Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dd88d089-543b-3c99-9f66-b7507b46ea60.roa
File: dd88d089-543b-3c99-9f66-b7507b46ea60.roa (raw, json)
Hash identifier: eCeLVsh1578OTZwk0N/+3td6PY9KI3V8NpSXeEhwoZc=
Subject key identifier: DC:B9:73:6F:04:0B:E9:4C:47:5C:9C:6E:8A:27:49:3E:9D:53:67:BA
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0F69D3AA9CC5E09F2E720
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dd88d089-543b-3c99-9f66-b7507b46ea60.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 395973
IP address blocks: 104.134.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:f6:9d:3a:a9:cc:5e:09:f2:e7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=2f40ac43-81dc-4968-8681-e4e135a34747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:50:94:bb:0c:78:e5:7f:64:39:96:66:6f:88:
33:08:93:9e:52:e2:d1:d6:ef:28:43:1d:86:5d:82:
aa:2c:fb:f4:29:a6:66:5f:b1:87:5d:d2:12:44:60:
a8:07:be:d3:ed:41:18:33:f1:ca:2c:8c:40:c8:6b:
3f:4b:cd:3b:04:26:d3:cb:da:1c:e7:03:a7:4c:04:
37:e1:11:92:b6:1d:20:07:4d:b7:1f:53:77:ed:a2:
f9:c5:ab:75:54:60:ed:ff:51:13:c1:2a:c8:7a:a3:
4d:76:20:a1:56:6c:9e:67:64:95:39:20:27:56:ea:
39:37:6a:d9:f7:45:c3:41:4c:aa:67:90:49:67:5d:
c2:b6:23:50:d5:e4:bc:db:1f:c0:02:7f:c5:97:19:
11:9e:40:10:0a:0a:9f:e6:b0:91:e1:6f:66:bc:a5:
34:41:36:07:e8:96:9e:76:a0:87:e2:22:ed:d5:f4:
08:3a:78:2c:7f:c1:cd:1b:94:21:1f:86:e9:c0:0c:
12:61:94:02:fb:fc:74:8b:f0:6e:99:24:5d:47:2c:
44:28:14:0d:e9:b1:63:67:20:76:eb:e7:30:c4:0d:
9e:35:cb:8a:39:15:e5:e2:bb:99:8a:9d:9c:2e:a5:
fd:25:dd:66:27:12:ec:12:f8:e8:07:94:ef:9f:d2:
de:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B9:73:6F:04:0B:E9:4C:47:5C:9C:6E:8A:27:49:3E:9D:53:67:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dd88d089-543b-3c99-9f66-b7507b46ea60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:b0:a4:0a:f9:c1:9f:b8:19:d2:59:81:08:c1:8c:60:79:4b:
34:70:47:19:75:a9:31:35:91:24:65:18:70:c9:cf:65:e9:07:
8e:53:c2:d2:2d:5c:17:96:26:52:bd:00:44:9a:b5:f0:f3:38:
9f:27:f6:ff:36:9f:1a:d0:dd:52:82:ad:0a:b1:47:db:64:34:
e9:d4:5a:51:0e:56:7b:29:3a:8d:90:1d:f1:44:64:70:d8:03:
61:a3:f2:d6:e8:91:02:7a:9d:b0:eb:05:f5:1e:eb:2b:76:79:
d8:87:ab:0c:34:cc:84:c9:88:40:30:bc:56:e3:2b:4f:e3:f0:
57:6d:09:81:5c:e4:b2:e9:e7:0c:5e:e1:db:b7:c4:b1:9e:14:
bd:c1:14:1f:06:02:3e:36:23:65:63:b6:fd:32:9d:9d:b0:20:
82:ba:ee:fb:95:ea:62:d7:f3:75:5c:5e:de:6f:d4:b8:61:a6:
32:56:3b:ce:cc:c1:07:7b:84:36:46:9f:d2:1c:3e:63:f3:a8:
3b:9a:e0:ce:b8:ba:16:19:9a:45:4a:24:dd:34:0a:a6:11:92:
ba:4d:54:8c:81:79:a5:f8:c9:9d:df:27:bf:b1:ce:d4:0f:07:
e4:85:28:38:66:46:b4:73:e0:b2:1a:78:20:c8:45:3e:23:bb:
f9:27:21:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:11 2025 by rpki-client