Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/89488044-07ff-3d0c-b23f-1c7cfc08eb8d.roa
File: 89488044-07ff-3d0c-b23f-1c7cfc08eb8d.roa (raw, json)
Hash identifier: +iPq+BxNMI6jfvrVBsIxMLHcvBmhfaITH741arpYy7M=
Subject key identifier: DA:96:86:C6:DC:FC:07:05:BD:A1:C9:D0:83:0B:3F:1E:CE:2E:92:15
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285848B4C0EA5B049EDFDCED5E34C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/89488044-07ff-3d0c-b23f-1c7cfc08eb8d.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 395973
IP address blocks: 104.134.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:ea:5b:04:9e:df:dc:ed:5e:34:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=c41aaa21-b949-47b6-a5ce-36b0cd06857a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3f:83:01:47:2f:41:5e:0e:7a:0f:a9:35:c7:
fc:a6:0a:60:c0:ac:5d:90:e2:d3:6d:b9:57:b8:c5:
6d:da:c0:65:03:8a:7d:bf:16:65:a0:06:e2:3f:cf:
1d:2b:b9:d7:44:f3:73:5f:7e:93:c8:0c:99:24:be:
54:7b:b6:f9:62:11:93:2f:79:7f:d8:57:c1:22:73:
5e:7b:60:c6:54:27:5d:38:30:52:bc:92:cd:97:0d:
72:23:67:87:f6:7e:4d:65:94:9f:38:bd:2c:26:21:
c3:ad:e8:e2:50:1d:80:b9:c0:5f:f5:4e:da:fd:62:
81:b0:6d:20:11:3f:8c:f6:eb:a8:47:ba:73:aa:3e:
6f:83:40:43:8c:63:2b:28:a0:55:d2:1a:2a:94:de:
17:f9:23:cd:09:3c:65:33:9d:07:4b:c8:c2:58:61:
7c:4a:ae:86:62:bc:55:88:13:bc:20:29:c0:c2:6a:
84:c3:40:c2:68:fa:89:4f:0d:5c:6d:ce:46:cd:cb:
aa:29:d6:51:84:b7:c4:dc:7e:ac:55:40:04:f5:7d:
bd:44:55:82:bb:df:c5:41:e0:e9:1f:52:da:d3:04:
aa:88:65:db:70:01:86:31:f7:e8:01:f0:fb:e5:45:
31:1b:f6:4e:33:c2:12:d5:38:23:76:c5:58:46:09:
9e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:96:86:C6:DC:FC:07:05:BD:A1:C9:D0:83:0B:3F:1E:CE:2E:92:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/89488044-07ff-3d0c-b23f-1c7cfc08eb8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c3:f2:68:76:47:22:ec:7d:a2:94:f5:e5:b0:07:4e:a9:8b:1b:
9d:af:25:57:ad:e3:be:69:ed:9b:3f:7c:0e:e1:75:76:fd:ab:
64:19:60:c5:c2:47:81:58:dc:3e:59:cb:83:c4:4f:bb:11:99:
9f:d4:17:95:29:47:fb:55:a0:d8:7b:d5:71:0a:d1:59:20:02:
05:fd:76:77:27:bb:c6:52:d3:e0:7c:88:45:7d:22:c9:42:23:
ab:dc:ae:a8:0a:50:92:6b:b7:fd:6a:11:70:8b:38:90:9f:cd:
04:54:30:fd:12:29:f1:84:a4:8f:d2:28:75:74:ad:2a:fa:50:
e1:d0:4d:26:74:dc:a4:27:f6:ab:c1:e5:c7:97:af:15:a7:02:
7d:59:36:8e:f7:4d:96:57:ae:33:87:92:b8:8c:3e:89:c1:b5:
f3:e0:56:fd:00:bb:fe:e9:ba:3c:bc:13:89:ab:a1:d6:a8:ed:
72:11:60:42:7c:e3:dc:f2:56:a3:0a:db:66:46:4f:b0:76:b5:
14:c7:b0:df:83:84:85:83:d1:4a:9d:62:b1:35:92:6e:7e:7a:
11:77:ba:c6:c3:bd:ad:b1:3c:d6:ed:c3:e3:78:71:7d:87:40:
82:71:5e:8f:14:b4:86:cb:f8:64:6a:9a:02:cd:c2:42:1d:4e:
ea:05:fc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:28:00 2025 by rpki-client