Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/09c48bbc-6b05-30bf-9605-fe4f3101a0d9.roa
File: 09c48bbc-6b05-30bf-9605-fe4f3101a0d9.roa (raw, json)
Hash identifier: 99+e8iJmb1VaY6LTjBWgj+Cz/jwC8DY1ll+1ObAOjmc=
Subject key identifier: 0A:F5:83:55:0B:54:30:96:FC:A5:8A:90:EC:9E:7A:B6:24:A5:9C:33
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285847E094F5FCB6F343DB1D59AD80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/09c48bbc-6b05-30bf-9605-fe4f3101a0d9.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 395973
IP address blocks: 104.134.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:f5:fc:b6:f3:43:db:1d:59:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=fa836b0a-4794-4dc5-9d75-84e7ea30cf85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:16:d7:80:40:ac:5f:c3:f8:da:53:fc:b1:0d:
78:21:f5:1c:f0:da:5d:f3:73:44:f2:57:16:a4:13:
23:ef:07:4c:1a:a8:ea:11:16:bb:8b:30:8f:88:4f:
20:b8:31:91:91:26:13:f9:7e:de:87:bc:1a:c5:20:
f2:d2:bf:34:5a:10:a4:50:9b:70:71:03:1a:c0:6a:
98:a0:64:7a:e7:a0:f6:46:36:99:31:4e:3b:1c:ae:
9c:96:44:a0:8d:f2:14:3d:07:d1:e0:59:2c:3c:80:
f3:aa:4d:54:49:a4:db:92:84:bf:4d:44:91:ac:27:
1f:37:8f:28:55:09:a2:ee:ff:e7:81:ed:d0:fb:52:
1f:6f:2c:c6:52:94:c8:77:c2:c9:13:06:b5:bb:8f:
07:ce:c1:a0:c7:8d:2e:12:10:25:75:63:a4:dc:6c:
95:61:31:1b:72:4b:2d:ec:6d:76:00:51:40:13:60:
6a:11:59:4a:d5:76:25:1c:61:25:c0:86:7d:eb:aa:
a2:16:84:2a:0f:ac:a1:73:c2:e3:5c:a1:01:d8:9e:
9e:61:e0:7a:d2:7e:14:db:cc:85:34:a2:57:9a:11:
41:4c:fd:b8:34:c4:ca:00:9f:d8:1e:b1:de:53:a3:
70:8b:26:37:3e:86:f5:b3:59:5f:5c:e8:bf:29:fb:
31:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F5:83:55:0B:54:30:96:FC:A5:8A:90:EC:9E:7A:B6:24:A5:9C:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/09c48bbc-6b05-30bf-9605-fe4f3101a0d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:ba:96:d5:b9:da:73:07:a4:7c:25:36:b3:83:bc:1e:65:e5:
5e:fc:bd:25:85:50:63:8c:15:f6:1f:91:b3:a7:a0:3c:82:29:
e6:aa:e8:19:19:53:e8:38:67:bd:d2:63:0b:d4:72:0a:47:ea:
47:58:b3:49:3a:b9:13:1b:92:21:23:6d:89:10:51:5b:dd:97:
da:ab:9e:66:83:9a:18:4a:19:ab:ca:ec:b4:0c:f2:04:7a:61:
69:4c:b0:ff:66:b4:69:42:45:63:4a:2a:d7:b7:66:0e:b9:ea:
d0:00:5b:9c:f9:8d:28:d6:e0:2b:bb:ae:db:a3:f5:4c:bc:56:
b8:25:bd:bc:a2:bf:d4:80:58:35:0f:5b:2f:eb:25:96:02:9e:
a2:34:d6:78:1e:a7:f0:4f:e6:7d:4f:ca:2e:35:38:2e:c7:d8:
d2:5c:f0:4f:6d:09:5a:ed:27:24:9d:cc:e6:c4:37:32:47:0e:
41:3a:40:35:62:8d:78:22:fa:d6:d7:4d:d5:10:54:8d:a0:c4:
ea:43:9f:5b:6a:c5:a7:bf:1e:c0:d5:34:e5:6c:cf:35:81:a4:
f2:23:26:a8:61:5a:4f:e1:1a:ce:17:c1:90:be:dd:58:bb:97:
b9:72:3f:8a:68:52:74:ed:c5:36:ee:48:25:b1:75:28:88:04:
88:77:ac:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:19:00 2025 by rpki-client