Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/db796cf7-2608-3581-86e1-b1edb34fc89f.roa
File: db796cf7-2608-3581-86e1-b1edb34fc89f.roa (raw, json)
Hash identifier: qakIuHoXUyXmgZD/hTrcgf8NQ0fkfkDtaAZ/z24s3q4=
Subject key identifier: D4:AF:E6:BF:7B:27:06:D6:1D:BE:9E:66:B7:D7:41:EA:D7:DA:ED:9C
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B1F647DCA1DC0AD914D8D080
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/db796cf7-2608-3581-86e1-b1edb34fc89f.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 41264
IP address blocks: 104.132.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:47:dc:a1:dc:0a:d9:14:d8:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=d9f17c32-1106-46eb-a19a-0c833e8a82f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:71:33:e4:ff:41:12:f0:a1:2b:83:32:2b:9c:
a3:b4:a3:5b:6e:9e:2c:55:e8:09:19:e8:9b:8c:a8:
df:e2:54:e5:9b:25:b9:4f:f2:db:7b:88:2a:c7:0a:
19:ab:ed:af:1f:e6:3b:be:62:e8:78:ed:84:d4:cf:
fa:24:ea:0b:04:18:f2:52:97:e2:d1:4e:b9:db:49:
d4:bf:18:a6:a8:78:1c:f2:8a:55:ec:40:dd:35:cb:
36:a6:dd:84:e3:80:69:01:cf:0d:82:ba:24:c4:f5:
87:dd:ba:95:17:6c:90:dc:12:a8:98:02:01:a4:3d:
e4:33:89:fc:3e:3b:2c:64:52:61:68:bb:83:5e:73:
ed:21:30:dc:65:9e:d1:1e:49:61:f9:11:67:88:09:
ff:0a:c9:66:47:6a:57:4e:3b:1b:de:0e:99:50:0c:
9a:24:e7:4f:bd:d3:3e:d1:85:c3:87:81:bd:b5:05:
ab:20:c5:99:5b:c6:d6:30:d0:8c:1a:e0:14:01:cf:
7d:de:6b:66:da:94:28:61:c6:18:ab:a3:76:f1:1b:
d2:ab:84:0c:a6:82:bf:6b:8d:c5:9c:db:9b:bd:aa:
ce:d1:12:46:76:21:d8:0a:64:94:b0:1d:70:26:e0:
13:70:25:96:01:78:3c:7b:81:ed:fb:77:16:42:2c:
a9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AF:E6:BF:7B:27:06:D6:1D:BE:9E:66:B7:D7:41:EA:D7:DA:ED:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/db796cf7-2608-3581-86e1-b1edb34fc89f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:8a:f5:76:09:39:ca:e6:8d:82:b5:38:38:54:96:fa:53:8a:
10:b6:ce:5b:bd:06:69:c8:bb:11:86:f3:a2:1b:ac:70:8d:67:
af:29:7a:08:d0:08:52:35:87:11:c9:dd:7e:91:3a:51:7d:4f:
ae:ad:43:b3:4e:9e:63:82:cd:5d:77:94:53:a1:b4:5a:e4:4b:
2d:ae:44:1f:b2:e4:fe:b5:a3:84:e1:c1:55:6c:5d:2c:48:c3:
ab:58:83:19:04:98:db:5d:b0:1d:f9:90:1c:f7:f9:b1:5e:ef:
69:c5:6f:8d:f1:7d:c9:32:6d:94:93:90:62:e0:c2:b5:4c:99:
1b:c1:26:53:e3:ea:3b:a7:94:07:f3:9d:79:9c:76:88:2a:85:
15:25:e2:3d:b6:e9:31:21:24:71:b3:ff:7f:c6:77:e4:10:61:
4b:2d:e2:10:5e:df:c6:62:0e:aa:ff:5b:1f:a1:dd:ed:7a:df:
32:5e:fe:ee:0e:51:fc:f5:a9:89:cb:31:b4:30:c1:a7:ef:af:
74:52:a7:b8:6c:72:bd:a4:0c:ac:bb:71:37:a5:52:d1:f6:4f:
e6:2f:62:ff:0f:b5:c2:14:8c:ac:c5:80:9e:03:ec:27:10:bc:
d2:c8:8f:b6:92:e4:02:56:48:22:68:1c:d5:4b:db:bf:16:ba:
b1:d0:bc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:17 2025 by rpki-client