Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f38a1f-619d-3c12-b661-52e2bc8bc04d.roa
File: d9f38a1f-619d-3c12-b661-52e2bc8bc04d.roa (raw, json)
Hash identifier: QYmKViqsXnftMfFihgRzhGT1MxuXzc4bwDvOEdB+fJQ=
Subject key identifier: F3:AB:42:89:F6:39:30:AD:18:28:F1:65:3F:A5:C5:5A:C4:03:95:72
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0E34CC199DFA9F982B080
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f38a1f-619d-3c12-b661-52e2bc8bc04d.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 395973
IP address blocks: 104.134.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:e3:4c:c1:99:df:a9:f9:82:b0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=4d6be26c-4741-4912-a172-6a7904ff810c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ce:7a:7d:b3:2e:0f:9c:f7:62:d0:68:46:08:
98:aa:22:87:f7:4c:88:01:df:69:7a:86:e6:2d:14:
1d:b6:54:35:ce:de:d5:8a:f1:35:e7:b3:9b:85:bf:
9c:f4:86:7a:ab:2f:60:fd:f9:ce:03:93:74:ea:c6:
3b:44:90:5b:d7:ac:5b:c0:a9:10:ab:98:b1:86:87:
d3:a3:2d:ed:3e:27:ac:3a:bd:34:bd:32:21:e0:ba:
c1:e3:b3:cc:9c:98:a7:c8:74:7d:31:01:07:a3:22:
68:3a:aa:ce:d5:02:86:73:99:7c:4a:64:a3:02:99:
ba:c8:e0:98:86:13:1d:1f:0a:39:16:d9:68:6b:25:
4b:c1:ed:33:9c:71:49:ea:6a:88:8a:a4:61:2b:3f:
5b:5f:20:e4:98:93:45:88:1a:f1:b2:49:95:f8:f4:
3f:53:ef:f5:e5:26:de:ec:d2:cd:08:a2:e1:3e:a2:
1b:1a:16:84:a8:98:34:65:94:83:26:4b:ef:75:e5:
12:83:46:48:7e:2a:11:e7:c7:df:1d:d1:f1:20:d7:
60:90:a0:aa:0a:6f:f9:ba:b9:80:b9:7d:ee:3d:d6:
54:35:82:55:b4:3c:4b:02:6e:f9:0d:50:a4:5d:77:
d0:3a:c7:18:36:dc:e0:7f:7c:40:8f:b7:cd:c1:ea:
f8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AB:42:89:F6:39:30:AD:18:28:F1:65:3F:A5:C5:5A:C4:03:95:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f38a1f-619d-3c12-b661-52e2bc8bc04d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.175.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:66:77:65:4f:b0:f0:88:77:b0:35:31:86:a0:f3:52:68:54:
a3:d0:23:d7:9f:29:df:34:38:e9:a1:20:27:72:52:6f:3f:d7:
e4:66:fe:6e:99:54:7d:88:91:79:fc:02:17:e2:15:68:27:72:
33:a6:b1:16:81:65:91:8b:56:a0:eb:ff:ef:6e:ea:87:be:81:
29:24:40:36:ce:19:dc:5a:aa:cd:cc:32:b9:59:d2:d7:4f:84:
42:f2:2c:76:7b:85:9a:30:26:75:0b:06:41:c1:1e:19:94:73:
d2:3d:31:c7:ce:3c:46:1d:5b:f1:79:b9:4b:e0:d4:18:74:0b:
be:26:19:68:76:ef:04:67:1b:0a:8f:72:30:80:66:c2:95:17:
98:d0:13:62:ce:66:31:23:a8:cb:ab:24:6b:b0:dd:78:24:c0:
5c:3a:d0:49:73:5a:ca:72:da:1c:87:72:f2:27:d5:bb:bb:e8:
b8:51:5e:30:4b:b5:c7:ca:47:1c:13:c9:31:5d:5e:d9:7d:3a:
11:55:f3:f6:07:8c:eb:97:18:08:1a:d2:16:04:64:94:b8:5f:
f3:c8:65:5a:39:fe:8a:54:16:63:2e:12:3f:48:40:cf:d3:dd:
52:c2:4f:13:e2:dc:48:d5:2d:4d:d0:a6:14:ec:fe:d0:10:75:
5f:a6:05:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wONMwZnfqfmCsIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk
NGQ2YmUyNmMtNDc0MS00OTEyLWExNzItNmE3OTA0ZmY4MTBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc56fbMuD5z3YtBoRgiYqiKH90yIAd9peobm
LRQdtlQ1zt7VivE157Obhb+c9IZ6qy9g/fnOA5N06sY7RJBb16xbwKkQq5ixhofT
oy3tPiesOr00vTIh4LrB47PMnJinyHR9MQEHoyJoOqrO1QKGc5l8SmSjApm6yOCY
hhMdHwo5FtloayVLwe0znHFJ6mqIiqRhKz9bXyDkmJNFiBrxskmV+PQ/U+/15Sbe
7NLNCKLhPqIbGhaEqJg0ZZSDJkvvdeUSg0ZIfioR58ffHdHxINdgkKCqCm/5urmA
uX3uPdZUNYJVtDxLAm75DVCkXXfQOscYNtzgf3xAj7fNwer4FwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPOrQon2OTCtGCjxZT+lxVrEA5VyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDlmMzhhMWYtNjE5ZC0z
YzEyLWI2NjEtNTJlMmJjOGJjMDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIavMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGdmd2VPsPCId7A1MYag81JoVKPQI9efKd80OOmhICdyUm8/1+Rm/m6Z
VH2IkXn8AhfiFWgncjOmsRaBZZGLVqDr/+9u6oe+gSkkQDbOGdxaqs3MMrlZ0tdP
hELyLHZ7hZowJnULBkHBHhmUc9I9McfOPEYdW/F5uUvg1Bh0C74mGWh27wRnGwqP
cjCAZsKVF5jQE2LOZjEjqMurJGuw3XgkwFw60ElzWspy2hyHcvIn1bu76LhRXjBL
tcfKRxwTyTFdXtl9OhFV8/YHjOuXGAga0hYEZJS4X/PIZVo5/opUFmMuEj9IQM/T
3VLCTxPi3EjVLU3QphTs/tAQdV+mBY4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:31:06 2025 by rpki-client