Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/c4d80417-1177-3190-a2f1-472a5bd4c3ef.roa
File: c4d80417-1177-3190-a2f1-472a5bd4c3ef.roa (raw, json)
Hash identifier: sLIHkocYo8T1Y8PusYUZ6LHhp4DhfL9yQA6xmHeUaYQ=
Subject key identifier: FB:5B:D9:E5:55:4F:61:71:F1:CD:44:1E:CB:65:B7:E0:C8:14:10:6D
Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
Certificate serial: 010D0C9F432858484AAAE19B079185C4AA7EE500
Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/c4d80417-1177-3190-a2f1-472a5bd4c3ef.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 35908
IP address blocks: 100.43.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:e1:9b:07:91:85:c4:aa:7e:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=9f70830d-c30a-4ae1-9cdb-918a6c169f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fc:c4:05:77:a4:65:f1:78:1b:38:f3:73:d4:
4f:a1:5e:33:85:1e:4d:b0:4f:5e:a1:a1:3c:2b:2a:
2b:b0:dc:e2:41:fc:1b:63:b7:8c:24:50:91:45:ba:
f1:63:e9:62:e9:eb:eb:21:4e:9c:91:b9:7a:2b:65:
26:1a:12:68:72:8c:ae:95:8f:83:35:e6:43:fa:e0:
19:f1:13:ed:04:a4:67:92:a9:4b:6c:75:b3:08:d3:
d2:3f:2f:a8:b4:dd:41:7e:90:82:82:65:3d:64:66:
ce:d0:db:ba:bd:36:26:84:45:d5:1a:4d:84:3d:53:
b0:9d:31:1d:d3:dd:55:3c:a7:eb:b7:2b:4c:9a:ba:
82:75:17:2c:77:1e:43:fc:98:bb:60:68:a8:25:d2:
de:e5:8c:58:c5:0d:8e:af:2a:35:7a:7a:cd:6c:16:
ae:40:e3:d0:c4:f5:bf:78:28:38:7e:70:62:fc:88:
1a:0c:5b:ae:69:cd:33:81:0f:1a:75:68:71:3a:a8:
14:a9:db:a5:f4:bc:44:39:27:40:f5:33:0c:f1:19:
99:26:2b:66:da:7d:99:a2:34:62:50:bb:0b:61:e7:
07:92:80:75:3e:9e:40:15:10:76:a1:d2:c4:6e:05:
49:4a:19:6e:28:03:23:e4:2a:fe:aa:98:41:47:79:
2e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5B:D9:E5:55:4F:61:71:F1:CD:44:1E:CB:65:B7:E0:C8:14:10:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/c4d80417-1177-3190-a2f1-472a5bd4c3ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl
X509v3 Authority Key Identifier:
keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
sbgp-ipAddrBlock: critical
IPv4:
100.43.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:0a:11:25:f9:6e:93:5f:86:c4:a1:81:88:e2:29:3a:52:6b:
9c:73:d4:01:58:e7:e2:80:f8:63:c7:26:1f:22:c4:9d:f7:20:
70:00:32:69:f9:8f:93:74:3a:82:a2:f8:a3:29:25:e1:a5:96:
92:87:67:72:5d:bb:82:be:43:21:34:77:e8:3b:9f:95:2f:8b:
ff:22:7c:c7:25:b1:85:d5:e9:e2:5e:db:85:6e:27:a2:c8:ad:
80:3e:3d:63:a2:0f:21:51:cf:d9:54:0e:0a:c8:e3:04:b0:9f:
14:32:2c:af:50:49:85:26:b8:2b:58:36:95:b1:7a:80:d4:31:
5c:74:8b:90:5b:eb:0e:9b:31:78:db:eb:d6:ba:17:d4:bc:d5:
ef:a4:65:d0:c4:bd:0a:15:04:f7:55:17:a2:81:b2:d6:a1:d9:
f5:2d:7f:04:2d:70:fa:64:be:4c:f2:4d:dd:31:4c:21:a0:93:
3e:db:d3:13:e8:1b:b1:5b:ce:32:07:c1:2d:69:37:33:ae:cf:
14:e9:2a:b4:48:9a:c1:83:f3:b6:e7:68:46:24:68:2f:5b:3c:
88:89:92:01:93:b6:e9:83:ca:7d:e0:bd:ef:4e:38:b0:07:22:
14:36:46:e2:33:f7:88:71:92:3a:8c:14:a9:55:d5:fd:e9:71:
df:71:38:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:14:30 2025 by rpki-client