Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/980a0588-3a79-3415-8602-b89cee2b7dab.roa
File: 980a0588-3a79-3415-8602-b89cee2b7dab.roa (raw, json)
Hash identifier: PJQImK/8lVtvWhAuWjQVQk/So/d4sRTqUSemXnBJSas=
Subject key identifier: F3:77:68:C3:4D:0F:53:05:DE:09:A2:E4:9E:05:F7:AB:79:17:D5:B6
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285847E094D0BDB0819B799679DD00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/980a0588-3a79-3415-8602-b89cee2b7dab.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 36411
IP address blocks: 104.135.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:d0:bd:b0:81:9b:79:96:79:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=12674c62-9b46-4a1d-9900-d94ce583d1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7e:55:a3:96:62:71:0a:35:66:f1:89:d4:ec:
6f:c1:57:e4:ae:68:62:ea:53:c9:32:8a:76:82:19:
e2:c3:07:e9:37:f2:e8:15:a1:65:7d:d5:d1:68:39:
e7:17:97:c6:88:e5:2f:c9:51:95:55:a7:58:5e:5b:
4b:2e:d7:54:5d:2d:42:8b:72:29:83:ac:39:d8:a1:
fa:94:43:7c:6c:d5:35:ae:69:1a:03:4b:3a:76:a6:
4d:4a:37:94:52:20:e2:66:00:5b:0b:09:19:f7:a1:
d3:db:a7:09:4f:52:6c:e2:b0:66:0d:70:cc:d4:be:
3c:33:85:1e:e4:a2:1e:a7:4b:e9:db:eb:a9:ba:38:
12:e0:a1:49:8a:f7:c9:47:48:54:f3:5e:5d:bf:e1:
62:83:ed:ee:3c:9b:f4:77:f2:85:5c:ea:b1:d8:25:
10:85:04:d2:51:40:8f:5a:5a:dc:9e:eb:ca:da:bc:
f2:68:76:d6:70:74:a7:c4:44:21:4c:05:ef:30:77:
07:a0:cc:5f:52:0c:08:1b:fd:ef:ad:09:96:32:7a:
2f:af:ab:58:4f:66:1a:bd:ba:ff:93:e9:b2:f9:2d:
20:3b:c4:73:cc:13:a1:0d:ab:8d:e7:88:86:63:6a:
7b:64:e3:14:83:c2:f9:23:0b:c7:04:85:58:a2:69:
8e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:77:68:C3:4D:0F:53:05:DE:09:A2:E4:9E:05:F7:AB:79:17:D5:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/980a0588-3a79-3415-8602-b89cee2b7dab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.135.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:42:85:9f:22:69:dd:fa:89:be:0c:76:12:91:9b:41:09:d7:
ae:8f:37:04:35:3f:02:72:8f:fb:7e:40:ce:32:89:07:d8:34:
65:29:d7:a2:3b:8d:f6:c8:2f:9a:27:b4:1c:da:b1:cf:fb:99:
27:56:a9:4b:a5:30:05:a1:d4:7a:72:8b:ce:15:b1:c6:2a:69:
b2:d2:fb:ad:df:64:7e:13:8f:bb:f5:a6:0c:50:fa:c9:ca:68:
93:a8:bf:a4:50:cf:8f:94:d5:7a:1f:5b:cc:78:5d:11:13:93:
b3:a7:06:63:d0:91:e9:29:34:1a:60:49:87:d0:2d:5c:f6:3d:
30:e2:ac:b6:09:e6:0c:84:f2:7c:24:63:b6:ae:35:85:ad:eb:
b1:42:4f:7e:12:93:cf:dc:59:c7:70:43:64:0b:c6:68:2e:4d:
f4:27:94:7c:8b:e5:25:f5:e7:7b:bc:3c:fd:28:0b:40:be:c1:
9c:f7:51:63:72:7f:1f:df:80:7a:25:2c:72:58:a1:33:85:e8:
a7:9d:e5:a3:28:b6:a0:5b:50:6b:a8:e7:c5:1d:3e:57:c3:56:
72:7f:13:4a:6a:56:b1:65:05:b7:14:19:b3:dd:38:78:f2:15:
38:a4:8c:07:43:c0:4b:82:47:99:14:51:fe:29:92:99:b5:06:
c8:34:ed:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:55:54 2025 by rpki-client