Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f1045efe-d951-3037-8b46-487104947b32.roa
File: f1045efe-d951-3037-8b46-487104947b32.roa (raw, json)
Hash identifier: dyIxFLsxhFTj5mBCAze6KdpfN3feesy0mATnrXDGxO0=
Subject key identifier: 1D:BA:D6:73:9E:7C:57:2F:07:7C:51:83:CE:5D:90:D3:D1:E5:A7:79
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0F7C286FC8D47EF685400
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f1045efe-d951-3037-8b46-487104947b32.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 15169
IP address blocks: 104.134.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:f7:c2:86:fc:8d:47:ef:68:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=5e7518f9-0091-42b3-a640-633274ac7a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:33:2f:9d:ab:f8:c5:54:37:59:d1:bc:9f:fc:
18:51:7b:8b:80:c3:fd:1a:17:64:62:ca:22:aa:cc:
de:b4:95:c8:96:97:d5:20:27:e2:88:d7:66:9c:36:
c7:c0:c6:0e:98:9f:ec:72:7b:b3:9c:47:10:5c:4a:
33:db:1a:2e:89:c6:b0:29:61:56:2f:32:41:f5:ad:
e7:c2:79:7d:eb:5a:71:cc:b3:2b:ab:9d:d3:79:8d:
d3:e7:22:04:78:93:f4:91:b0:3e:4a:fc:aa:34:04:
b4:c6:95:98:7a:8f:ca:81:35:6b:c1:01:79:be:70:
6a:b0:bb:22:4a:3e:a8:46:bf:a2:51:60:2a:8b:b0:
8a:47:ef:8a:fc:fe:17:bf:88:2e:b4:9f:b3:28:e1:
db:c6:cf:f7:cf:07:e6:7e:20:9c:7b:e4:bc:99:88:
1a:c4:9e:a1:2f:b2:a7:34:c0:2e:8d:83:e2:7a:d3:
02:8b:83:cd:eb:8e:7f:9a:32:8c:dc:0c:7e:d4:c2:
10:3b:42:f6:63:ff:f3:b4:02:d1:07:27:a6:17:34:
70:1f:d6:8d:3c:72:73:6c:c5:7c:91:c6:c3:6c:a7:
be:1c:22:ed:26:c3:42:c7:b9:94:e4:52:3f:74:1c:
26:d2:53:48:cc:93:cc:be:b5:c9:db:ff:2d:f0:69:
a9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BA:D6:73:9E:7C:57:2F:07:7C:51:83:CE:5D:90:D3:D1:E5:A7:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f1045efe-d951-3037-8b46-487104947b32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:06:ac:0f:65:57:56:4c:75:6b:7a:c5:95:4f:ba:b6:c5:2c:
2d:a7:91:74:84:44:20:e6:8a:1d:a1:67:67:19:8e:5c:ca:cf:
13:0b:f0:ea:60:40:17:18:f1:3c:4b:c5:a0:ca:74:c0:52:5b:
d1:e7:9a:46:84:8e:32:b2:25:95:d8:94:7a:27:92:9e:3c:53:
8e:a5:ac:c3:fc:9b:ae:00:af:4d:56:c1:65:3d:bf:78:81:34:
29:63:94:6f:19:30:22:f1:6a:23:c3:f0:9c:e9:85:37:d1:0e:
3d:46:2e:1d:e4:de:b4:87:50:2e:bc:1a:fb:ac:a6:52:ed:8a:
e2:9b:65:6f:17:42:dd:bf:d5:71:b9:97:89:1d:17:9d:40:9b:
70:ad:fc:e8:68:0d:56:f5:5d:2a:b1:64:2f:12:7b:8a:b1:ab:
54:1f:25:ab:98:f0:21:d4:4e:fc:d7:23:7e:55:0f:6f:e8:ee:
37:d1:07:c3:5c:5c:89:11:d5:ba:aa:14:d5:1f:f1:b9:0f:41:
df:a7:ed:18:4e:7e:91:d4:27:43:34:f6:8c:a3:31:3c:73:b4:
da:78:17:b7:fb:55:28:d3:eb:8e:f8:06:e2:7d:a9:28:e0:2f:
ce:fc:b4:14:ff:41:b4:57:3b:79:ba:81:69:9b:a7:cd:b2:ba:
6b:bc:42:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 09:01:48 2025 by rpki-client