Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/1ac032a5-8cd7-3e77-be6f-9efbd4869ad3.roa
File: 1ac032a5-8cd7-3e77-be6f-9efbd4869ad3.roa (raw, json)
Hash identifier: hMT6g50mnQ21NaOspVbW++a3NttFMqyUxUgsQHvf+ZE=
Subject key identifier: F4:42:9A:C5:00:7C:88:26:F6:2B:60:5F:7B:66:A9:00:AD:98:21:AC
Certificate issuer: /CN=e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff
Certificate serial: 010D0C9F4328584897708FD5D773BFFDAF3F5900
Authority key identifier: 28:93:96:BA:2B:B0:3C:B9:26:0A:C9:E3:9B:7C:8E:CC:B4:88:31:B9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/1ac032a5-8cd7-3e77-be6f-9efbd4869ad3.roa
Signing time: Sun 19 Jan 2025 02:00:39 +0000
ROA not before: Sun 19 Jan 2025 02:00:39 +0000
ROA not after: Sat 19 Apr 2025 01:00:39 +0000
asID: 7896
IP address blocks: 216.128.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:97:70:8f:d5:d7:73:bf:fd:af:3f:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff
Validity
Not Before: Jan 19 02:00:39 2025 GMT
Not After : Apr 19 01:00:39 2025 GMT
Subject: CN=12c50108-97ea-41af-b691-87a76ff86b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:87:9b:7f:94:58:ad:c2:a0:4e:37:f1:98:6a:
6b:cf:1d:78:20:b8:69:f2:5b:40:3b:7f:de:04:30:
e7:8a:72:19:93:c0:ff:58:dd:b7:c7:b4:9b:ca:1e:
b2:ef:35:ff:6d:75:95:33:b2:66:ce:a9:c6:ef:e3:
18:44:59:85:89:25:ce:38:e5:63:99:e0:d5:86:93:
17:43:f4:d5:f9:81:51:08:02:25:b5:9d:35:63:75:
20:95:2f:f9:c7:fb:a7:f4:d8:02:8a:83:8f:10:7b:
71:31:39:72:88:1b:b1:50:42:78:61:c9:7f:34:b1:
a3:d9:93:be:32:b3:a6:b0:6a:dd:01:d9:50:46:5d:
59:58:13:e4:cf:b2:3d:41:c7:c6:a6:37:9e:51:53:
73:b8:9c:cb:84:06:ce:0b:8d:36:4e:c7:96:98:b6:
e0:9d:78:66:aa:6e:8f:a7:3b:30:9e:e1:4b:fc:cd:
96:dc:34:b4:fe:76:c3:7c:2a:f8:39:c0:ce:eb:b4:
e4:23:e8:ae:16:3e:20:c9:26:68:e5:27:c9:eb:d3:
90:2f:f0:29:07:4c:f3:bd:ae:58:36:52:eb:56:05:
ea:94:fe:82:70:f1:28:e4:06:30:d2:96:6f:8a:ff:
a5:a9:14:3d:39:63:f4:7d:dc:12:6d:dd:c8:2b:18:
a1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:42:9A:C5:00:7C:88:26:F6:2B:60:5F:7B:66:A9:00:AD:98:21:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/1ac032a5-8cd7-3e77-be6f-9efbd4869ad3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.crl
X509v3 Authority Key Identifier:
keyid:28:93:96:BA:2B:B0:3C:B9:26:0A:C9:E3:9B:7C:8E:CC:B4:88:31:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.cer
sbgp-ipAddrBlock: critical
IPv4:
216.128.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:2f:cb:1b:8a:c7:8e:a7:df:cf:61:8f:73:cb:d9:5c:b5:04:
8f:ee:3f:72:cc:5b:5e:08:29:e6:47:9e:34:e4:c8:32:f4:c7:
ec:d5:5d:6d:e2:43:58:93:41:ac:e0:a8:30:94:cd:a2:ea:96:
da:45:53:1c:5b:36:f0:e7:43:c6:80:eb:80:94:37:26:73:cc:
24:9d:70:c3:d1:17:06:28:53:f8:1c:cf:2c:d0:ea:fc:77:22:
65:47:f5:da:da:d9:e1:f9:d3:75:07:3f:be:ed:3c:05:fb:36:
42:cc:bd:61:f8:15:b6:c5:85:7e:6b:3f:c3:bd:29:fc:3b:57:
ca:bf:4a:f0:4f:b5:37:c2:59:13:a0:27:2b:39:97:d5:4d:a3:
94:a7:0d:29:75:00:82:c5:02:7e:5a:26:2f:2d:0c:03:d1:ad:
14:28:4b:79:1c:aa:89:71:64:b8:d1:97:fd:48:4b:33:2b:f5:
dd:89:39:48:fe:2a:b5:f8:b4:82:66:29:55:84:26:71:0e:ed:
c6:c3:ba:5e:ae:3f:f0:aa:4d:75:4c:42:d6:ae:ec:00:be:6f:
98:27:69:66:dd:1e:6b:a6:4b:72:b0:8e:bc:55:bb:84:2d:85:
66:04:b7:6e:7f:5e:ce:23:92:62:20:f2:e1:02:63:3b:d3:fd:
63:80:26:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:42:41 2025 by rpki-client