Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/87d6315b-8b3b-3ba8-9be4-a5b7433e605a.roa
File: 87d6315b-8b3b-3ba8-9be4-a5b7433e605a.roa (raw, json)
Hash identifier: IjrDOtRPZz6UTWGr5GlElY30uYc0G6eL9cl+w79He1M=
Subject key identifier: 4E:A8:B6:DF:A8:46:75:39:C5:B6:E6:98:58:A6:EF:2C:B9:3E:FC:4C
Certificate issuer: /CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a
Certificate serial: 010D0C9F43285848780AB8A85F5BB5AF6D55F440
Authority key identifier: 11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/87d6315b-8b3b-3ba8-9be4-a5b7433e605a.roa
Signing time: Tue 07 Jan 2025 20:05:29 +0000
ROA not before: Tue 07 Jan 2025 20:05:29 +0000
ROA not after: Mon 07 Apr 2025 19:05:29 +0000
asID: 1299
IP address blocks: 72.251.128.0/19 maxlen: 24
158.62.224.0/19 maxlen: 24
209.25.224.0/21 maxlen: 24
2605:d2c0::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:78:0a:b8:a8:5f:5b:b5:af:6d:55:f4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a
Validity
Not Before: Jan 7 20:05:29 2025 GMT
Not After : Apr 7 19:05:29 2025 GMT
Subject: CN=10ea5be2-d399-4168-9f6f-d72bb9b16b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d9:47:7d:7f:7c:74:56:c4:0c:42:4a:d7:4a:
1a:94:d3:a5:c0:65:4b:34:df:90:2a:29:7c:91:c2:
f9:b5:2f:65:3b:dc:b7:e2:3d:ed:21:07:2b:52:f0:
95:fd:64:18:37:0c:a2:70:af:66:15:92:0d:ac:36:
7f:8e:db:c3:75:ec:8c:9a:34:8f:eb:53:bd:e9:65:
0d:dd:9d:08:24:f8:fc:d0:31:99:8c:bc:55:04:80:
93:36:2d:c9:48:c9:6f:e8:4d:1d:08:95:eb:f0:a1:
6b:06:b6:eb:cf:2a:cf:88:09:3b:bf:58:4f:cd:37:
6e:22:33:39:c6:ed:ce:81:aa:4f:41:51:3f:7d:3c:
48:ed:69:25:96:39:1b:fb:78:c8:36:3f:d5:51:be:
68:8f:27:c3:f0:27:b4:f7:32:98:4e:ab:55:ca:37:
3e:da:48:4d:14:7a:a9:71:34:31:58:90:4a:25:4c:
ca:e2:76:e0:90:37:84:3f:ae:66:75:12:e9:b8:e3:
0a:e4:08:3d:ce:e3:17:62:e2:b5:6d:d8:56:78:bc:
bb:4e:25:3a:49:52:1c:aa:0f:61:b7:f5:e3:92:73:
71:ce:d9:1a:41:44:e6:aa:bf:bb:15:7a:3e:af:8b:
b4:8c:59:08:7d:ba:0d:d0:9e:40:cc:68:8a:60:b3:
4b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A8:B6:DF:A8:46:75:39:C5:B6:E6:98:58:A6:EF:2C:B9:3E:FC:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/87d6315b-8b3b-3ba8-9be4-a5b7433e605a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.crl
X509v3 Authority Key Identifier:
keyid:11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer
sbgp-ipAddrBlock: critical
IPv4:
72.251.128.0/19
158.62.224.0/19
209.25.224.0/21
IPv6:
2605:d2c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:b0:56:7c:cd:ab:ce:22:4b:2c:59:cb:17:10:bb:e0:ce:b7:
f5:1a:04:bf:a3:5a:f8:fd:64:b0:11:2e:be:71:c2:bc:25:06:
77:bb:e5:86:f6:2a:74:c9:2e:08:8f:1d:bb:b0:64:dc:62:71:
93:65:99:ef:2f:3b:1e:a5:c0:8a:6b:ac:d0:75:0d:5e:92:22:
d6:ce:e7:c8:48:4d:76:87:2a:7c:8c:d5:e1:7f:37:7a:5d:21:
a8:f0:79:10:62:d9:c5:ad:ac:5f:6c:ab:7c:0d:2c:c2:b8:a6:
99:1d:22:64:8b:ac:33:5c:a7:4f:03:1a:2f:e1:ef:35:cf:79:
8b:b6:7e:03:89:9b:85:a3:e1:0c:b5:a6:71:af:71:bd:95:dc:
b5:d2:af:5a:83:27:6f:26:3f:ac:14:20:e4:e4:37:e4:6f:ee:
63:d0:3e:80:43:98:ea:1f:ea:6e:1b:a6:bf:2e:6d:9c:bc:c5:
ef:50:32:0e:0a:a3:d0:30:0a:05:b8:74:ed:3a:c6:f0:df:e7:
de:d6:10:1a:2e:f6:c7:cf:ec:bd:b9:80:86:06:f1:0f:ba:f3:
ac:83:7b:b5:55:f0:1b:2a:3f:37:27:e7:2c:5d:14:76:49:a6:
9f:b4:2f:6d:79:ec:a1:a3:7a:29:58:2d:20:22:f6:c5:ee:4e:
b7:96:72:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:22:21 2025 by rpki-client