Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bd32105b-b59a-3342-8354-14a4948b8295.roa
File: bd32105b-b59a-3342-8354-14a4948b8295.roa (raw, json)
Hash identifier: ttyBLCg9gpwk2coypAoXDasz4njmRxqVmB1eV7QCfnw=
Subject key identifier: 8E:AD:48:8A:D1:DD:96:3B:79:03:1F:21:B2:2A:59:CF:CC:C0:75:DA
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848BFEBAF8445C5D522B75FEE30
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bd32105b-b59a-3342-8354-14a4948b8295.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 15169
IP address blocks: 104.134.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:af:84:45:c5:d5:22:b7:5f:ee:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=b3c69c48-39e0-4bb2-b2b6-8c42aad9d607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:22:e7:64:44:76:08:b4:40:ff:4f:9b:29:8f:
0a:8f:d3:8c:13:29:3d:20:99:0c:2c:6e:ae:2c:53:
5f:f3:a5:36:f5:8b:45:1e:f7:72:a9:e2:bf:9b:b2:
74:ea:c2:7a:e4:94:45:93:2f:81:42:3c:56:8d:a3:
d4:c7:97:49:8c:c3:2b:c2:03:11:af:a3:c9:78:d8:
54:eb:da:cd:0c:99:2f:4b:a6:e7:de:78:ca:1e:22:
58:bc:cf:a9:ae:8d:03:bd:41:c4:82:86:44:d8:ea:
64:bf:b7:a5:87:3f:c7:42:66:98:03:b2:76:3d:2d:
57:0b:37:13:a5:c9:43:1a:b8:54:7e:f9:f3:ee:03:
b3:d0:f1:a3:c4:e8:e4:46:04:b9:ab:86:26:1e:ec:
a3:49:49:1e:a2:39:e2:7e:63:13:f2:ef:a7:75:31:
ab:21:c9:31:4d:da:fd:3b:f7:02:8b:47:be:dc:42:
91:22:1d:35:53:30:a7:15:80:3e:58:1b:17:07:46:
b4:9f:93:0f:4d:1c:84:e6:8d:59:99:a8:54:10:25:
2b:41:78:f8:93:9f:6b:7c:a3:a6:60:6b:d4:47:6b:
97:05:99:d3:5d:43:24:67:8d:cf:6b:38:2d:1d:00:
ee:1e:2c:41:01:98:e0:d9:36:2f:26:9e:81:15:1c:
5e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AD:48:8A:D1:DD:96:3B:79:03:1F:21:B2:2A:59:CF:CC:C0:75:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bd32105b-b59a-3342-8354-14a4948b8295.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:41:9a:3c:07:9f:d8:c3:26:d6:17:8b:0d:69:dc:78:41:60:
91:33:af:41:a2:f1:3f:5e:83:64:31:30:49:f8:2f:20:70:a5:
50:83:4c:02:9f:1a:c4:79:50:4e:16:82:e2:d4:56:9a:8b:a3:
63:7e:82:27:6d:dd:2b:09:82:ce:fb:64:d0:13:d7:99:cd:5a:
a0:5a:41:8e:8b:26:8c:4f:16:1d:b0:44:91:72:85:06:f1:41:
1f:04:9e:f6:f6:e7:77:cc:2b:12:33:15:a1:04:4d:60:43:36:
11:6d:bd:ff:88:8a:86:b4:90:82:c8:dd:55:b2:6e:c5:f4:78:
bf:5a:fb:56:04:31:39:5e:1e:c6:bc:91:78:1c:62:de:72:a8:
df:6e:30:ff:82:50:35:38:1a:92:a6:2f:54:1e:e9:ee:b3:63:
34:5a:9f:99:6d:9b:e0:93:ec:8b:7a:88:9e:18:3a:bc:b9:8c:
fb:87:0b:25:15:ba:da:d9:52:9a:a0:19:c5:79:ca:b4:9d:66:
51:74:08:2e:f8:da:e3:5d:57:6b:ef:c4:6f:5f:f0:be:2c:be:
80:6b:87:99:32:5d:8d:d8:16:05:45:ed:0e:83:45:85:b5:28:
f4:5a:3a:3a:26:e2:38:35:c0:ad:79:63:16:91:3d:88:bc:84:
2c:a3:28:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 09:02:58 2025 by rpki-client