Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0/6c012601-5967-36bb-8cf9-ef0310269f45.roa
File: 6c012601-5967-36bb-8cf9-ef0310269f45.roa (raw, json)
Hash identifier: vQr7i9RV3iqUmXnGbo6pjz0y1m3NKXPRmce0iZgrUlc=
Subject key identifier: C3:30:1F:15:82:66:04:1F:E4:0D:AA:C3:50:9D:DD:EB:2C:C3:AA:29
Certificate issuer: /CN=dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0
Certificate serial: 010D0C9F432858486C2B0D85B15A01B9D7CAE180
Authority key identifier: 6C:55:D1:A4:32:7B:96:D3:67:EE:5C:4D:89:D6:D2:3C:9C:76:27:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0/6c012601-5967-36bb-8cf9-ef0310269f45.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 2701
IP address blocks: 129.130.0.0/16 maxlen: 16
192.31.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:0d:85:b1:5a:01:b9:d7:ca:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=a98df3eb-3405-4fcb-8c4f-e75a377d3abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4d:bc:12:a1:43:89:00:76:36:e0:1c:67:59:
85:e9:1e:96:18:9e:06:57:0b:74:57:42:84:d3:e1:
54:33:29:19:e1:72:6d:2e:f1:be:b7:7e:85:92:79:
3a:bf:34:eb:1a:cc:1b:35:8d:96:26:14:84:07:9e:
b6:9e:2a:70:de:b2:46:49:08:18:87:23:f9:27:71:
fd:03:01:71:a1:ec:26:81:b2:15:86:d9:71:99:e4:
cc:16:80:cd:0b:f8:45:a0:57:77:4d:17:c9:e7:c0:
29:48:59:f5:6b:77:9f:05:67:18:43:1b:f2:65:a4:
22:46:d2:51:a9:c2:59:0b:97:fa:3b:0a:7c:41:76:
c4:fd:88:66:21:4e:d2:13:18:2d:70:00:b6:59:38:
05:ff:e9:c4:7f:7b:e1:1a:3e:3f:db:c5:9f:73:1f:
60:eb:37:43:4a:7c:c3:cb:c9:86:e5:83:84:23:ec:
bf:fe:02:f2:20:7f:71:69:4a:52:40:5b:80:f3:a6:
0f:dc:6f:78:7b:af:9d:80:f7:92:6c:ac:6a:80:5d:
27:f9:de:5d:64:fc:2e:b1:89:d4:d2:d4:bf:f4:0c:
16:09:27:17:55:31:96:2d:d0:27:05:bf:c5:a4:44:
1b:15:53:94:4a:6a:31:28:4b:ff:44:96:5c:4f:88:
46:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:30:1F:15:82:66:04:1F:E4:0D:AA:C3:50:9D:DD:EB:2C:C3:AA:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0/6c012601-5967-36bb-8cf9-ef0310269f45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0.crl
X509v3 Authority Key Identifier:
keyid:6C:55:D1:A4:32:7B:96:D3:67:EE:5C:4D:89:D6:D2:3C:9C:76:27:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc4cc6c8-47aa-4b0e-b0b0-04400f7f99b0.cer
sbgp-ipAddrBlock: critical
IPv4:
129.130.0.0/16
192.31.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:d1:d4:7b:7e:0b:77:70:a0:17:ad:41:33:90:c9:e2:36:d9:
1b:cb:ee:ec:b0:14:de:11:fa:b4:6f:64:d9:68:f5:d3:b0:aa:
06:29:ce:da:ff:ab:5c:e5:0e:0f:63:7f:97:34:e9:ce:fc:66:
82:44:a5:0c:31:96:a5:cd:c9:45:2e:f4:8a:0b:5f:cc:5d:79:
8d:0a:81:cd:69:84:90:18:74:42:bd:0d:42:fa:23:7d:13:0f:
1a:b9:9f:a7:95:6b:40:7b:02:ab:7a:01:47:9f:30:e6:0d:ef:
c0:77:ac:9b:df:90:7e:eb:f0:ae:ac:76:c2:dc:30:f5:b4:36:
c4:57:ca:69:fa:61:9b:05:10:a9:74:2c:23:f4:e8:84:31:26:
7d:c9:03:b1:c1:ac:b3:16:da:a0:43:9a:98:78:be:4e:f5:26:
e5:99:44:27:0e:44:c8:e6:48:45:bf:52:55:17:85:f8:e1:c3:
c2:6b:7a:62:2c:8b:82:f3:e0:c6:d3:7d:c6:32:c9:cc:3b:e3:
e1:27:9c:16:0a:31:f0:ec:9b:57:a9:06:3f:67:8b:5a:36:56:
07:e5:d7:44:99:79:f2:4d:8a:8f:e8:5e:00:33:d0:84:93:07:
bf:42:14:50:77:fa:06:41:48:c5:9d:9a:0f:e8:20:1f:54:1d:
06:c5:69:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:56:14 2025 by rpki-client