Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dbb3fcf8-53b5-320e-ac88-b5730be8ac68.roa
File: dbb3fcf8-53b5-320e-ac88-b5730be8ac68.roa (raw, json)
Hash identifier: ps4gRtvpZi9SUJekQ5M44ad/GK+fw68wy7N24O/gUfk=
Subject key identifier: 47:CD:FA:C6:E9:E5:44:66:21:27:43:E4:9F:3B:62:D1:7D:83:F9:FE
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848AF2B9C7D3C1B914565FC0680
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dbb3fcf8-53b5-320e-ac88-b5730be8ac68.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 41264
IP address blocks: 104.132.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:9c:7d:3c:1b:91:45:65:fc:06:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=40a55db3-5f55-4dda-adc9-f33c53313883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5d:31:4c:81:fc:30:5a:6f:44:7a:ca:65:2c:
73:be:ab:d2:b2:4f:b5:63:da:be:be:96:48:f3:6c:
87:d4:6c:00:33:7f:f2:f7:12:c4:59:3e:5c:66:92:
9a:a2:e9:fa:07:e6:16:ac:12:ae:9f:39:f5:77:c1:
fc:57:20:cf:fd:ac:07:d7:ab:11:7a:b1:44:4f:6f:
a1:10:2d:19:5d:90:b9:d6:6a:70:43:37:91:57:68:
b1:48:e4:b8:53:cf:a0:a0:9f:2e:84:59:c3:d7:b9:
dc:c4:bf:49:33:1e:85:bb:d9:42:3c:60:3e:f1:5c:
52:e6:5c:86:26:0b:a5:95:4f:f2:a4:e6:0f:a8:b0:
ad:39:17:9d:a1:bc:02:95:a4:d1:7b:89:ec:11:1a:
4a:b0:e4:2b:37:ce:b9:54:b4:cc:c9:ab:ad:85:a8:
cf:02:51:f8:fe:6f:d4:63:b6:ae:17:85:9e:db:36:
70:ae:9e:86:44:ae:77:e1:9f:4f:b2:0a:fa:70:fc:
9b:a4:ea:45:9c:d1:18:61:5e:83:86:ed:96:7d:00:
1b:63:5e:40:b9:11:db:9c:59:7f:78:b3:48:ba:19:
3e:0b:7d:7f:9b:16:3f:1f:07:f3:ea:2b:4a:db:2c:
fb:bb:1d:09:e1:2a:ff:fd:71:d2:20:65:77:dd:dd:
37:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CD:FA:C6:E9:E5:44:66:21:27:43:E4:9F:3B:62:D1:7D:83:F9:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dbb3fcf8-53b5-320e-ac88-b5730be8ac68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:d1:95:24:6f:dd:0f:c2:88:b5:4f:85:53:5f:ce:11:2b:e7:
cc:a8:f0:e1:31:8c:96:1e:9c:bf:4e:d3:fc:b7:10:ee:f2:8c:
b3:2e:db:b8:56:aa:63:4c:01:c9:78:fb:9b:31:43:76:6e:96:
b4:97:1e:ab:68:58:3d:49:c5:24:03:8b:ce:61:51:46:f2:d1:
13:5b:57:49:12:89:ba:ab:c9:25:62:41:b1:c8:c2:a1:e0:79:
d6:ca:02:a1:30:a4:80:a9:03:44:fe:cd:eb:53:41:37:4d:12:
61:47:a4:a2:f7:91:f1:e5:f4:44:5f:66:da:78:ad:19:eb:32:
1b:b8:a1:ed:be:84:e7:53:6d:a4:f3:57:28:ed:de:6b:d8:50:
f6:3c:4d:9f:3d:a5:93:0f:3f:41:3a:ff:a8:6d:dd:3a:db:0a:
23:6f:e5:5f:d6:c5:74:0e:63:6c:82:d6:1a:4e:b0:4a:29:03:
65:f3:0e:05:b5:ba:a0:b1:49:51:43:dd:08:e9:de:ea:d0:d9:
3a:0d:ab:f7:9e:09:cd:e2:d7:d9:af:40:29:b5:e3:62:f0:68:
0b:cb:cb:76:56:b8:93:4e:1e:98:41:3a:2a:76:18:ba:ea:b0:
6a:ee:04:6c:3c:c4:31:06:0d:87:d5:5c:04:88:a2:e4:da:fb:
8d:d7:6a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:33:59 2025 by rpki-client