Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5a972549-41ac-3520-be88-c20f6265afd9.roa
File: 5a972549-41ac-3520-be88-c20f6265afd9.roa (raw, json)
Hash identifier: CF7OKzfHwx8FachwKsPJfMxdMM/aHTHvBB67/CKQ+yM=
Subject key identifier: E7:3E:F2:68:54:47:5B:E7:4E:64:B8:63:83:EC:3A:1E:DD:05:7B:7B
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C315839D4C6D8F64CCE60
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5a972549-41ac-3520-be88-c20f6265afd9.roa
Signing time: Mon 30 Dec 2024 18:10:32 +0000
ROA not before: Mon 30 Dec 2024 18:10:32 +0000
ROA not after: Sun 30 Mar 2025 17:10:32 +0000
asID: 81
IP address blocks: 128.109.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:31:58:39:d4:c6:d8:f6:4c:ce:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:32 2024 GMT
Not After : Mar 30 17:10:32 2025 GMT
Subject: CN=c5c1a7f3-9b37-4245-94b6-8cdc4ed5cd59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:29:72:9d:9d:01:eb:6f:d5:63:1f:0a:18:8a:
8f:15:54:12:22:f2:62:04:4f:a0:8b:23:c8:ac:74:
f4:b9:df:c7:a3:0b:37:1a:12:37:fc:c5:30:5e:d7:
1e:4b:47:2b:cc:a1:35:46:29:94:21:c4:cd:ed:d6:
ee:4c:1e:f8:5f:ed:1a:94:bc:c8:98:6f:b7:3d:1c:
98:f2:46:71:51:bd:3b:50:6d:d7:c7:ef:fd:9e:5f:
d4:5b:11:5c:10:e1:02:8d:ad:d5:78:25:e3:05:16:
90:c6:6c:36:0d:46:5f:b7:a3:d6:42:43:e6:48:df:
97:dd:75:2b:1e:69:f4:f0:ef:c0:5e:93:1e:80:2e:
87:be:fc:7e:b7:4a:22:9c:da:b3:e3:be:a8:06:10:
33:4d:97:d6:8d:93:76:c9:e3:0c:b4:34:46:92:e9:
36:9b:cc:43:fb:3e:54:87:0a:01:b7:eb:a9:d2:9b:
a9:86:6a:6a:88:a2:c0:bc:5d:dd:38:a5:8d:2d:59:
61:9e:07:9d:cd:d2:39:50:7f:97:64:29:d9:6d:d0:
f6:78:54:f0:7a:62:25:6a:e4:74:11:a4:9b:24:46:
aa:af:12:54:21:a0:a2:9d:c3:be:86:69:a2:b8:43:
5c:f9:16:66:1a:65:b5:b6:2b:b9:0d:41:e4:1e:ec:
8b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3E:F2:68:54:47:5B:E7:4E:64:B8:63:83:EC:3A:1E:DD:05:7B:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5a972549-41ac-3520-be88-c20f6265afd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
128.109.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:e4:e6:1e:d8:55:d0:c4:bc:77:0b:bc:02:fd:00:16:b8:ec:
9b:3c:87:b9:e8:d8:67:a2:1c:99:d0:43:ca:9c:28:c1:0e:db:
7e:7d:92:f8:dd:13:0f:90:16:ce:66:f8:e4:6b:d9:ad:64:aa:
6b:fa:92:90:03:f7:42:65:a7:6f:62:b6:8f:78:7c:6d:40:70:
08:d1:95:5c:87:a6:15:1b:b7:1f:39:ca:4b:d0:83:f3:f0:8b:
5e:d1:77:47:b1:48:84:c7:4e:ec:ce:3a:52:f2:e6:95:52:58:
71:fc:d8:b6:72:f7:99:b1:9a:cd:4a:bc:5a:b3:0e:3d:63:96:
d0:50:96:2c:93:b0:5a:7f:5d:07:51:5b:d9:a3:50:6e:94:34:
50:b3:a2:ed:e3:31:d1:f2:80:9b:d1:3b:b6:14:d5:4d:a1:95:
d7:d4:0b:a0:75:7f:7c:5f:36:05:29:ae:6c:04:49:e6:ab:92:
26:42:b3:d4:3d:50:19:d3:b9:d5:7b:a7:89:a5:8f:2a:00:6d:
0d:87:0c:de:ce:f3:b2:8f:34:85:ee:a4:ab:46:77:88:68:a6:
dc:57:ac:a4:9d:0c:3c:73:1d:4c:6d:09:8d:9d:29:67:b6:9b:
29:83:72:e8:0e:79:84:f1:4e:6a:82:09:ee:45:19:92:f5:a2:
51:4f:9b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:12:02 2025 by rpki-client