Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9b8882ca-60be-30bc-a99a-d390b0d08f8f.roa
File: 9b8882ca-60be-30bc-a99a-d390b0d08f8f.roa (raw, json)
Hash identifier: NvUp9S9UCwRI7/zGRzIuRMzgpJyb759C7vIFo0MzXQc=
Subject key identifier: 2A:95:EB:B6:5A:F5:9F:C7:9C:4F:17:59:B9:3A:25:7D:5B:34:E5:58
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F432858481F653A99548A4358760C37C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9b8882ca-60be-30bc-a99a-d390b0d08f8f.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 395973
IP address blocks: 104.134.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:3a:99:54:8a:43:58:76:0c:37:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=2af3e88c-110c-45c7-aca0-e9fbec251160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:af:4b:b7:fd:1c:b5:b3:a5:35:f5:aa:d5:c7:
23:d9:e0:32:e8:21:bd:33:79:ab:b4:ba:8d:c3:80:
b9:db:1b:b5:b1:96:2f:ec:b1:55:a4:b4:a2:ae:36:
15:10:9d:17:af:5f:80:62:b9:a4:5b:73:6e:f8:95:
5a:8a:af:24:e6:3e:af:f9:05:04:c8:ee:ec:b5:55:
6b:0d:20:4f:9d:7a:54:97:ff:5a:af:19:e6:6b:91:
0f:e8:66:99:3a:4e:9d:0f:49:d4:98:51:b9:70:9c:
55:b5:b9:81:eb:05:97:ce:dd:82:2c:a1:93:aa:34:
39:0c:da:b2:77:52:8b:0f:a8:53:bb:f5:c4:4c:9c:
48:29:9e:5b:78:39:d8:fd:56:88:2c:8b:0e:b7:73:
e7:2d:95:75:cd:d3:b3:4e:2c:7a:af:d0:59:17:2d:
6f:f2:35:ff:50:2d:fe:1a:2b:8e:5b:6e:89:a4:b8:
69:ad:b2:54:d4:0c:61:0c:c1:4c:06:aa:60:84:c7:
52:f3:b5:fc:b4:74:72:9d:9a:19:2f:63:ff:76:9c:
a9:d1:5c:79:48:3f:5b:d2:87:1c:c6:03:2c:a5:89:
cb:59:18:a5:64:20:7a:bd:15:53:be:79:eb:cd:00:
0a:ed:43:69:fe:b4:7f:47:12:99:19:21:71:b6:14:
ee:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:95:EB:B6:5A:F5:9F:C7:9C:4F:17:59:B9:3A:25:7D:5B:34:E5:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9b8882ca-60be-30bc-a99a-d390b0d08f8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:36:75:dd:e2:f0:47:d1:70:8c:25:93:eb:7c:2f:c8:d8:9b:
cb:28:49:8d:11:04:55:3d:81:8b:9f:ff:a0:c4:d3:54:05:0f:
40:b6:b2:ce:48:d1:fa:6f:54:66:d8:f0:58:d0:3c:9c:d9:cb:
4c:be:49:f5:37:eb:8c:b7:ab:a0:35:46:3a:4b:c3:c1:0b:ef:
e5:34:97:1c:b5:49:b0:f2:d7:eb:6c:53:7a:0f:bf:3b:5b:a6:
e7:35:b0:9a:7e:2e:16:ee:b6:e5:bb:02:82:f6:a9:e2:f2:ae:
af:0d:75:a6:fc:dd:5f:ac:33:46:63:8f:50:18:86:18:a9:68:
7e:b3:f9:6d:f5:68:f4:3f:b7:09:b1:c6:9c:7e:cf:f9:be:66:
c9:cd:25:ce:ae:2b:2a:87:20:1d:37:6d:fc:e3:be:11:49:22:
14:6a:5c:5a:e0:86:7c:df:d9:6e:cd:d3:1e:95:7f:44:42:40:
cd:40:46:3f:a0:7f:8c:3c:f9:df:ef:45:4b:b5:c6:fe:48:11:
45:a1:8d:47:de:a9:c6:a4:26:58:7f:d4:9b:cf:e3:dd:fd:5d:
85:ec:29:a5:0b:b5:5e:83:6a:5f:21:db:0c:24:2a:e0:c6:45:
04:32:74:6e:c2:e5:97:06:fc:e9:88:bc:1d:b5:3a:8d:2e:a2:
7a:c4:a5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:57:48 2025 by rpki-client