Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d50e9d8c-cc09-3b5f-8b71-d07289e31838.roa
File: d50e9d8c-cc09-3b5f-8b71-d07289e31838.roa (raw, json)
Hash identifier: pNBmYlpl2aaEybAtZc0cKLH7noKyKQ2sF0XF7ElN7NQ=
Subject key identifier: 06:AD:A7:67:4C:90:D1:FF:9C:C3:EC:95:E2:29:11:E7:D1:32:B2:49
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B1F649286B0CC85B1D110F80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d50e9d8c-cc09-3b5f-8b71-d07289e31838.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 41264
IP address blocks: 104.132.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:49:28:6b:0c:c8:5b:1d:11:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=75ef5c55-5932-4025-99a5-945533dbc47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:94:72:b8:ae:4b:bd:ec:d7:3b:a4:37:f9:7e:
3c:13:97:c8:60:55:0d:5c:eb:d3:5c:bc:91:12:dd:
8e:90:f6:0f:7c:33:b6:51:05:50:4b:4a:dc:16:5f:
90:5e:ac:07:2b:ee:07:13:e4:71:13:57:11:24:66:
5b:28:31:89:7a:ed:4e:e1:52:ce:22:90:a0:ed:d9:
19:75:45:fc:0d:7d:c9:f0:13:5f:7f:dc:62:51:0d:
1f:ef:d1:af:93:99:c0:e3:63:c0:b0:04:b7:67:67:
82:0e:f6:71:1b:04:e2:92:c1:1b:3d:4a:d7:75:59:
96:1d:7a:52:91:50:6c:17:b8:11:a4:d3:8e:2b:1a:
b7:d2:7a:29:ed:dc:ef:60:28:e1:09:8a:7a:b3:5e:
4c:38:0e:45:a9:d3:ad:62:30:25:19:7c:70:23:12:
2b:a5:82:5e:0c:68:bf:2e:0f:d0:1d:9f:2c:22:0e:
7c:4a:b3:e0:9f:5a:ef:00:f9:ae:01:a2:76:24:cf:
45:8c:d2:c1:40:48:d4:1b:0c:c9:4f:7d:ba:8d:14:
db:f3:f3:24:23:36:1f:04:6c:5e:65:84:b9:1d:58:
4a:f0:fd:03:3b:33:38:c9:0a:29:95:f3:59:83:79:
76:db:55:ef:b3:ec:26:0f:b5:71:39:d1:ee:a8:b1:
57:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AD:A7:67:4C:90:D1:FF:9C:C3:EC:95:E2:29:11:E7:D1:32:B2:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d50e9d8c-cc09-3b5f-8b71-d07289e31838.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:9b:39:0c:a1:42:df:87:e6:5e:26:c1:03:06:e6:c7:5f:b4:
32:7e:b7:3f:76:56:bf:84:56:0c:1e:b1:57:92:af:9c:87:4b:
56:2f:54:2d:a4:89:f3:ec:14:a5:45:a9:5f:d5:24:b2:b5:3f:
68:f0:09:2b:49:60:ee:36:98:e3:f6:0b:d8:99:54:e5:1f:5c:
91:91:87:58:43:cd:96:8c:9a:0c:04:24:5a:14:24:ac:d8:14:
90:12:82:3e:f2:89:6e:b6:6f:cd:b1:85:1c:1b:cd:a6:bf:4e:
6e:7b:b6:a3:be:10:0e:0e:ac:cf:ed:2c:70:da:7e:f8:7a:f8:
58:83:75:24:21:66:4f:e0:89:d6:58:2f:64:ff:1e:20:97:06:
1a:a5:e0:a2:e6:1a:5f:95:03:f5:23:03:c3:4d:8a:52:d0:78:
4f:8c:20:ad:13:d6:34:fe:72:1e:3b:7b:0a:ef:12:25:b8:db:
db:80:5c:af:5b:fe:da:a5:02:f3:56:e6:fb:ad:57:62:5a:77:
5e:fc:e7:bf:d5:ab:01:ff:b4:b1:f2:b3:4f:2a:84:86:23:85:
6d:49:b8:f2:bf:58:79:09:d2:ff:ef:8f:a8:8c:5e:b1:e0:d3:
46:a2:80:0a:a9:4d:7c:b2:cc:fa:9f:6e:6c:ac:7f:12:f8:80:
a3:e8:f3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:33:40 2025 by rpki-client