Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e6743d3b-3339-3b65-b0f1-f63c0bbd2096.roa
File: e6743d3b-3339-3b65-b0f1-f63c0bbd2096.roa (raw, json)
Hash identifier: +mJJ+yTHkeXkWIz1OPpPk6lDjnNoVcE7d5UhZ1jqQ9o=
Subject key identifier: 55:D1:BD:B0:AA:DA:75:2A:F7:5E:5D:CE:89:B7:C3:16:A3:3D:C2:AB
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B1F64C4CE5AED4C1B314E180
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e6743d3b-3339-3b65-b0f1-f63c0bbd2096.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 41264
IP address blocks: 104.132.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:4c:4c:e5:ae:d4:c1:b3:14:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=8d8eaa85-3199-4ff2-be88-21aa17537091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ab:41:f7:aa:be:e8:6c:cc:2a:4a:f7:69:1e:
5e:76:94:75:c9:e6:79:d3:b6:c8:5a:de:df:f4:68:
51:62:03:74:b1:2e:41:5d:91:c9:d1:fb:9a:8f:3c:
2a:2f:22:a8:52:d7:5c:08:c4:dd:b7:d4:3d:e6:ba:
97:d6:a5:93:7b:a4:fc:ae:65:bc:a2:06:b6:26:7d:
99:ec:b3:e3:cc:3f:70:2a:2f:89:59:20:d8:ef:ee:
43:27:68:47:78:cb:8e:77:0f:be:c5:4b:8c:c8:40:
71:f4:a4:46:b4:fe:d2:9a:d6:ba:50:76:ca:97:d1:
cb:c2:1f:7d:1f:23:7a:c1:8f:dc:cc:fe:aa:5f:de:
3a:24:69:c0:45:b6:d1:62:04:03:f7:63:c4:b1:4e:
15:79:a4:89:b8:d2:8d:3b:0f:6e:6a:56:0e:49:09:
73:24:f5:42:5f:fa:5d:be:6a:5b:58:9d:38:9f:c6:
21:c3:e9:ee:0d:a9:11:dc:71:d2:e4:88:e7:45:ae:
17:b9:f7:2b:43:b1:b6:71:1f:0b:2d:c2:3d:39:1a:
8c:1b:2b:9a:98:f0:55:20:cb:43:a3:fb:48:58:01:
e4:b1:27:9f:17:2d:43:61:5a:28:6c:95:b5:3e:9b:
d7:8a:98:1d:50:86:37:00:45:ee:47:63:37:19:98:
7a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D1:BD:B0:AA:DA:75:2A:F7:5E:5D:CE:89:B7:C3:16:A3:3D:C2:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e6743d3b-3339-3b65-b0f1-f63c0bbd2096.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.132.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:8e:5c:e6:b9:cf:60:91:cc:7f:51:40:c8:0d:2b:ec:31:a8:
ab:2f:a3:70:fc:3d:be:a7:40:7f:c3:bf:a4:74:53:89:40:08:
be:2a:cc:d5:89:36:d7:c6:64:ef:f9:8c:d0:b7:33:0e:80:b9:
9e:52:13:05:e8:61:d8:b7:6b:b1:dd:61:bb:26:b6:7d:dc:83:
c0:64:56:8a:47:43:9d:33:f3:6e:64:a4:55:b3:70:22:7d:50:
41:34:d5:a5:04:6c:99:b4:ce:92:b6:d0:99:3e:c5:a4:73:e5:
14:62:1b:af:36:d2:f1:1c:46:d6:39:cd:0e:85:1a:7e:81:e5:
1d:9f:9b:ec:1f:6b:ca:78:59:87:47:a2:0c:c7:c2:b2:c1:de:
6c:94:6b:ec:c0:c1:6e:45:6e:1d:0c:50:22:2c:ba:b0:80:5e:
c1:54:e9:94:58:83:33:43:e6:39:7a:23:f3:61:e3:60:20:40:
51:40:9b:12:e4:03:57:e5:03:6b:a0:50:66:eb:b3:d0:da:c6:
c6:28:15:0b:02:42:0d:98:0c:4b:79:92:6b:0f:8e:26:e6:7d:
d0:fc:61:1e:4c:d6:7d:05:fd:bc:6c:c2:ae:eb:a7:b9:c3:d9:
05:39:b7:68:0e:d5:d2:fe:b6:0a:2a:80:d2:7e:38:5f:c7:0d:
dd:11:13:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:36:32 2025 by rpki-client