Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bc6d12a1-6846-3547-8151-b74cb6e9aeee.roa
File: bc6d12a1-6846-3547-8151-b74cb6e9aeee.roa (raw, json)
Hash identifier: 0VA+FWqhKHXZ4UkKvcKlLoSIj8wCkHqS2lbyGfvom4A=
Subject key identifier: 3A:4A:90:72:8B:F0:87:03:1F:E7:5A:17:65:39:7B:3A:38:8E:B6:13
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0DB62EB98ADF29FF94680
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bc6d12a1-6846-3547-8151-b74cb6e9aeee.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 41264
IP address blocks: 104.133.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:db:62:eb:98:ad:f2:9f:f9:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=322b3769-7609-4798-afe1-991ae20d1673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:81:83:4d:7b:62:39:f0:02:26:b1:de:17:1c:
7c:a0:50:dc:da:ab:33:4c:d7:13:3d:4b:28:3c:aa:
d5:2a:66:63:93:a2:a4:67:a1:77:8e:e7:2a:84:95:
a5:5b:6f:28:38:54:07:1e:68:7a:44:0b:72:67:90:
c5:20:67:de:3f:80:a2:d9:2e:a6:17:66:7b:13:04:
96:fa:9d:0a:2f:91:4c:1b:06:5b:3c:d7:59:3f:6c:
a6:c6:ec:20:e4:66:d6:0f:db:6f:e3:cd:1b:66:16:
69:e7:ab:7a:0d:d4:34:82:6e:82:bc:c9:8c:97:8b:
a5:93:a3:7d:10:dd:6c:e4:01:7a:c8:fb:86:e4:e7:
a6:d3:e7:5d:c3:df:6b:06:ab:3e:80:62:44:30:62:
d3:df:45:dc:a4:31:08:2e:bc:8b:5a:9c:60:36:9c:
1d:88:9e:0c:33:22:8f:fd:20:a5:4b:30:26:76:aa:
2a:de:77:5e:2e:a1:16:00:0c:af:2e:ed:72:2f:e6:
c8:f7:4f:29:e3:ea:b7:4a:f2:97:b7:2e:4b:2a:6b:
c1:d4:b7:4c:34:b9:cf:a2:b5:0d:53:f6:bb:3b:cb:
f5:55:ce:9a:bc:bf:18:6e:0d:e1:7d:4c:18:ff:42:
54:81:58:4a:34:f2:c8:ee:94:fe:6a:ee:56:bd:fe:
e7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4A:90:72:8B:F0:87:03:1F:E7:5A:17:65:39:7B:3A:38:8E:B6:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bc6d12a1-6846-3547-8151-b74cb6e9aeee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:63:60:59:67:7a:19:98:4b:8e:64:4e:97:53:de:ec:d0:89:
f2:bc:f3:cb:b3:25:32:12:82:a7:20:02:02:a3:52:43:14:90:
a0:6a:c1:9d:14:bb:92:81:0c:c3:70:3f:47:35:24:69:a9:03:
ca:d6:69:01:f0:a4:a5:f0:ce:65:5d:22:7c:0d:8e:65:2c:19:
68:3e:8e:d2:f6:d2:a2:8d:12:d0:a0:17:9f:5f:76:bc:4b:9e:
3a:94:e1:e5:11:a7:06:ea:2b:f7:e3:97:61:d8:3d:17:b3:04:
9e:ee:ed:a7:16:6e:f6:f7:7a:69:4d:f6:95:7b:76:af:0d:8b:
1f:56:27:44:b5:25:12:74:06:c1:0e:95:6d:a0:b0:b1:64:8d:
3b:38:1d:e3:0d:9b:72:19:70:4e:ab:47:7a:0f:5b:e9:62:4c:
15:65:a6:01:55:73:1d:16:62:59:f3:34:43:a6:0d:26:f7:b8:
25:cd:96:b0:9e:a0:ae:74:0f:3b:c1:24:ca:43:4e:46:89:4c:
3b:f0:a8:53:ee:a5:d6:9e:39:12:d8:b3:9e:50:8b:67:49:61:
6e:47:c0:d0:59:19:59:7a:94:a2:5d:c9:9c:70:0c:b9:c1:e4:
32:ce:b7:df:8b:bc:e1:05:43:b4:4a:6d:a1:63:2f:cf:5c:1d:
c7:90:d9:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wNti65it8p/5RoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk
MzIyYjM3NjktNzYwOS00Nzk4LWFmZTEtOTkxYWUyMGQxNjczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoGDTXtiOfACJrHeFxx8oFDc2qszTNcTPUso
PKrVKmZjk6KkZ6F3jucqhJWlW28oOFQHHmh6RAtyZ5DFIGfeP4Ci2S6mF2Z7EwSW
+p0KL5FMGwZbPNdZP2ymxuwg5GbWD9tv480bZhZp56t6DdQ0gm6CvMmMl4ulk6N9
EN1s5AF6yPuG5Oem0+ddw99rBqs+gGJEMGLT30XcpDEILryLWpxgNpwdiJ4MMyKP
/SClSzAmdqoq3ndeLqEWAAyvLu1yL+bI908p4+q3SvKXty5LKmvB1LdMNLnPorUN
U/a7O8v1Vc6avL8Ybg3hfUwY/0JUgVhKNPLI7pT+au5Wvf7nxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDpKkHKL8IcDH+daF2U5ezo4jrYTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYmM2ZDEyYTEtNjg0Ni0z
NTQ3LTgxNTEtYjc0Y2I2ZTlhZWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHBjYFlnehmYS45kTpdT3uzQifK888uzJTISgqcgAgKjUkMUkKBqwZ0U
u5KBDMNwP0c1JGmpA8rWaQHwpKXwzmVdInwNjmUsGWg+jtL20qKNEtCgF59fdrxL
njqU4eURpwbqK/fjl2HYPRezBJ7u7acWbvb3emlN9pV7dq8Nix9WJ0S1JRJ0BsEO
lW2gsLFkjTs4HeMNm3IZcE6rR3oPW+liTBVlpgFVcx0WYlnzNEOmDSb3uCXNlrCe
oK50DzvBJMpDTkaJTDvwqFPupdaeORLYs55Qi2dJYW5HwNBZGVl6lKJdyZxwDLnB
5DLOt9+LvOEFQ7RKbaFjL89cHceQ2eE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:34:20 2025 by rpki-client