Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b43eb00c-f7f9-3b0b-bf5f-9bad97de05f5.roa
File: b43eb00c-f7f9-3b0b-bf5f-9bad97de05f5.roa (raw, json)
Hash identifier: 0yokR/Jxzwsyf3apGWAX5JiCQQR4FBc8QuhM3KLeUGw=
Subject key identifier: 62:B2:FC:40:19:3D:17:75:D3:C7:ED:39:D4:CF:AE:A5:4C:41:33:09
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0FAC44A06BCC51A762E40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b43eb00c-f7f9-3b0b-bf5f-9bad97de05f5.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 41264
IP address blocks: 104.133.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:fa:c4:4a:06:bc:c5:1a:76:2e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=bda86d52-42f7-49e5-a828-958163bd0c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:82:f8:72:fb:92:7e:e7:14:95:37:ca:f1:de:
d1:29:42:e9:ab:7a:d3:0d:b0:63:f8:ed:eb:5f:e3:
4f:4c:83:0e:df:74:d8:b0:a8:5f:5d:a8:fb:94:12:
41:7a:bd:db:1a:48:c5:91:fe:b5:3c:79:f2:a9:45:
73:f9:2e:80:0e:38:4b:33:bd:86:0d:42:27:03:40:
8c:5e:dd:b7:71:37:2f:e4:fb:d8:3f:e0:e5:6c:7f:
a2:5e:3f:58:01:b6:da:18:48:43:70:15:af:42:89:
02:f2:8b:0e:3e:81:53:32:75:72:9d:53:2b:13:87:
78:53:c7:44:f3:be:17:1d:57:dd:d0:7c:41:24:57:
cb:fe:33:61:3d:ce:f7:1c:b8:31:4b:57:d3:0a:88:
2e:d1:82:ec:9a:71:58:ad:a0:cf:64:9c:64:96:37:
dd:5a:a1:4e:8c:7b:af:5d:20:d6:b5:01:fc:a1:15:
e2:df:9a:be:42:c6:d4:2d:1a:1b:e6:6f:04:18:bc:
41:b5:69:cc:5e:10:2e:da:64:73:eb:e9:a2:e4:fd:
96:a0:2f:ba:4c:de:51:7b:2a:36:8a:b8:b0:d5:29:
a6:ee:87:29:bc:9d:d5:4e:f3:36:8e:45:17:6b:23:
03:46:5e:28:fe:31:c9:2f:36:3a:46:e5:10:2b:d9:
83:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B2:FC:40:19:3D:17:75:D3:C7:ED:39:D4:CF:AE:A5:4C:41:33:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b43eb00c-f7f9-3b0b-bf5f-9bad97de05f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.15.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:44:0d:a2:fa:cc:5a:f8:d9:e5:fa:65:be:81:82:56:4d:26:
4d:02:0d:cd:78:44:d8:88:b7:20:99:7b:39:2c:d9:15:96:7a:
a4:b8:22:56:a0:9a:f8:8d:e5:97:17:96:45:05:6d:d7:78:71:
6c:0c:29:05:8e:39:a8:ff:d2:95:17:7c:41:01:e8:3c:79:0c:
a3:50:cc:c3:f7:20:14:8f:23:64:62:ed:5d:7a:fe:12:f6:d6:
88:9b:96:8f:28:99:17:c6:fa:27:86:ed:c8:96:4d:f5:f7:73:
96:29:d2:d2:59:ac:a8:f8:6c:0b:a4:6f:9e:23:b3:8c:aa:3b:
f7:ad:3e:fa:1f:91:62:65:13:3f:97:e0:bc:87:4a:2e:ff:65:
f1:9f:87:b6:bb:d4:02:aa:cd:d6:ed:08:60:ce:54:1b:85:21:
68:a8:10:53:56:44:43:e2:31:d6:35:10:75:0f:21:dc:fa:2f:
f8:0b:fa:ef:69:e7:d7:5d:be:c3:da:df:51:03:38:72:54:35:
5b:b8:dc:dd:37:ae:16:99:41:01:50:d2:04:62:55:7c:03:18:
3b:d2:5e:6b:91:25:1a:92:54:10:81:8b:1d:fc:d2:d4:1b:0f:
2c:62:da:ae:f0:a9:7c:c2:e3:6b:f2:8f:af:1c:f4:49:1f:85:
eb:61:f3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:23:55 2025 by rpki-client