Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c1c02188-d805-3301-8938-976960f7c557.roa
File: c1c02188-d805-3301-8938-976960f7c557.roa (raw, json)
Hash identifier: qfFY+GlzfxWmJymGDabjPG8qwp9bp6HDJB2zCF/6eXo=
Subject key identifier: 96:37:48:17:B1:27:BA:78:FA:9C:E0:00:10:40:7F:86:FB:68:3A:C4
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B1F658A9ADF6D89F68A8D200
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c1c02188-d805-3301-8938-976960f7c557.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 41264
IP address blocks: 104.132.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:58:a9:ad:f6:d8:9f:68:a8:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=29f73aec-7635-4625-b02e-0ebf321f1b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a8:ce:f9:ab:6a:ad:c2:2b:cd:c4:30:6c:36:
b1:0f:9e:97:0c:13:94:65:64:30:44:e1:03:b5:d5:
98:4e:41:c8:17:67:81:21:22:8b:83:5f:ce:97:fe:
6e:e4:a2:5a:04:20:d7:b8:46:e1:c3:8f:fa:58:de:
ab:13:9f:0e:cd:2c:cc:b9:0e:1e:55:9e:05:75:1a:
36:2a:1e:86:1f:a4:d5:33:f8:39:e9:13:16:d3:af:
d1:b3:f0:02:c5:a4:1d:69:27:47:f0:17:a4:15:a7:
1a:35:62:a9:c0:b9:f6:94:74:e4:cc:9e:ba:1a:71:
48:4f:64:c7:71:ac:0b:e3:6e:6f:93:42:b2:ef:cd:
04:c9:7c:10:8f:44:32:fb:1e:7a:42:75:14:3b:27:
58:2c:a1:03:1f:5d:fc:0f:b0:7a:37:12:0d:1f:38:
a1:c8:76:53:e4:52:3e:b3:5b:4b:c3:b2:17:4e:43:
4b:00:9a:d8:ac:80:d9:a8:b2:4d:6d:08:0a:4e:2a:
de:e2:79:a3:9d:2e:0e:b0:1e:31:06:c4:65:e5:37:
f1:59:84:74:fa:9c:6c:ee:e1:ae:53:05:c0:a7:fa:
85:62:fc:cf:6b:44:f2:25:06:6c:fa:f6:17:a8:47:
4b:45:52:56:b5:4d:f6:15:e1:39:79:ae:da:59:8b:
7e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:37:48:17:B1:27:BA:78:FA:9C:E0:00:10:40:7F:86:FB:68:3A:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c1c02188-d805-3301-8938-976960f7c557.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:0b:b6:81:1b:d5:a1:d9:7c:6d:3c:b7:77:4d:38:cb:59:a7:
23:de:e7:43:8d:f6:a2:d3:69:df:a4:39:25:cc:d7:54:1c:0c:
da:fd:6a:e4:bd:7b:4e:f6:43:07:02:d0:a8:e7:79:4f:72:a3:
7e:46:6f:85:82:3d:4a:89:30:5e:37:8b:f0:ee:4d:f1:15:10:
1f:92:4d:aa:73:db:66:1a:92:43:99:25:9b:d2:98:06:e6:21:
c1:9d:40:02:2c:39:c7:b2:cc:57:12:7f:7a:3a:da:3f:f8:a4:
8b:ce:43:d7:32:f9:53:df:54:55:6f:d7:3c:10:bf:fa:96:e2:
12:56:b6:b4:93:d8:a4:66:a3:a3:73:21:62:56:8a:18:4b:54:
3f:a4:07:d2:42:2b:8c:c3:d4:1c:7c:dd:be:01:37:d3:9f:74:
72:ad:41:c0:e5:41:f0:55:af:b9:56:c3:d3:f1:c0:19:6d:a6:
0e:03:cc:b0:22:7c:1d:88:94:1d:bf:9d:35:57:8e:06:11:c9:
61:14:72:f1:3b:72:c8:e1:b6:9e:df:08:7d:da:30:84:de:3a:
4b:3d:7d:43:09:3e:24:f8:2d:4d:fa:3e:1f:6e:76:c4:0d:9b:
12:e1:c8:94:02:bc:d3:42:58:02:38:b8:c5:d2:40:d6:68:f7:
e9:d1:3f:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEix9liprfbYn2io0gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk
MjlmNzNhZWMtNzYzNS00NjI1LWIwMmUtMGViZjMyMWYxYjg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKjO+atqrcIrzcQwbDaxD56XDBOUZWQwROED
tdWYTkHIF2eBISKLg1/Ol/5u5KJaBCDXuEbhw4/6WN6rE58OzSzMuQ4eVZ4FdRo2
Kh6GH6TVM/g56RMW06/Rs/ACxaQdaSdH8BekFacaNWKpwLn2lHTkzJ66GnFIT2TH
cawL425vk0Ky780EyXwQj0Qy+x56QnUUOydYLKEDH138D7B6NxINHzihyHZT5FI+
s1tLw7IXTkNLAJrYrIDZqLJNbQgKTire4nmjnS4OsB4xBsRl5TfxWYR0+pxs7uGu
UwXAp/qFYvzPa0TyJQZs+vYXqEdLRVJWtU32FeE5ea7aWYt+6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJY3SBexJ7p4+pzgABBAf4b7aDrEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYzFjMDIxODgtZDgwNS0z
MzAxLTg5MzgtOTc2OTYwZjdjNTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFwLtoEb1aHZfG08t3dNOMtZpyPe50ON9qLTad+kOSXM11QcDNr9auS9
e072QwcC0KjneU9yo35Gb4WCPUqJMF43i/DuTfEVEB+STapz22YakkOZJZvSmAbm
IcGdQAIsOceyzFcSf3o62j/4pIvOQ9cy+VPfVFVv1zwQv/qW4hJWtrST2KRmo6Nz
IWJWihhLVD+kB9JCK4zD1Bx83b4BN9OfdHKtQcDlQfBVr7lWw9PxwBltpg4DzLAi
fB2IlB2/nTVXjgYRyWEUcvE7csjhtp7fCH3aMITeOks9fUMJPiT4LU36Ph9udsQN
mxLhyJQCvNNCWAI4uMXSQNZo9+nRP6o=
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:02:17 2025 by rpki-client