Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/a0ac8c5b-4bc4-3470-82ef-6792b44ab9cb.roa
File: a0ac8c5b-4bc4-3470-82ef-6792b44ab9cb.roa (raw, json)
Hash identifier: cYViBAC5/VnmwNNtudgmEt/gkycA4TYCCDxL0ZmpEG0=
Subject key identifier: 60:B3:BE:2D:1A:49:9D:FA:19:9C:BD:F1:CC:DC:5A:5E:02:87:BA:8B
Certificate issuer: /CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Certificate serial: 010D0C9F432858485E35B2249CA635053533AB00
Authority key identifier: CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/a0ac8c5b-4bc4-3470-82ef-6792b44ab9cb.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 393529
IP address blocks: 160.129.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:b2:24:9c:a6:35:05:35:33:ab:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=5ab3a23b-82f3-4639-8197-97811e16fd52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e6:fa:d9:ce:4a:65:e8:1b:84:66:42:ac:1f:
bc:fb:7f:fe:f7:ac:51:48:c8:e2:18:2c:27:20:39:
01:b9:d8:31:f9:0d:46:38:da:c1:a4:d1:02:33:2b:
34:36:78:e4:31:b9:14:04:03:bc:8b:f6:94:e7:2c:
b2:03:74:8c:3d:d6:2d:a6:10:15:fc:14:7a:bb:ec:
e9:70:5c:41:25:cf:e9:b6:10:f9:76:7e:b4:75:35:
33:88:24:4d:2d:3d:c3:95:05:14:ae:3f:7e:6c:f6:
28:22:00:99:2f:e4:3b:2c:c1:6b:b2:40:c1:8d:33:
aa:d0:90:0b:4c:26:14:ab:28:9c:c1:a7:62:f3:12:
b1:01:e8:9b:4f:58:4f:2f:0f:cb:c5:62:85:c4:cf:
d5:e7:0c:16:ac:d1:4b:a3:22:41:29:f9:f7:7b:0c:
c6:3f:ac:87:21:18:e7:aa:0c:d7:32:5a:ba:e0:72:
c2:f3:01:9c:01:d8:7a:8c:97:a1:92:94:e7:4b:30:
9f:98:34:f0:92:0f:ec:b3:05:6f:10:0e:bc:da:1c:
ad:99:70:fe:ba:b3:5b:95:41:76:8b:cc:23:f1:d3:
2a:79:73:07:3c:ad:f6:45:f0:9a:a8:5c:bc:3a:30:
cc:29:a4:e8:cc:ff:b3:92:92:0d:99:bc:da:0b:66:
d3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B3:BE:2D:1A:49:9D:FA:19:9C:BD:F1:CC:DC:5A:5E:02:87:BA:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/a0ac8c5b-4bc4-3470-82ef-6792b44ab9cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl
X509v3 Authority Key Identifier:
keyid:CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
sbgp-ipAddrBlock: critical
IPv4:
160.129.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:f5:41:1b:f2:2b:5d:10:9f:59:a5:e4:be:df:eb:54:b8:62:
39:ab:92:f6:c2:d0:6c:2a:26:ba:08:b0:9e:db:da:aa:d7:87:
9f:92:85:89:85:69:a8:35:ef:48:a5:1d:03:30:a3:5a:7f:b3:
d4:c5:1a:ce:0e:74:de:b6:8a:41:36:ed:00:13:65:53:73:37:
c4:8c:d8:e6:20:68:41:03:0d:ec:46:f8:ef:17:ae:91:52:5a:
d7:80:cf:d7:58:46:d9:bb:f7:74:35:bf:ef:1d:23:ee:6c:be:
da:3f:40:7d:75:a9:07:db:04:a8:d7:10:d5:13:ec:b8:31:d3:
df:1a:c6:cb:7c:af:b1:91:00:f9:fa:48:31:02:48:19:d8:b4:
40:86:3d:52:eb:05:2f:43:d6:49:73:ff:6d:e8:e5:d7:0b:68:
ed:ee:76:d8:2f:43:c3:9b:06:a8:ae:9d:f0:34:f2:59:e3:57:
2b:ac:6c:14:ab:61:85:6e:d3:af:a5:1c:32:6e:00:3e:2f:65:
a3:00:ec:4f:ee:08:b3:83:c9:d8:82:a0:1e:61:b8:e9:26:8a:
16:46:d3:d9:b5:4c:33:be:9c:94:d0:30:fa:20:c4:71:5c:02:
88:e0:85:54:87:d0:eb:0e:03:61:ba:cf:22:d5:6c:3e:d8:cb:
14:58:66:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:18:28 2025 by rpki-client