Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6d3bfdc2-0e92-3e63-a105-7bacc1413483.roa
File: 6d3bfdc2-0e92-3e63-a105-7bacc1413483.roa (raw, json)
Hash identifier: m97V6iVbOirnekXtAMRTTXIJf4EatzT1XqJvsRWL45o=
Subject key identifier: A1:71:C6:7A:10:C7:6E:B6:DE:ED:AC:BB:A9:31:2A:86:14:0D:9C:D4
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285847E094FD77EC83F4EDE00BD640
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6d3bfdc2-0e92-3e63-a105-7bacc1413483.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 15169
IP address blocks: 104.134.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:fd:77:ec:83:f4:ed:e0:0b:d6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=5d55cb13-4e10-490f-8a4c-c5850ebc1b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:31:f2:3d:8e:09:42:64:e8:75:8e:5e:e7:4a:
9a:4f:2b:ff:09:18:5d:3d:a3:63:07:06:ad:d1:fe:
b9:e7:a4:44:fe:55:bf:04:e4:b5:ac:58:2d:38:f3:
56:07:e7:09:2e:ae:ac:ad:af:76:b1:90:75:38:10:
d0:6b:08:f5:86:2b:a5:22:13:1f:fb:f1:1d:29:bc:
35:5e:6f:9a:75:a5:46:08:a2:52:c1:5f:80:39:62:
70:21:7b:eb:e6:e7:84:be:0e:fe:30:8c:7d:be:f2:
79:da:e4:7a:8e:6b:cb:5a:8e:21:1b:bd:3d:1a:b7:
32:2f:f5:70:e4:33:cc:d8:ab:0d:73:9b:ad:36:26:
df:00:07:fb:7e:38:7c:bf:58:04:c9:a6:22:80:8a:
6b:cb:1b:6b:b4:39:2b:34:98:a6:99:a3:ec:bf:31:
1d:c6:ec:bb:0d:ac:ac:a3:7e:f4:93:e5:e1:48:26:
1b:c6:a7:28:84:f8:59:b9:39:68:f9:3e:2a:f3:df:
81:2c:6c:0a:ed:28:4c:a4:32:d1:29:51:03:cd:58:
48:16:87:8f:f4:5e:88:f6:a0:51:a0:53:7a:23:21:
3a:e1:50:b7:2a:ff:ec:ad:47:ec:20:49:98:37:77:
9f:a9:ec:cb:db:1c:1a:b0:72:69:10:f8:59:cf:59:
ec:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:71:C6:7A:10:C7:6E:B6:DE:ED:AC:BB:A9:31:2A:86:14:0D:9C:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6d3bfdc2-0e92-3e63-a105-7bacc1413483.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:93:06:20:0d:65:bc:1f:8f:4f:56:82:fc:d1:97:f5:ee:8c:
65:15:9f:71:60:53:0e:7e:b2:21:8f:b3:f0:23:a1:b2:79:2d:
35:97:84:1e:a5:4b:1e:53:d3:c0:a4:0d:91:63:41:a6:00:4c:
05:6a:09:16:e4:17:2a:43:54:1b:51:71:3a:e1:69:a3:68:db:
18:d6:b0:a5:97:5c:18:49:39:81:05:83:75:92:3e:ef:b8:c6:
2d:e6:81:89:58:30:4b:d6:68:06:d9:ce:51:7a:3d:e8:51:d8:
04:00:9f:2c:6d:ec:f2:2f:ab:6d:d2:b8:cc:53:d8:ba:b4:23:
83:2c:7e:1b:bf:f4:a3:80:c3:d8:4c:a8:6d:e4:da:27:d6:30:
7a:68:c0:0f:51:6a:4b:48:88:0b:46:93:01:d5:6e:36:d5:0b:
87:60:69:9b:a6:c4:ef:e9:8c:6e:c9:dd:e4:1f:d5:b7:0f:16:
73:f8:e9:1c:53:c9:7c:eb:55:29:ac:97:6a:64:1a:43:b3:0e:
8a:79:8e:72:a3:9f:64:de:54:a8:44:93:24:5e:81:25:9b:b9:
50:43:34:45:b7:d9:84:8d:ba:ce:cb:4d:ae:81:8c:fb:25:54:
c3:87:68:b1:2e:d9:6b:d5:6d:05:54:de:e3:db:70:31:5b:4a:
a6:46:70:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:22:24 2025 by rpki-client