Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e06d1592-2552-3da4-965f-8a0eba0a4a3e.roa
File: e06d1592-2552-3da4-965f-8a0eba0a4a3e.roa (raw, json)
Hash identifier: 8F5D/fINmKtmc7ibQJI21fZyuG2s5zt2zZ+PtBprpjM=
Subject key identifier: A4:F1:6F:DD:79:6E:DA:D3:77:E2:F0:A5:E2:14:CF:8D:98:68:E4:91
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B1F64BF2E2509987FDB4D300
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e06d1592-2552-3da4-965f-8a0eba0a4a3e.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 41264
IP address blocks: 104.132.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:4b:f2:e2:50:99:87:fd:b4:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=7d354121-38b1-4da8-99a6-dfdc3a82efe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d8:71:bc:d0:e5:ee:1d:2e:26:52:3e:ff:da:
18:e7:21:4e:2c:6c:bf:3a:7b:02:70:ee:d1:3e:50:
4b:e8:d0:c9:f7:90:98:78:cb:7b:8a:8a:cd:17:ac:
28:da:78:aa:f3:78:c3:7c:d0:70:da:0f:d8:8b:3b:
da:b3:ff:bf:67:49:63:d3:65:a8:4a:bd:06:06:01:
d2:18:22:69:e3:7f:4b:5d:be:cb:c5:a9:12:83:13:
03:cf:d4:62:7e:b0:d4:5f:1c:e6:b4:1c:07:5e:08:
32:27:96:42:c7:94:91:a9:ba:c7:83:13:e6:4a:b3:
e6:bd:31:e1:fe:af:bd:66:ee:d3:1f:dc:e8:ba:23:
6c:5a:60:3d:fa:29:92:8c:49:37:da:41:b6:67:58:
80:2b:3c:e6:05:00:0a:79:15:35:93:3c:01:f3:4f:
6e:cb:aa:fc:f0:b7:93:53:6b:c5:a7:e1:20:44:a7:
11:f2:b6:a9:83:51:a6:77:9a:e3:1e:5d:a0:25:7d:
a5:64:b5:a0:ab:b1:b9:5e:fc:90:ba:30:88:2c:a4:
5e:c6:a3:9c:b2:d1:89:79:87:d2:e2:1f:02:4b:8f:
38:41:b9:f1:e6:c7:c7:8d:2b:73:5e:7c:0c:1d:b9:
13:fd:cc:1d:7b:58:4e:2a:ca:ef:5c:30:9c:d3:fc:
ec:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F1:6F:DD:79:6E:DA:D3:77:E2:F0:A5:E2:14:CF:8D:98:68:E4:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e06d1592-2552-3da4-965f-8a0eba0a4a3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:f2:cd:78:27:d5:e0:84:e6:cd:86:66:fe:d7:09:f0:d8:62:
eb:37:cf:05:6c:1d:f7:95:2c:61:7e:06:b6:97:7c:4d:61:ac:
25:47:94:14:09:ec:41:42:d8:fb:88:2d:90:33:06:1f:31:d3:
55:5c:3a:71:1f:36:93:1a:cd:7b:4f:d4:44:01:3e:81:33:e6:
a8:a6:b8:d9:3d:d8:8a:b9:a3:fb:c9:26:ad:1a:a4:e7:6e:be:
22:dd:61:27:2a:da:97:03:47:8d:95:de:74:4c:78:13:51:1f:
ee:2f:ca:7e:11:ca:b4:0b:73:72:2e:9e:1e:f5:6f:7b:45:2e:
61:99:99:05:e2:0c:18:f0:fe:80:de:eb:b6:ce:3a:2e:0a:d5:
a5:70:19:85:10:8a:c9:e7:dd:55:94:18:1f:2a:4e:eb:e5:14:
e5:e2:e8:99:9b:69:ee:f6:a8:38:f6:22:f1:aa:53:88:e2:ef:
1b:e3:88:7d:b4:3c:c4:9e:6a:b1:12:c3:42:c3:94:ff:9c:0c:
7a:a4:ab:14:cd:33:85:b1:dd:e5:ca:4e:a8:65:70:f1:3c:c5:
f9:59:bd:e2:08:6b:04:5c:b0:dc:e1:1d:7a:b2:14:50:1d:25:
ca:7b:a5:29:9b:74:40:ae:db:d8:bc:ac:40:a8:15:ff:0f:5e:
e2:50:54:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:55 2025 by rpki-client