Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cce7843c-2656-3bb3-a0e0-ad90fcc1e1d2.roa
File: cce7843c-2656-3bb3-a0e0-ad90fcc1e1d2.roa (raw, json)
Hash identifier: zXzZ6djXD0Ey7mBbgXErtQBECwU/Ji8OwAGAKFn/fVg=
Subject key identifier: 30:5A:27:A7:1A:DC:9E:04:17:E5:70:7D:08:16:08:86:83:BD:89:81
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285847E094EC23E7E1E82380F9F520
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cce7843c-2656-3bb3-a0e0-ad90fcc1e1d2.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 41264
IP address blocks: 104.134.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:ec:23:e7:e1:e8:23:80:f9:f5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=b8d732f2-4b94-4209-b3ea-4d6b2de322df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:af:28:da:5f:97:b6:80:0c:3e:4a:fa:76:c5:
6b:ac:50:38:78:6f:b4:df:3e:6d:1f:3b:e0:7b:4e:
37:bd:38:58:81:72:e9:62:31:d5:cb:70:6d:f8:da:
34:96:66:3e:e0:62:c2:6f:4a:cc:31:6f:d5:fc:b1:
43:d6:0d:77:67:df:0e:2e:96:8f:04:c0:a4:72:37:
5d:74:fe:ca:26:c0:a4:f4:67:10:1f:dc:86:46:0a:
9a:13:21:65:60:1c:c5:0b:1c:8a:4b:b2:50:4e:43:
ae:f6:80:cc:43:93:cf:38:8a:2f:78:46:30:99:4c:
f3:98:bd:90:cf:91:94:eb:3d:8b:eb:03:10:be:2a:
3c:23:f9:ea:e7:9f:5b:1a:0c:f4:cf:7f:6c:93:5c:
dd:7a:7f:73:35:78:da:6f:44:83:cd:16:73:d2:6a:
c0:90:d7:09:35:f8:d7:63:20:10:4d:0d:18:01:71:
3c:e5:b0:1b:d2:a5:5e:f3:64:61:04:5c:7f:89:36:
19:29:86:bd:84:93:76:2e:ea:ab:61:c4:65:2c:50:
1d:e5:c0:67:04:8d:df:97:f6:4a:a6:bb:64:4e:ff:
38:f2:51:e5:f7:00:3d:07:32:07:ac:51:fe:0c:a0:
a8:78:c0:11:5f:8d:9d:07:15:2e:aa:d3:13:f2:d9:
14:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5A:27:A7:1A:DC:9E:04:17:E5:70:7D:08:16:08:86:83:BD:89:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cce7843c-2656-3bb3-a0e0-ad90fcc1e1d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:04:a5:8f:8b:54:66:f7:0e:aa:bf:4d:9c:3d:bf:e9:a6:16:
3b:53:b1:21:44:ab:75:57:f9:63:10:c5:bd:ec:69:26:a0:01:
14:8f:47:8a:83:4d:45:c9:fd:53:3e:ef:11:49:24:b8:2d:b0:
b5:f7:8b:a8:ba:27:45:b7:d0:ed:64:01:2e:4f:2a:0c:4c:ba:
13:9b:77:fd:58:c2:4b:c9:93:f4:3f:88:0b:da:f3:df:15:51:
9b:a1:10:54:31:14:ac:d7:2c:bc:2d:f2:cb:e3:b1:ec:f2:79:
58:2d:a1:97:cf:d7:0d:0a:78:4f:c5:38:fe:2f:9e:9a:17:19:
03:40:2e:91:17:19:30:67:c3:dc:84:dd:36:3e:cc:b9:f9:ea:
8f:4c:12:c9:3e:ac:05:01:aa:ac:1b:69:1a:9c:5f:31:43:1c:
ce:a7:d4:3f:0f:65:bd:19:10:f2:1f:3f:1f:00:29:6e:d4:b5:
4b:a4:96:b0:a4:9a:a4:99:d7:f5:0d:c3:40:57:c6:05:38:b4:
b7:6d:07:54:c5:25:17:4e:43:4a:cb:fe:3c:3c:d6:75:c8:a1:
69:f5:d6:63:6a:cf:ae:60:e8:2f:b0:f8:b6:9f:b5:ec:8d:08:
db:8a:51:39:24:fd:db:ca:b6:a6:bd:70:fe:0e:0f:36:64:56:
5c:4d:d4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:32:23 2025 by rpki-client