Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4add4991-07f1-3fc2-8171-b1795c3f31f0.roa
File: 4add4991-07f1-3fc2-8171-b1795c3f31f0.roa (raw, json)
Hash identifier: 63jLK5dhES4p95lHcsAYDdF3HRPLWXGIHSVlvBQvh30=
Subject key identifier: 81:D0:BD:48:04:AA:2A:11:46:3E:38:B4:7D:1F:CF:BD:67:22:CF:19
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285847E094F33F317F8DCC8FA55C20
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4add4991-07f1-3fc2-8171-b1795c3f31f0.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 15169
IP address blocks: 104.134.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:f3:3f:31:7f:8d:cc:8f:a5:5c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=833b0fdb-1402-4059-a51b-82bdce3828bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:48:1b:dc:e3:02:67:39:55:47:dd:3e:fa:25:
a9:7c:9e:a9:54:da:8d:2f:be:eb:ef:79:de:c1:7a:
01:af:cb:e3:52:fc:8c:b3:c8:78:6d:76:95:29:56:
19:a2:ce:86:36:20:ef:da:71:dd:6e:00:0e:40:b0:
d6:48:28:3a:39:6d:10:6a:b5:27:77:b9:42:4b:f9:
b4:65:b6:91:5c:fb:39:04:6d:20:af:a9:32:df:19:
4f:eb:46:cd:bf:27:ed:9b:44:cb:e2:15:51:fa:4d:
60:78:c3:3f:1e:47:ee:3a:09:e7:27:a6:e9:fc:a0:
ea:35:f0:f8:c1:f3:f8:ed:41:b6:6d:1a:bf:de:53:
02:3e:fb:80:0d:12:8a:c2:5f:4b:a8:9d:0b:30:d3:
7d:42:95:c7:f2:5d:f5:58:30:76:98:76:ff:f4:02:
4b:35:eb:4f:84:3d:be:f6:d7:3a:63:1b:52:0a:c0:
c5:53:09:72:49:bf:11:96:02:9c:93:ed:68:06:fe:
3e:ba:b5:f4:33:fb:24:89:9f:69:60:64:c0:4f:d0:
73:bd:5b:72:cd:75:5c:46:d8:0e:bc:f6:f4:8d:47:
50:3b:65:86:ec:4a:f2:df:8c:5f:45:21:33:af:48:
8c:9a:84:ea:46:b1:ed:0a:94:33:cd:b1:e7:0f:a2:
fb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D0:BD:48:04:AA:2A:11:46:3E:38:B4:7D:1F:CF:BD:67:22:CF:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4add4991-07f1-3fc2-8171-b1795c3f31f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:4c:cc:dd:51:b8:ef:3f:71:32:1a:a1:80:94:65:1f:63:ad:
ad:b4:89:33:3c:ba:0e:7d:a0:fe:8e:5f:e6:c5:b6:02:f6:9d:
e0:27:43:0e:58:a9:c6:df:42:85:79:9d:bd:f8:fd:1b:4e:d3:
53:e1:06:25:fc:6f:1f:43:5d:86:8d:e1:8d:be:8e:72:6b:0a:
cc:c7:25:fc:74:eb:4b:da:1d:54:e3:88:b5:f6:7c:78:93:e4:
20:2b:4b:c5:7f:0f:79:7d:6c:d1:29:d8:71:05:92:0b:6d:23:
36:b7:32:7b:fd:67:c2:d5:c7:ca:d7:d5:fc:be:f6:3c:51:7a:
12:70:6e:f2:3f:ac:1e:7f:57:31:34:94:b5:cb:64:b0:63:a3:
a6:d7:84:48:5c:3f:24:04:c5:ff:13:58:e2:96:a5:39:7b:89:
04:ff:84:9e:73:b9:af:74:d6:d5:e8:ef:74:fa:d9:05:c6:ee:
68:2a:aa:be:03:96:a5:b0:54:b4:84:d6:d9:19:85:62:23:ae:
0b:6a:56:47:75:69:cd:94:21:9b:88:37:62:0d:8d:af:b4:03:
e4:af:2b:32:d0:82:bd:ad:fe:80:eb:34:02:20:8e:a9:19:ef:
57:4a:c2:c5:3b:6e:c5:2b:a8:c8:c7:ce:96:36:2b:16:97:96:
97:3a:66:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:47:28 2025 by rpki-client