Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/37abedc4-2900-314b-ad6a-37f15041c34b.roa
File: 37abedc4-2900-314b-ad6a-37f15041c34b.roa (raw, json)
Hash identifier: t1pIRJBKkE3+/D4f3NQI3yTZS3fsY/8UzqbaOXEJ0Fo=
Subject key identifier: E3:B1:F9:55:B5:C7:BA:96:38:E0:82:2B:25:B7:CF:17:AB:50:25:72
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285847E094EE0F09152F9BF3D02818
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/37abedc4-2900-314b-ad6a-37f15041c34b.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 395973
IP address blocks: 104.134.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:ee:0f:09:15:2f:9b:f3:d0:28:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=89463ec0-d9fb-4532-af22-f50e14215741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:77:37:24:00:7d:9c:e9:d6:c2:86:ca:16:a9:
21:8c:c1:12:a0:3e:cb:b8:59:be:b7:34:09:03:bb:
a3:8d:75:5d:b7:b7:c4:6a:60:09:63:3c:29:20:7b:
36:c6:d5:95:63:3b:d2:a0:87:20:e7:f6:75:b1:ef:
fc:10:31:c0:95:91:65:97:16:33:3d:27:02:bd:e6:
43:1c:dd:ef:08:bc:0a:4a:88:7a:e4:38:ba:06:ea:
e4:c9:e4:97:b6:bd:a2:d1:dd:7f:37:56:0f:24:8d:
bd:0a:9f:52:15:34:02:91:88:81:04:f3:db:b6:e8:
25:28:8e:ba:33:13:e7:de:d9:52:2e:ca:59:3b:d3:
6f:27:3d:7c:24:17:26:66:f8:08:ae:f4:73:f3:a6:
b8:5a:1e:84:41:a0:0c:85:79:4a:87:98:83:92:16:
00:05:a8:8a:fa:51:05:09:f5:19:36:da:56:da:c1:
cf:78:2c:4c:93:76:df:4a:4e:e4:f0:bf:42:5a:90:
9b:14:23:44:30:44:74:43:84:b5:0b:07:33:b3:8f:
03:34:ca:37:84:91:0f:5b:86:f7:3d:02:50:db:81:
93:ed:86:c2:58:17:da:9e:82:8d:96:1a:fb:ba:27:
ee:91:55:9d:43:7b:d8:93:dd:7e:fc:4c:db:e2:3f:
f7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B1:F9:55:B5:C7:BA:96:38:E0:82:2B:25:B7:CF:17:AB:50:25:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/37abedc4-2900-314b-ad6a-37f15041c34b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:1f:06:ab:c3:3b:d4:c5:a3:16:6b:bb:43:54:bf:7c:32:95:
c8:9d:91:c7:54:ad:57:a3:c2:08:81:88:13:50:d6:0c:40:6e:
b7:26:4e:d6:6e:ec:0c:ab:63:fe:94:fb:e2:98:4d:27:1f:8d:
2a:9b:b1:eb:03:f1:91:b4:85:5c:80:f1:c1:64:0b:a0:39:60:
48:64:30:f1:e5:34:38:9f:c1:43:4c:80:83:eb:c0:50:81:ac:
44:7d:42:37:cb:a2:30:c5:83:91:ea:dd:61:7c:f8:b2:4b:fa:
39:2f:b4:7f:ee:be:b4:e6:61:4d:cc:83:d3:86:10:17:2c:6a:
5c:74:78:8b:a5:8d:84:98:b1:59:b3:99:fe:3f:72:5a:a3:c8:
e6:66:21:a6:77:6e:ca:7e:9d:61:5a:f9:bf:14:77:9f:ea:17:
e9:d8:ed:f3:3b:ab:a0:b2:03:21:e1:a2:24:dc:2e:0e:90:61:
ea:50:90:e6:2f:d5:44:bd:38:d2:73:ca:3c:02:8a:30:67:03:
2a:a7:0f:94:30:ad:bd:ab:47:a4:ac:cb:71:5e:fe:17:4d:7b:
24:27:4c:46:ac:22:d0:c2:14:11:97:54:13:87:a6:0e:76:9a:
8f:cb:16:17:38:ac:fe:ba:11:be:58:53:19:94:24:de:cb:25:
a9:e3:fa:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:08:42 2025 by rpki-client