Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e3bd7f28-8ed2-3d0d-b173-0fd39665182d.roa
File: e3bd7f28-8ed2-3d0d-b173-0fd39665182d.roa (raw, json)
Hash identifier: HkV/oOwXlIZ3LI48aKvpLu2Qh9IEiGps18Tc0/2Cxd4=
Subject key identifier: 12:35:A5:08:BD:0B:22:3C:A6:9E:98:8A:D5:A3:DA:7F:05:F0:EC:7B
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0DBB6F0A8A4156F9F9440
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e3bd7f28-8ed2-3d0d-b173-0fd39665182d.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 395973
IP address blocks: 104.134.132.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:db:b6:f0:a8:a4:15:6f:9f:94:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=a4c56cc2-7403-47f8-96e9-a1f99f2ba94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8f:01:5c:d4:5d:01:dd:53:22:9f:80:7d:73:
50:c3:43:a5:06:7d:a8:9f:29:82:9e:a2:76:ec:f1:
c6:e0:52:d0:69:42:12:f7:d0:ad:8b:60:ef:30:dc:
79:12:85:79:4c:e7:76:5f:4e:d0:ee:d1:45:03:71:
82:18:ac:d2:ee:23:00:5f:01:c3:09:a6:78:f8:82:
f0:f3:07:08:5d:e6:9d:0a:ba:7f:5c:76:27:03:e5:
98:a6:1f:6c:53:1e:1f:26:b6:db:ae:8d:7b:b4:39:
0f:a3:d2:4d:f5:2c:75:79:f9:1e:87:a3:a8:c3:db:
ac:6f:2d:58:0b:7f:65:a3:49:66:d1:4f:09:71:9e:
c8:07:1d:46:88:2a:bb:1b:6e:9d:e1:77:a9:21:b1:
5e:04:cc:8f:70:a6:3b:eb:88:1f:c9:d9:04:a6:a1:
0d:6b:bb:27:fd:31:58:e0:28:fa:68:38:2d:06:c2:
2b:80:81:25:a0:e9:bc:52:b1:37:24:c6:bd:cb:2f:
83:31:47:04:86:8c:dc:92:ab:4c:37:65:42:ad:86:
ab:a1:8c:95:76:56:31:25:84:93:e8:ff:25:10:b0:
9c:24:9d:91:c7:74:d3:38:e9:03:ad:2c:dc:c9:79:
ec:ce:82:94:0e:2f:67:9e:e1:70:72:88:3c:b8:e5:
36:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:35:A5:08:BD:0B:22:3C:A6:9E:98:8A:D5:A3:DA:7F:05:F0:EC:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e3bd7f28-8ed2-3d0d-b173-0fd39665182d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.132.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:0a:27:52:a6:84:ba:a0:69:26:ad:68:0f:29:8a:ed:79:20:
ee:46:79:77:94:63:3b:b4:4c:c0:d3:39:11:d4:ca:6b:86:84:
ae:64:4d:6b:4e:fb:e5:d5:e1:e6:fc:42:c0:55:e1:a0:31:04:
be:1c:67:e4:29:86:ff:63:82:e8:d4:8e:64:c3:b9:1a:76:07:
8f:20:6c:8d:c4:29:2f:8c:ae:31:96:cf:1d:d5:15:c4:c4:2a:
78:81:12:4d:66:c4:be:ec:e0:30:17:66:6a:e1:e2:75:d6:7b:
7a:6e:37:7a:95:72:a5:38:a7:7d:3f:d2:07:0c:e8:e4:f2:15:
1e:0b:3a:74:f8:40:2b:0d:00:ba:aa:66:c6:47:4f:e9:68:a1:
7a:f7:84:42:05:e6:fe:3c:ce:76:25:13:8e:b0:5a:5e:05:97:
ea:18:7b:3f:db:fe:d1:fd:3d:fc:78:aa:97:59:36:ba:8e:1e:
16:df:d1:64:9d:e4:8e:38:e1:98:03:d2:55:fd:a6:b2:f4:e3:
c6:a7:1f:20:62:12:cc:56:35:cc:1a:02:05:a5:6b:6e:50:c0:
71:51:b4:92:6e:a9:80:5a:17:d7:4c:a8:c7:1b:5e:bf:ae:ba:
c4:c9:7f:02:76:86:93:f9:56:45:43:e0:a2:55:9f:28:b9:c5:
5f:df:b6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:08 2025 by rpki-client