Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3cffae40-6261-35ee-9ff9-6de3f6ee398e.roa
File: 3cffae40-6261-35ee-9ff9-6de3f6ee398e.roa (raw, json)
Hash identifier: DFwq5JYCCkTZKM62z0vvAD+gzBbz+K15j3dRF907C34=
Subject key identifier: 40:14:1D:28:EB:EE:17:68:A8:13:FD:5D:94:08:A2:63:36:97:08:3A
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285847E094DDF83362D67512E0F600
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3cffae40-6261-35ee-9ff9-6de3f6ee398e.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 15169
IP address blocks: 104.134.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:dd:f8:33:62:d6:75:12:e0:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=01c2db42-05be-423e-8725-5c082c637948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:25:8f:52:43:a2:76:37:28:7b:ab:a4:9b:9d:
0a:88:64:b2:5e:ac:fc:3d:95:a3:fa:5b:a7:81:d2:
49:ce:4d:85:91:83:af:38:31:6c:c8:dc:78:f7:77:
3c:bc:99:6b:a3:52:8b:c0:1e:ad:ee:43:34:e8:63:
54:99:9e:67:8d:89:d0:2a:f1:3e:48:3c:9d:0b:0f:
a8:63:c5:a7:54:e2:35:aa:03:c4:96:fb:ef:3f:96:
20:57:6d:62:e6:10:9f:d6:eb:20:53:4a:c0:a2:d0:
9c:24:ef:77:b7:fd:84:08:da:25:85:fe:bd:b1:23:
8e:d5:8b:b9:6f:bd:1a:10:92:fe:e4:23:e1:5f:11:
4c:da:ce:97:70:0f:0c:28:fc:87:f9:a4:cb:16:b5:
ce:ea:e8:0c:1b:c2:e3:64:9a:bc:33:08:a7:75:a1:
4c:f2:08:0d:bb:ec:9f:19:5a:33:cf:70:83:7f:8c:
23:51:eb:99:3a:d4:d7:d0:ff:8a:76:2e:d3:f6:f5:
59:7a:8d:c0:8e:84:a0:31:4b:84:f8:2c:c3:02:5c:
31:87:04:d5:5c:74:a5:c2:b4:80:94:06:ff:7e:b6:
46:b6:d7:5e:21:24:c6:6a:4a:3a:d2:0d:2d:f3:7d:
aa:31:68:78:02:e7:85:9e:9b:17:63:60:65:30:ab:
89:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:14:1D:28:EB:EE:17:68:A8:13:FD:5D:94:08:A2:63:36:97:08:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3cffae40-6261-35ee-9ff9-6de3f6ee398e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.244.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:9b:cf:78:d5:7c:c1:38:ad:3f:7a:87:e0:c7:0d:a9:df:84:
78:df:3b:6b:7d:4f:ba:bf:a6:22:ca:57:ea:21:bd:16:c3:cc:
38:3b:32:ad:b3:e3:2a:6e:a2:4d:3a:45:fe:ec:1a:18:0a:ad:
3a:77:53:bc:6c:41:b8:59:77:8e:79:5f:74:72:6e:2a:20:09:
a2:60:51:60:fb:4e:ab:33:1b:82:81:3f:98:20:c7:42:3c:45:
0a:00:5f:4c:30:71:a2:f1:44:0b:20:59:18:9b:05:e8:d0:1f:
47:5b:f2:ae:59:78:39:b4:23:ea:63:16:84:15:37:ff:51:c6:
cf:87:c2:c7:48:03:fd:30:a0:65:8d:1e:31:13:dc:3c:9d:51:
41:d1:75:f5:81:0f:4e:b0:12:af:06:14:96:d1:b2:f3:78:ee:
ba:c7:f1:0f:77:27:41:b9:45:79:9b:d7:17:47:67:21:1e:b4:
f4:c8:07:6c:2b:96:4f:aa:d9:8a:7c:1f:59:cb:22:a5:9d:ff:
4d:87:25:da:f6:85:5d:67:a2:28:b4:54:b0:bf:91:b8:16:b3:
46:c7:56:e6:51:30:23:6a:00:e6:ad:66:69:e9:4e:17:c8:40:
60:87:11:e0:04:0e:a9:21:97:63:3a:06:3d:2a:fe:ef:6c:5b:
6e:46:2a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:16:28 2025 by rpki-client