Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bb70a88a-132c-3362-b6f7-40ab4aeeead3.roa
File: bb70a88a-132c-3362-b6f7-40ab4aeeead3.roa (raw, json)
Hash identifier: zBhf8ODcCPLZMtnnYF+T9HrrYE7GqBPCmGANsYXox4c=
Subject key identifier: 31:E7:C9:62:9C:11:BC:F6:BE:4A:74:64:55:EC:36:A3:09:99:B0:14
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B1F65A2B190AA9DB5113A600
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bb70a88a-132c-3362-b6f7-40ab4aeeead3.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 41264
IP address blocks: 104.132.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:5a:2b:19:0a:a9:db:51:13:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=adaec078-4cf0-497b-8812-d07b978693af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:dd:2f:8a:84:28:fb:92:24:7b:b3:9e:88:76:
17:8f:9e:9f:b8:09:2f:f4:fd:4e:51:19:28:0a:f0:
36:ec:1f:15:64:ba:ee:ac:f9:91:69:61:e1:8b:41:
36:cc:09:a8:93:b3:b4:2c:46:c3:12:52:b6:0a:f0:
7d:0a:f2:d1:bd:35:a4:e4:02:3f:ae:7b:64:2a:22:
04:73:b2:c0:f9:be:df:e6:c3:c9:b7:09:2e:50:85:
f4:e0:55:f5:4f:d7:b5:9b:0d:c8:88:bc:56:08:8a:
ea:4b:5f:38:1a:07:62:9b:65:8f:11:04:36:eb:b8:
32:c7:2b:13:ec:d1:89:2f:92:15:20:ad:1d:6c:14:
1c:1f:66:19:30:a2:df:59:72:5d:8a:34:32:fd:da:
5e:7f:8d:a7:19:f4:70:d7:3b:f8:66:94:bb:e4:eb:
44:2c:2e:c7:3d:9b:10:49:13:27:b2:10:0b:2e:a9:
be:94:15:43:90:2b:d5:96:2c:46:37:08:a6:47:fd:
95:ac:30:21:f2:61:a9:92:21:a7:0c:ba:60:ec:4c:
c9:73:54:f1:e9:d3:b3:33:ee:10:f7:9f:f4:60:5e:
71:8c:c9:da:d1:84:3e:74:8e:46:3e:16:2e:3f:e6:
61:a5:b0:14:67:85:ec:f6:f1:0e:14:63:52:c0:58:
10:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E7:C9:62:9C:11:BC:F6:BE:4A:74:64:55:EC:36:A3:09:99:B0:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bb70a88a-132c-3362-b6f7-40ab4aeeead3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:5a:f9:66:3a:2c:42:68:ce:d5:7a:85:82:cd:b5:ec:bb:fa:
0d:e5:10:64:30:0e:c0:ed:1a:76:52:cd:42:ad:bb:4c:45:7a:
fa:0f:07:77:84:7d:6a:f2:a5:d9:dc:42:e8:af:ae:53:96:90:
07:f1:e9:ef:f3:aa:12:dc:a3:bc:91:62:84:58:a9:b5:f8:6b:
ba:f4:68:72:b3:5f:96:aa:23:ca:4e:50:9f:71:ad:e0:99:56:
cb:dd:02:11:7f:63:d7:ab:0c:b8:ff:f2:04:8d:9b:77:6d:1c:
36:61:99:f8:7e:c9:98:8c:99:da:e1:c7:4e:fa:c7:3e:8a:0e:
84:7a:97:b3:62:27:fb:a1:64:2d:62:6d:d9:31:67:94:f8:6a:
29:fd:73:26:af:70:0f:8d:61:b2:0b:e9:ee:25:74:6a:8b:d1:
00:32:6b:56:84:a6:c7:09:d3:43:90:20:a8:ae:2a:63:c1:a8:
a9:9c:da:f1:e3:72:76:1f:a3:1b:c1:f7:42:19:a0:2a:09:f2:
79:f5:64:b0:19:b2:12:1a:5e:11:17:0b:bd:75:45:78:0d:d5:
d7:95:56:d1:96:98:f4:49:cc:87:db:78:dd:e6:ba:52:ea:f1:
9f:65:9e:f3:1f:87:13:65:e9:ec:cb:b2:e4:56:eb:eb:d9:f1:
a7:65:89:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:34 2025 by rpki-client