Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f0e650e8-42ca-3b0b-82e7-54b60647533e.roa
File: f0e650e8-42ca-3b0b-82e7-54b60647533e.roa (raw, json)
Hash identifier: l/qm8nkXP9Bw4nPLtV13CBIZJOd3QsfjAfW4FdaHPbk=
Subject key identifier: 29:2C:8C:96:F4:57:D1:88:BB:E7:D0:58:1F:38:BD:F3:0F:7D:42:1B
Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial: 010D0C9F43285847E094FD9DD9F73FFEB2BBAF30
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f0e650e8-42ca-3b0b-82e7-54b60647533e.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 36411
IP address blocks: 104.134.70.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:fd:9d:d9:f7:3f:fe:b2:bb:af:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=b52c1830-b017-4f50-8183-9bf77b180784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:aa:17:43:ec:9e:0c:34:08:bb:e7:d9:bc:a7:
12:eb:1a:26:fe:ab:d1:b3:cf:d9:b7:04:ae:3e:a0:
30:c7:a9:12:29:36:70:3e:2c:f7:42:54:6c:6b:ad:
67:c0:d5:c5:d0:07:49:61:0d:7b:18:c3:15:9e:65:
f8:82:b8:80:78:82:93:67:d6:1a:60:5c:d2:8f:6a:
e5:d1:2b:9b:b0:9e:70:83:41:a7:d5:eb:02:30:b8:
69:29:f7:2c:45:64:e1:38:66:a1:ac:87:3a:38:31:
a0:4a:11:75:89:e3:f6:ce:8d:f7:a2:cf:74:da:8a:
d8:4d:3d:a9:6c:3d:95:21:72:e8:9c:da:84:80:11:
90:f6:f8:4f:7f:b2:f9:db:c9:88:19:fb:77:57:82:
ce:d0:7e:f5:7f:4e:fd:75:34:0b:12:fa:35:67:c2:
04:ca:91:56:24:5a:18:4d:82:66:8c:09:51:ba:b7:
0f:50:d5:f3:55:ea:3b:b6:64:bb:1e:27:6f:08:de:
47:3d:ab:5e:f5:50:b1:34:53:66:da:da:54:bb:99:
60:dc:57:33:be:48:c7:50:f3:ee:54:9b:ec:ec:e9:
91:9b:b8:64:93:c5:04:40:44:82:50:cb:ef:65:4e:
bb:e1:e4:ab:93:a5:98:f7:05:62:ad:36:fc:15:c7:
57:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2C:8C:96:F4:57:D1:88:BB:E7:D0:58:1F:38:BD:F3:0F:7D:42:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f0e650e8-42ca-3b0b-82e7-54b60647533e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
X509v3 Authority Key Identifier:
keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.134.70.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:40:c3:52:e2:aa:72:e8:e3:10:0b:ab:b6:f6:40:d9:1b:67:
68:dd:55:4d:55:ed:e8:56:f4:ec:d3:46:cc:6f:95:f7:d9:d2:
07:90:c4:51:8b:da:39:e5:f1:e8:95:f7:23:67:dd:56:49:e1:
bd:e2:7c:59:9e:64:39:67:ee:21:53:73:0a:13:a1:7c:86:64:
6c:32:94:11:64:a1:37:d4:2f:64:43:1c:0b:76:d5:53:0f:85:
91:b1:01:8a:ef:62:cd:50:37:6a:59:12:dc:69:26:02:05:94:
50:62:9d:6d:24:b5:de:29:81:b3:e0:4f:7b:43:aa:a0:cd:7c:
4e:fc:ee:bd:ef:76:a2:df:1e:c7:c9:ce:b5:32:66:4b:ea:5b:
37:22:4a:ef:26:33:54:83:4e:f4:dd:f6:15:8f:f2:c5:48:2e:
e0:9f:1a:68:3c:b5:a3:11:23:5c:cd:de:a4:4d:d3:44:1c:6b:
4c:0a:bc:80:4c:1a:19:64:7e:58:f6:ee:93:cb:d0:29:5d:90:
08:ff:8b:3c:7a:90:ff:6e:96:3b:cc:18:88:53:57:70:5c:38:
e1:82:1b:83:3f:35:ef:d2:20:1e:22:b5:66:09:6f:3e:34:2c:
34:c3:88:b7:48:49:65:51:62:a4:42:fe:36:74:ef:84:0f:bb:
1f:06:aa:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:30:50 2025 by rpki-client