Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/e9da57f8-2566-3d24-9238-98da3a3c87ff.roa
File: e9da57f8-2566-3d24-9238-98da3a3c87ff.roa (raw, json)
Hash identifier: MTIIdsYinpjS52SI47IfGdPdJUzs0XV7YWwx89TZLEc=
Subject key identifier: F2:90:4F:67:60:F4:1A:D6:6D:B2:93:F6:48:8D:2D:F9:76:C2:26:3A
Certificate issuer: /CN=7aba55ae-833a-4487-8be1-9b997adbbec9
Certificate serial: 010D0C9F432858484515830F0F58DD6FF31AA3B0
Authority key identifier: 9B:B9:AA:F7:14:07:24:F9:63:FA:BB:15:32:7F:AD:AA:C9:11:2E:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/e9da57f8-2566-3d24-9238-98da3a3c87ff.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 22773
IP address blocks: 134.195.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:83:0f:0f:58:dd:6f:f3:1a:a3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aba55ae-833a-4487-8be1-9b997adbbec9
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=e84e532e-f72b-4ac5-b471-dfa3720c7f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7d:41:fa:b8:da:fc:e1:96:f9:f1:b9:b4:8d:
0e:17:6f:19:51:e9:52:55:7c:a5:9e:96:fc:48:07:
50:0b:ac:7a:63:40:d4:1f:7e:2a:c3:f3:da:2c:e6:
bf:00:90:08:cf:98:1c:c0:a0:2e:28:d2:f3:1b:d7:
10:da:e1:fd:fc:9d:f7:60:8d:2a:98:b4:8a:bf:77:
41:40:ca:c6:c7:22:1f:ad:02:30:23:e7:ab:e6:e9:
35:cf:be:64:0f:fe:d0:37:80:e6:0a:48:e9:48:10:
43:97:cb:f2:5c:c4:b3:d8:b0:d0:39:c5:04:f7:ad:
76:c0:43:d5:20:0a:67:45:0c:bf:7a:d4:a3:2f:ca:
95:02:ba:bd:4e:6b:cc:4f:11:85:8c:87:59:c7:db:
d9:23:de:bf:f9:38:da:f0:bb:e6:b9:7c:f0:9e:e4:
28:22:58:7a:35:11:0a:88:08:ee:1f:3b:7f:f0:b1:
c5:04:70:fd:99:2d:6c:46:91:e1:66:ca:86:96:93:
08:94:55:d0:53:d4:05:09:53:bc:8f:b2:41:1f:f6:
e2:0c:2f:81:6c:93:fc:cf:75:54:33:c5:60:b2:1a:
4d:90:98:15:6a:90:60:3d:c4:eb:20:e7:b8:e3:26:
ae:4a:f0:d3:e5:0a:74:76:59:cb:1d:d1:90:c2:47:
20:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:90:4F:67:60:F4:1A:D6:6D:B2:93:F6:48:8D:2D:F9:76:C2:26:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/e9da57f8-2566-3d24-9238-98da3a3c87ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/7aba55ae-833a-4487-8be1-9b997adbbec9.crl
X509v3 Authority Key Identifier:
keyid:9B:B9:AA:F7:14:07:24:F9:63:FA:BB:15:32:7F:AD:AA:C9:11:2E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9.cer
sbgp-ipAddrBlock: critical
IPv4:
134.195.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:e7:46:33:52:f6:5f:b2:34:28:22:a1:8f:ec:8f:ba:97:e5:
07:ae:05:c8:03:4c:ac:fa:ea:91:a3:fd:31:f1:f6:bc:46:70:
39:d9:eb:28:67:65:f9:cd:89:73:fb:9d:51:1f:3c:bb:a6:c2:
1c:c1:94:58:cd:98:26:ef:d4:33:6a:8a:94:c6:21:c2:9e:b0:
09:ac:d4:70:33:03:aa:e7:bc:31:a7:97:fa:7f:e3:d2:72:6e:
60:a8:90:92:b6:00:a9:8b:35:1c:f5:ee:08:06:31:75:9b:37:
3b:cc:af:1a:42:8e:42:aa:96:c0:35:7b:05:e7:3d:57:1d:99:
78:67:76:62:94:01:e5:c4:cc:63:d4:15:36:e5:9e:d2:e1:14:
3a:0f:46:7f:ce:06:40:9e:df:ee:ea:3f:04:02:51:a9:0a:bd:
4b:ed:fd:3e:6f:31:2d:31:be:0e:7f:c8:ae:f5:02:43:95:e2:
a6:7c:d6:cd:78:13:ac:bf:94:d8:95:c8:2e:c0:44:1c:49:27:
cd:11:74:ef:0e:fc:39:02:f8:39:10:8b:3e:58:e3:c7:ae:58:
83:a2:2f:54:40:91:43:3f:dd:b3:a6:47:86:81:10:1f:46:79:
d5:4f:19:11:ca:a2:70:90:d2:74:48:c2:65:cd:ff:1b:96:28:
6d:78:0e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:12:55 2025 by rpki-client