Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ae29e1c3-8e87-3b60-ab8f-c1f6564e5e6d.roa
File: ae29e1c3-8e87-3b60-ab8f-c1f6564e5e6d.roa (raw, json)
Hash identifier: OXvkctHxM/Qq5+MhKuqTAeYFQoIRF2/TTaqkkM1w51o=
Subject key identifier: D8:AD:FD:D1:11:96:4B:F8:5F:A9:76:FA:66:22:7B:AE:AB:3E:9F:13
Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial: 010D0C9F4328584863CB02D84B1EC54A815A2280
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ae29e1c3-8e87-3b60-ab8f-c1f6564e5e6d.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 14061
IP address blocks: 134.199.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:02:d8:4b:1e:c5:4a:81:5a:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=3358bd9a-79c1-4943-b55f-049f78d3476a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:87:6c:77:fc:50:cc:a4:ea:a4:31:33:4b:6d:
98:f9:30:a8:2b:43:01:94:6a:7f:7b:c1:e1:9b:e7:
71:66:92:cc:3f:ad:5c:f4:f5:5f:e2:7a:1a:4a:8a:
cd:24:66:1c:0c:23:fe:ce:b5:4c:03:23:7d:ba:6a:
bc:57:7b:d8:24:a7:5e:94:ca:7d:b5:83:44:5d:f4:
26:78:24:71:c5:ea:1a:fa:93:5c:97:5f:e6:1d:97:
2d:3c:18:5d:b9:ee:49:31:5e:7c:b0:47:a1:37:99:
0e:57:3a:ec:75:f6:b0:6f:a5:93:1b:23:92:be:d9:
a7:4d:d3:4e:b5:0b:d2:67:0f:f7:b0:7d:44:bf:66:
07:26:43:b7:6d:9c:39:b4:2f:64:cb:d8:02:8c:03:
49:5b:d8:7e:f6:0b:1a:bd:7f:90:e7:a8:0a:fa:a8:
ce:4b:12:8f:f1:87:1d:b4:71:f5:0a:3d:50:7d:84:
64:88:2c:df:2f:54:e0:1d:70:ec:8a:e4:3d:e8:32:
bd:86:53:08:fc:92:b7:03:d7:de:c5:ed:91:59:9f:
30:8b:87:c1:c7:c0:aa:57:b8:33:c6:79:80:57:3a:
6d:5b:33:66:b5:06:55:0b:49:04:eb:a8:9e:cd:4a:
5f:fd:b5:9d:d6:2d:e9:41:8e:6a:bb:f9:dd:5c:3a:
4d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AD:FD:D1:11:96:4B:F8:5F:A9:76:FA:66:22:7B:AE:AB:3E:9F:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ae29e1c3-8e87-3b60-ab8f-c1f6564e5e6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
X509v3 Authority Key Identifier:
keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
sbgp-ipAddrBlock: critical
IPv4:
134.199.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:35:49:4e:9b:90:3e:15:be:60:32:50:9a:cc:bd:11:ea:b5:
22:c9:ec:c6:5c:88:ec:80:f2:ee:72:bc:1d:4b:d5:6e:74:b5:
e3:79:b8:d9:b5:f5:21:9e:6d:44:fe:10:8a:7a:ce:b9:04:be:
32:30:97:82:9c:df:4c:60:f8:84:a2:25:c4:24:77:30:05:ba:
ef:f2:70:92:9f:54:d9:87:d8:5a:76:7d:1e:11:e3:36:ae:0a:
83:ec:d7:fc:3e:79:c6:2a:4d:1b:42:48:f7:fe:c1:44:6b:98:
43:83:30:c0:4e:59:61:ee:0f:c2:53:b6:bb:0e:8a:86:fc:2c:
40:cc:f8:82:e7:98:0d:d7:d0:15:c5:86:01:7c:5a:cc:0f:f2:
55:62:53:28:40:ec:d4:7c:ec:68:8b:c4:d5:8a:eb:24:d6:85:
69:e3:80:51:88:32:30:d2:f4:bb:0c:d7:95:dd:79:52:fb:e7:
a7:0b:73:a0:ad:8f:6b:52:5e:97:46:7c:a8:8e:39:c6:9d:85:
8e:91:83:51:ca:bc:a9:59:ce:f3:94:2e:47:40:1b:2c:b8:8c:
21:c6:46:75:18:65:1e:5f:5d:30:84:f4:c5:78:82:63:a8:59:
27:61:c4:8e:e6:86:7b:09:0e:4a:b3:41:4c:b1:04:3f:54:97:
a7:53:ec:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:59:40 2025 by rpki-client