Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f137ed46-f5b9-37fc-a9f0-603d8aa21592.roa
File: f137ed46-f5b9-37fc-a9f0-603d8aa21592.roa (raw, json)
Hash identifier: At4gNsF8wWpIXy9JCWb1DEdutYGHscDYSTbxQnl0wD8=
Subject key identifier: 17:A4:F4:71:6D:57:8B:7D:3B:E7:69:A5:CD:6B:7A:30:EE:7B:F6:B6
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0E55412B31CCAB167FE40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f137ed46-f5b9-37fc-a9f0-603d8aa21592.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 15169
IP address blocks: 104.134.156.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:e5:54:12:b3:1c:ca:b1:67:fe:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=cef40e92-a6eb-4a23-9b6d-d6410b07d4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e0:0e:e7:17:4b:51:02:2a:13:e8:a5:21:ad:
d8:6c:0f:ac:de:f2:8a:f9:47:fe:40:2f:67:13:1e:
c4:a8:74:15:02:6d:17:68:fa:26:55:95:99:4d:8b:
54:34:fb:ca:d5:af:89:8e:e2:e4:58:6c:7a:eb:11:
3a:76:70:91:b0:95:35:32:4d:0c:3a:cd:f3:a9:26:
9c:89:cb:e1:b0:a6:3e:80:ab:ef:1a:d2:8b:12:0f:
cb:74:29:8c:ae:cb:68:24:6c:c1:6c:a8:bb:cb:47:
96:03:03:5e:1e:61:db:70:e0:35:22:1e:40:ad:dd:
f6:bd:b0:6c:44:02:04:f0:54:45:e1:d3:9c:83:a7:
4f:d3:af:d4:5e:7b:c4:56:2c:7f:4b:87:61:f4:6d:
62:4d:c3:f5:3a:2d:89:e8:f9:03:1c:70:24:02:ef:
71:c2:c9:a6:b6:09:78:a2:67:a8:04:15:76:06:a5:
62:c9:85:4e:f9:8a:29:6a:90:4b:9d:cd:c0:23:21:
6c:83:77:0c:98:e1:5a:3a:6b:e2:c9:77:53:c2:1e:
60:c9:9a:a1:05:d9:cd:7a:2c:26:89:6c:f7:5d:fe:
4d:3f:2b:15:83:2e:a5:32:96:4e:dc:94:11:48:0a:
60:6f:0b:6b:a8:a5:a5:d2:14:9d:7f:95:89:85:23:
fc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A4:F4:71:6D:57:8B:7D:3B:E7:69:A5:CD:6B:7A:30:EE:7B:F6:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f137ed46-f5b9-37fc-a9f0-603d8aa21592.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.156.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:fb:1c:96:27:e0:46:78:3d:49:85:0e:51:61:65:04:43:84:
4c:95:8f:60:a2:35:86:f2:c9:19:f2:65:55:de:ac:75:13:7f:
44:94:6b:e2:cc:a3:c2:7f:ac:73:bd:24:56:3f:d1:a8:a7:e9:
69:48:b5:21:22:44:40:0d:ff:c0:06:12:52:32:2d:d0:18:4d:
c2:9f:27:8d:5a:20:8e:4f:22:97:9f:bc:97:e0:d6:a1:b5:59:
9b:3c:0a:d0:d2:cf:59:a5:51:4a:cd:b4:dd:b4:5d:9a:b2:c3:
d0:80:d9:3e:da:a8:5c:59:a1:df:a0:7f:7a:6d:d5:6e:5f:b8:
11:cf:2e:aa:1d:bb:07:96:3a:0f:8e:11:13:24:a3:0e:40:96:
3a:ac:7a:81:93:da:e1:12:22:ae:d9:28:05:d3:bb:3b:4b:5a:
35:8b:00:06:a6:03:1a:fd:bc:b3:42:22:cd:17:cb:ee:73:13:
eb:be:69:16:77:28:e0:ed:75:82:9f:2b:51:15:10:07:9c:4a:
b3:34:d6:d3:01:9d:9a:a4:93:25:5e:8e:3a:6c:db:ce:ea:e7:
ec:45:29:f8:c0:8a:72:35:e4:7d:16:db:bf:b2:95:0c:6e:8f:
0b:78:6f:93:af:bf:44:2c:44:3b:27:d5:f4:48:1d:d9:76:8c:
0b:c8:c4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:40:46 2025 by rpki-client