Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8c2421a7-aed0-38f0-8398-80b20002570a.roa
File: 8c2421a7-aed0-38f0-8398-80b20002570a.roa (raw, json)
Hash identifier: MWjzRqdXzzixmnQOLbHRX5F5sOaEEwrPfgikZUc8818=
Subject key identifier: 86:71:74:53:C3:60:0D:6F:0C:CD:C5:01:C2:A4:AB:74:41:0B:C8:49
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285847E094C8D948C5539C6C004700
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8c2421a7-aed0-38f0-8398-80b20002570a.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 15169
IP address blocks: 104.134.236.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:c8:d9:48:c5:53:9c:6c:00:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=78f6cbdc-b67f-4322-8914-914b07de1a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1c:4b:2b:59:77:17:08:03:95:95:a6:66:ee:
bc:36:b7:b9:06:a9:30:75:b9:9b:2a:2b:af:0c:ac:
23:6f:5f:2f:02:7c:b8:45:c2:19:40:42:db:be:02:
21:53:6e:79:c0:8f:7f:f5:c5:88:22:9b:32:7a:0c:
07:b9:59:b3:0b:e2:ce:8b:c0:21:42:3e:8a:51:a6:
ed:f4:ab:f6:9d:c3:e8:c7:64:57:fd:8e:fe:fa:3e:
34:e3:9b:b0:f2:6a:b7:50:3f:94:ba:ad:48:21:17:
dc:27:0a:14:78:db:14:01:97:e8:43:26:3f:3a:d0:
a6:59:bc:4c:31:c0:21:36:53:69:b3:78:ae:14:ca:
cc:20:ff:03:cf:06:89:78:31:d2:9d:de:27:f8:52:
d1:1f:f4:e8:9d:48:d5:d8:08:26:9f:d2:84:cc:e9:
ed:9e:68:f6:1d:78:ad:93:bc:d0:df:a0:a9:48:5d:
35:e3:fd:7e:3c:04:e9:fa:df:49:80:e7:35:95:a4:
be:50:2d:fc:da:ca:d2:5b:e3:a9:52:32:03:f8:c3:
af:c0:73:b3:fa:08:c5:62:b4:28:15:a3:61:b6:4b:
6d:86:8e:de:f1:15:d8:da:3b:58:de:39:0c:d0:b0:
4d:9f:9d:a2:93:d7:48:c1:a8:8e:64:e9:0e:81:54:
8c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:71:74:53:C3:60:0D:6F:0C:CD:C5:01:C2:A4:AB:74:41:0B:C8:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8c2421a7-aed0-38f0-8398-80b20002570a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.236.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:55:4f:4d:f9:b7:ce:73:5d:60:e4:de:cd:26:ea:c4:5a:2d:
7b:12:c4:14:35:f5:93:15:e2:d1:ed:dd:e1:94:e1:bc:0e:31:
34:7e:84:d8:8c:6e:49:f9:a2:e2:2f:56:cf:40:d2:9c:b0:03:
b1:78:9f:10:ef:0c:43:77:6c:be:52:fa:84:27:1f:65:44:6b:
aa:c3:45:28:d8:1a:48:77:53:c8:2f:44:50:3f:5b:4e:1a:93:
52:da:31:b0:d0:52:54:f3:06:fd:4e:83:b9:83:02:4c:fc:cf:
ab:11:ef:c8:8a:94:fe:ba:12:7b:99:07:4b:93:17:8b:17:55:
e4:b1:98:56:b5:b3:13:68:49:9a:2a:f4:a3:ea:87:60:03:62:
88:cb:8d:cc:29:63:0a:5e:d9:22:23:8c:db:de:f6:5f:00:bc:
0d:86:18:0b:23:12:71:70:70:42:0d:66:23:27:60:53:72:7c:
a7:9e:36:4c:fe:47:3e:00:ab:02:76:81:16:08:30:15:2b:f8:
d1:fa:29:de:cb:5e:ea:8d:c1:81:46:8d:63:b9:8b:33:c7:1a:
c5:ea:fd:96:bd:f8:e9:e8:e1:39:37:ad:f2:e6:78:78:ed:56:
da:16:d7:3f:02:90:92:b5:2a:be:69:8f:fa:f2:05:bc:46:99:
07:43:1f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:16:31 2025 by rpki-client