Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0ba9dad0-01be-3700-ab1f-214f03dc7ec2.roa
File: 0ba9dad0-01be-3700-ab1f-214f03dc7ec2.roa (raw, json)
Hash identifier: zxnILmgRkhZGde2rCcPgHXvMLo0Bodw1X2MtHyEdyWQ=
Subject key identifier: C8:5E:22:53:84:17:71:7D:6F:AB:1D:4B:8F:1A:0F:C8:CD:EE:68:0C
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584838855D9C59F76C6958142E80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0ba9dad0-01be-3700-ab1f-214f03dc7ec2.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 1225
IP address blocks: 129.250.53.64/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:5d:9c:59:f7:6c:69:58:14:2e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=76f737ca-7eea-4531-af41-c06a4538a16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:21:3b:2b:ff:bb:09:16:84:e1:f3:9a:80:2a:
0a:64:f2:1a:f4:55:38:36:45:2f:9c:a0:d5:69:07:
a8:26:06:4c:e4:c3:ef:ad:bb:b6:3f:80:4f:b2:ce:
16:a4:d2:0f:1c:f5:71:71:b2:03:6b:71:15:2d:01:
e2:2f:6b:be:67:96:9a:71:7b:66:ff:34:83:e4:8a:
a2:56:b0:05:ca:60:c8:99:82:fa:e5:ce:ee:75:26:
33:15:5f:19:99:2c:9a:ae:44:bc:96:fe:14:13:27:
fc:17:8a:c9:37:37:4b:d2:f4:e7:e6:d8:05:0b:f1:
2a:9c:76:26:29:78:0b:05:32:b0:c7:6f:34:45:e5:
f6:a9:96:cd:50:4c:2f:b1:2e:76:14:c5:db:ea:4a:
c8:3a:85:c0:7a:29:01:92:4f:90:8a:79:2b:a3:60:
ef:98:a9:2b:e1:1f:fd:b5:20:37:fd:93:b2:44:7e:
65:c5:23:08:19:52:d7:ae:0b:72:ca:d5:49:15:98:
0c:9c:db:22:ba:a7:2e:04:a9:e6:f7:91:ed:37:9b:
70:d5:cd:d2:cb:e6:99:7e:d7:1c:c2:97:ac:bb:0b:
27:74:69:ae:81:f9:9f:88:32:ba:51:c6:6c:2a:cf:
cd:11:8e:b8:17:6d:66:b5:6b:c9:f7:94:8a:71:43:
42:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5E:22:53:84:17:71:7D:6F:AB:1D:4B:8F:1A:0F:C8:CD:EE:68:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0ba9dad0-01be-3700-ab1f-214f03dc7ec2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
129.250.53.64/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:55:af:b9:e3:24:af:3e:aa:a7:2b:3b:7c:d7:bc:57:58:50:
88:91:21:2a:34:41:54:92:b7:a2:51:11:42:d2:a8:da:ba:9b:
bb:61:f7:26:81:43:76:60:10:d7:45:31:0c:b3:92:a3:5c:00:
4d:2c:66:df:72:4b:36:67:d0:b8:9e:32:46:eb:a8:2d:80:c5:
87:60:e2:8f:8d:4c:64:86:83:d7:f3:9f:3d:c0:2e:59:50:7e:
da:00:6f:97:21:63:51:d9:b7:a3:3f:80:b4:da:a1:8a:6f:0b:
d3:d9:0b:d1:ed:23:8c:a7:1a:e5:28:56:79:3d:ab:88:5b:68:
90:c5:0e:8b:a8:1c:b4:ec:01:f3:83:31:a3:cc:88:b3:a0:e2:
bc:6d:eb:e7:79:34:7e:b3:b7:3d:36:98:01:54:83:dd:48:43:
17:a0:1c:7a:e6:91:8a:34:12:21:71:08:11:88:5f:cb:ef:3b:
bb:ab:52:24:36:13:97:f0:04:2e:0e:97:4e:4f:4b:d7:14:ab:
9d:86:17:8d:00:8c:ec:17:37:25:a5:43:ad:18:0d:bf:f9:8c:
7a:26:a9:42:b6:65:42:84:06:33:0f:b0:12:03:da:69:b7:11:
d1:76:b6:5e:0b:83:45:98:d6:13:df:0d:3d:de:66:57:53:a5:
15:f0:20:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:00:10 2025 by rpki-client