Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f57a898d-e398-3bd2-a198-5fb554e9a355.roa
File: f57a898d-e398-3bd2-a198-5fb554e9a355.roa (raw, json)
Hash identifier: UtSSER0gugLJn+aLWXAP/dUP3EYSunvPUeIHzM0IeyM=
Subject key identifier: E6:39:AA:A6:ED:51:F7:CB:1C:EE:F8:62:B6:71:01:38:6B:D0:F9:86
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0EA8F9889ABD49DBFF680
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f57a898d-e398-3bd2-a198-5fb554e9a355.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 41264
IP address blocks: 104.133.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:ea:8f:98:89:ab:d4:9d:bf:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=37a0ee5c-e2fb-43f1-ad6b-972a7ef118ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e4:ed:29:ab:2e:24:8c:53:16:29:71:07:e9:
c6:2f:9f:9b:26:95:8c:b1:c5:44:fa:e5:98:93:7b:
26:58:20:db:7a:1f:9b:59:2b:7b:80:44:3f:50:a6:
21:f8:dd:a3:f5:0b:b1:d8:5a:f0:30:80:29:00:68:
2b:32:4c:fe:8a:6a:32:bf:83:69:bf:4a:36:f3:d0:
e5:a8:85:34:af:ec:aa:f9:df:2a:23:59:a1:c1:5d:
5e:e7:1c:67:8f:6c:35:5b:83:5c:05:0c:43:d3:32:
35:9d:7f:5d:a6:ff:4d:ff:e4:38:0e:54:c6:95:87:
72:23:c7:65:1d:7d:94:e2:36:5c:d7:bb:d0:ee:b8:
2d:36:8b:d5:fc:44:87:f9:c5:f5:bb:3a:31:e3:4d:
02:4f:5f:a7:b5:d7:ea:fc:82:d2:e8:1a:31:4d:c3:
19:87:32:ac:34:74:e6:ba:b8:34:bb:0a:bc:b3:b8:
51:59:9a:76:c3:e5:b3:95:12:08:c8:53:8b:a8:b9:
3e:69:66:ac:d8:34:8c:78:a0:c1:ab:a0:d7:a7:5a:
97:f7:75:50:d4:12:9f:98:a2:39:35:eb:2e:33:c9:
12:20:a5:f8:05:9f:29:fc:ab:4b:65:a2:48:60:ce:
61:2b:9c:3b:3e:71:65:72:9b:d1:ed:3f:ba:0e:ef:
35:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:39:AA:A6:ED:51:F7:CB:1C:EE:F8:62:B6:71:01:38:6B:D0:F9:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f57a898d-e398-3bd2-a198-5fb554e9a355.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:95:db:fc:1b:1c:4d:39:25:c9:a7:7e:6a:d0:21:3a:69:24:
d4:90:3b:ad:75:d6:85:16:1e:95:be:8c:e1:51:07:e6:1b:9f:
95:fd:93:9e:20:63:0c:ee:6b:ec:f8:c0:d5:09:b1:77:9c:9a:
f5:e4:29:3d:7e:6e:16:c8:c7:1c:42:0b:33:d0:92:6f:f7:1e:
bc:36:bc:83:4b:bc:27:d5:33:ce:1c:81:f4:73:91:37:b2:eb:
46:dd:1f:d8:1d:d0:09:e8:35:6d:66:c5:60:cc:12:0d:36:5e:
1d:8c:07:b0:a6:74:01:88:5c:4d:1f:f1:01:43:02:7a:a1:71:
86:5f:96:09:ad:ca:3b:2c:1a:6c:bb:5f:43:bd:de:44:f7:6f:
75:0f:61:fd:86:f9:a2:e0:ef:22:8c:77:a7:06:82:8d:b8:bc:
f1:26:51:29:10:ec:77:d2:bf:03:06:6d:b6:34:7d:61:02:9a:
08:d7:0d:58:83:01:8d:69:a5:49:50:9b:13:cf:96:79:08:0a:
24:64:96:88:ea:3a:eb:c5:2d:55:98:46:44:08:9d:8d:c5:11:
50:60:e5:bd:5c:9e:6b:58:88:fd:a1:6c:e4:25:b3:71:30:df:
51:24:24:11:85:19:61:01:64:f3:52:ad:7b:cd:95:34:78:27:
8e:6a:d9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:38:14 2025 by rpki-client