Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6123deac-5c67-3e6b-91f3-f29aeeebc7cc.roa
File: 6123deac-5c67-3e6b-91f3-f29aeeebc7cc.roa (raw, json)
Hash identifier: RtHqmXyuJjtAYpjKxn4zPEK7J+DW9DrdDe3ImhWafKk=
Subject key identifier: 19:7C:36:CC:A5:FE:03:1B:37:26:17:88:ED:34:6E:A1:CB:02:9D:DA
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285847FF4A70A8B30A5B4DD1854DC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6123deac-5c67-3e6b-91f3-f29aeeebc7cc.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 41264
IP address blocks: 104.133.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:70:a8:b3:0a:5b:4d:d1:85:4d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=d67d84dc-c31b-483c-ba6f-a550832e3d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d4:e8:bf:db:93:ec:f4:14:98:e7:3f:ce:b4:
68:db:d1:9f:5d:da:d4:99:d9:1f:70:d8:68:28:da:
08:ae:32:ce:91:cc:76:15:1f:1e:b8:93:66:0a:1d:
a8:f0:6b:10:bf:75:df:ba:22:35:3f:4c:6f:de:f7:
09:18:79:a1:c0:47:b9:da:7f:66:24:e5:39:ef:d9:
6a:33:cc:53:0f:58:c4:63:91:ce:2b:dc:25:66:a9:
59:d1:17:68:36:65:04:8e:db:ba:0d:4c:9d:7e:6b:
e1:35:de:73:2d:35:cb:89:00:92:03:78:c6:67:f2:
75:b9:38:42:60:ad:e1:57:f5:8e:b6:02:f9:c9:85:
2c:02:ae:fb:f8:9c:1b:dd:15:45:4f:14:42:3d:1c:
12:cc:f8:77:be:13:24:39:89:80:b3:4c:75:5b:49:
c9:2e:43:5e:c5:ce:f1:7a:f2:41:6a:f1:10:a7:2e:
48:66:4a:04:a7:94:60:92:65:58:e3:07:73:7c:97:
94:26:ec:3f:82:aa:42:9f:6f:34:42:15:bd:89:a4:
f0:91:0d:78:53:19:73:33:e1:89:4f:55:47:dc:ab:
39:b6:a5:35:43:84:cd:e9:03:18:d1:e9:21:19:06:
c0:56:2b:ef:73:22:3c:99:88:da:1a:92:6b:e2:0a:
4f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7C:36:CC:A5:FE:03:1B:37:26:17:88:ED:34:6E:A1:CB:02:9D:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6123deac-5c67-3e6b-91f3-f29aeeebc7cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.133.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:d5:68:67:8a:d2:6d:b2:70:2f:f6:8a:78:2c:f5:9f:d7:a2:
02:13:85:46:3f:fe:0c:e2:47:68:06:8a:b5:f8:2b:84:4f:ff:
78:42:70:0a:39:07:eb:f3:d9:74:ba:f0:3c:fa:19:c7:11:2a:
40:33:b2:e1:58:0d:ce:57:f0:49:72:9a:55:09:b2:2d:35:d3:
65:7a:00:7c:d0:bd:35:a2:57:f2:78:fa:42:d5:09:11:8e:9d:
de:1d:9e:54:e8:11:f4:24:4d:25:b1:40:24:61:af:0d:51:6a:
f9:1c:a1:7c:0b:01:8a:d3:72:66:ee:68:70:81:fc:6d:46:5e:
cb:a2:73:91:5e:bd:5b:e0:7d:68:20:82:fd:dd:c9:6a:de:c3:
37:97:ff:ea:fa:9c:2a:2a:44:2d:a4:eb:9d:03:57:88:2c:af:
1e:49:ff:ce:d1:25:1d:e9:5e:a0:ad:4e:97:b6:77:a6:8b:0b:
c1:ba:f5:18:82:dd:ad:50:ba:62:e3:6b:59:8a:e5:27:be:a5:
2d:7b:14:b0:06:02:4c:6b:f8:a3:e3:6a:61:60:5e:9f:53:19:
06:35:f2:54:59:3e:b9:85:ed:18:a5:9a:24:54:e0:bc:03:a2:
5d:d3:30:44:a8:09:c0:30:f9:b5:b6:ca:37:0b:70:19:b3:2f:
99:da:0f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:27 2025 by rpki-client