:f9:fe:f9:ca:11:71:c3:22:61:1f:88:63:e5:2f:84:db:
81:6d:9a:7d:69:b0:df:0e:b1:ea:b1:9f:dc:1c:d9:52:8d:20:
b4:a2:5c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:41:22 2025 by rpki-client