Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3d8926f1-40ac-3315-8a5a-b55e9b202869.roa
File: 3d8926f1-40ac-3315-8a5a-b55e9b202869.roa (raw, json)
Hash identifier: DvCzyCqQ3w5jA6PiREMKZiip+CCC2Fg9QXCVzCcua5A=
Subject key identifier: 2D:BF:61:84:74:E0:FC:5E:21:45:44:BC:7C:AB:0A:66:12:FF:93:0B
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285847E094E1D7B376C1F44B3E1780
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3d8926f1-40ac-3315-8a5a-b55e9b202869.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 15169
IP address blocks: 104.134.184.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:e1:d7:b3:76:c1:f4:4b:3e:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=f1ee6294-b66e-4db8-abdd-72dcb442a248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:71:3d:8e:00:93:e3:17:d6:1d:14:bc:cb:04:
68:63:a8:9c:b0:85:ec:4b:07:bf:ef:fb:cd:8c:02:
47:dc:46:bb:25:01:79:8a:8b:c1:7c:ab:64:7e:1c:
ce:fd:61:e4:33:34:f1:12:ed:7a:b8:8d:b5:92:c9:
a5:ff:60:db:43:c2:4f:e5:f0:e8:9c:a1:55:30:d9:
b9:46:0c:22:73:a2:05:5e:3c:c5:0c:f0:35:69:cb:
bc:b5:fb:45:0b:06:c7:cc:7e:f6:37:b8:82:01:85:
16:05:8c:46:cd:9a:9b:1e:b3:8a:5d:41:88:cc:3d:
7c:ca:5d:14:4d:c9:60:a0:cb:e6:45:7f:5a:58:07:
21:be:77:b5:74:25:b8:0c:4e:9a:9b:c5:e7:fb:8a:
b0:6d:18:78:cb:91:d4:d0:ce:4f:77:84:ee:27:b1:
ed:0d:21:a6:42:91:e2:6d:5b:9c:1f:6b:9e:78:fc:
26:da:8f:19:b8:52:b7:9d:35:09:a8:24:88:e1:6f:
5a:d5:59:d9:73:74:55:c1:d0:d4:58:9b:60:28:e5:
59:a3:8b:78:cf:69:fd:aa:52:2c:62:b8:5f:bc:9d:
a7:0d:0a:47:aa:ef:87:89:82:cd:aa:2f:de:fd:67:
4a:a5:69:0d:c4:51:49:37:de:30:bb:70:c2:db:a1:
bb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BF:61:84:74:E0:FC:5E:21:45:44:BC:7C:AB:0A:66:12:FF:93:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3d8926f1-40ac-3315-8a5a-b55e9b202869.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.184.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:3d:23:d2:1b:ba:68:3e:cb:a6:41:e8:36:2c:0d:72:dd:c5:
ff:ee:59:f3:61:bb:ba:92:6d:0b:72:7c:8a:f2:57:76:72:ca:
e9:f3:e5:6c:fa:18:98:22:14:ca:6a:96:70:26:10:d6:46:a0:
48:e8:57:39:59:31:b0:12:44:63:8e:2e:d0:9c:8e:d2:38:42:
8d:df:3d:b0:c0:b5:ab:db:23:16:0f:e0:4d:e1:9e:8f:65:23:
31:20:c0:82:81:40:3d:d2:da:c8:79:b8:5e:6a:87:d3:a0:97:
c2:bf:53:d8:38:55:bb:eb:46:51:a8:00:f3:3b:37:19:1a:bb:
b0:43:46:5f:8b:e3:0b:b6:31:3e:4b:58:28:15:bc:7b:a9:70:
4d:21:a1:24:7a:83:d0:c8:7f:37:d4:3f:03:78:c9:fd:ff:7a:
b3:ba:9c:f2:77:99:92:fe:33:6f:87:a1:00:12:64:f0:54:ec:
a1:be:b5:70:d2:7b:e9:c7:b9:0f:e3:f4:74:1c:98:60:8b:33:
b9:2e:92:ab:05:ec:a4:3b:ff:fe:ce:9e:6a:0e:93:b7:a5:39:
b8:ba:df:73:3f:9a:cd:89:aa:cb:41:38:0c:6c:9e:88:b5:50:
e6:5a:52:3c:34:7b:65:5f:9a:1d:e2:76:e4:87:40:11:09:64:
2e:f5:1b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:19:22 2025 by rpki-client