Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bd8071dc-d868-3f91-a4bc-822224a2e269.roa
File: bd8071dc-d868-3f91-a4bc-822224a2e269.roa (raw, json)
Hash identifier: IZfnzgRclJr7K9wDD2D7pAqiQHMqDFZELCfacirNazE=
Subject key identifier: 3B:F4:61:4E:A1:E0:1F:D6:FC:32:C7:F8:EA:34:15:8D:B8:B1:3A:4C
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F432858481F653AC7F02A0E8296D42F90
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bd8071dc-d868-3f91-a4bc-822224a2e269.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 395973
IP address blocks: 104.134.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:3a:c7:f0:2a:0e:82:96:d4:2f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=b6babd0a-6cc8-4d6e-ba3a-844f6e3bbb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:10:98:1d:a0:ab:9c:6b:ec:d6:25:e2:99:
df:05:fb:57:8d:ff:d6:a6:9e:aa:c7:c7:a3:0a:33:
af:56:cb:2d:4c:56:58:cd:8a:c5:3b:60:16:24:20:
44:ce:46:ef:43:7d:ac:3b:d1:5a:7a:7b:f1:11:e2:
c9:1f:37:e3:51:56:4b:59:3e:1d:12:af:20:78:8d:
60:8d:00:f8:e5:80:42:ce:fb:76:fa:86:bf:06:df:
d4:f1:2a:09:71:be:67:2d:fe:47:6a:f7:93:75:b2:
69:c8:b1:82:81:b8:dc:12:bd:df:7d:a0:0e:bc:d0:
10:fd:7d:50:f9:c7:84:7a:e7:44:b8:fb:93:52:19:
b1:51:eb:cf:ac:d7:de:56:1a:db:f5:3c:ba:58:91:
78:b8:ec:e0:3a:28:3b:8f:b3:a1:15:d4:d4:2e:ef:
fb:6a:9e:a7:85:31:29:de:57:57:8c:cb:37:bd:a3:
9e:7a:0d:14:1b:ec:f6:ef:a0:aa:ef:41:49:01:b4:
f1:21:95:6b:67:43:63:73:ac:7f:c1:ea:79:c8:93:
45:16:41:89:69:4e:65:e8:e5:b7:3d:d5:7a:02:08:
f5:ce:ff:92:a2:2c:53:bb:ac:8d:49:f7:08:f2:55:
ea:7f:54:d1:6f:59:0d:01:b0:b2:42:8e:0d:3f:b4:
96:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F4:61:4E:A1:E0:1F:D6:FC:32:C7:F8:EA:34:15:8D:B8:B1:3A:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bd8071dc-d868-3f91-a4bc-822224a2e269.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:1a:9d:bd:b7:cf:b7:75:82:6d:eb:d0:d9:e6:95:94:28:5b:
d2:82:bf:4b:49:74:c4:0e:02:95:e7:54:b7:fc:b0:d1:64:fc:
f2:fc:2e:bc:35:21:11:04:f8:d9:a0:37:34:34:c9:f5:dc:8d:
d6:9c:c3:9a:84:d5:79:da:d9:c6:cd:51:d3:18:a3:65:3f:ea:
87:69:68:b1:b7:c7:3f:ad:c7:22:ea:4c:35:2b:c1:51:6b:09:
80:97:26:01:7f:27:91:c5:30:a4:30:c2:b5:bd:fe:54:5c:3e:
7b:0d:72:20:1a:19:44:6b:ca:f4:a9:73:ba:4b:35:3d:50:83:
9d:47:05:16:a8:da:e3:26:fa:5d:b9:4e:99:28:e5:96:16:ba:
8e:d2:eb:e8:91:d2:35:fb:8a:91:84:25:03:6a:f1:d1:75:a7:
e5:ed:16:38:7a:7e:b8:da:3b:aa:f5:59:f3:3c:12:c4:80:dd:
c5:1a:7f:4c:4b:9f:28:78:3a:fa:2b:0b:ed:7f:a2:49:8c:61:
cb:e1:8f:67:75:d0:db:f2:d9:51:28:9f:c9:87:fb:6f:c7:96:
58:26:07:75:bd:5b:9c:f1:73:c2:88:7a:29:d2:16:1e:f0:c5:
4b:fd:80:c7:e0:a1:70:04:71:5b:04:d6:8c:fd:cc:7b:cb:a5:
6f:39:7f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:53:09 2025 by rpki-client