Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8e426359-21e5-3633-8356-c2a41652ce59.roa
File: 8e426359-21e5-3633-8356-c2a41652ce59.roa (raw, json)
Hash identifier: 8vQfSytB5V7p0q+vIavkuJyQSjsBSSGrYEy2YNWP0z8=
Subject key identifier: 04:11:CD:A1:C9:1F:A4:5A:DB:58:4B:F3:C4:58:8E:F4:22:FB:67:E8
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C31E27BABC3EA2B317E00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8e426359-21e5-3633-8356-c2a41652ce59.roa
Signing time: Mon 30 Dec 2024 18:10:32 +0000
ROA not before: Mon 30 Dec 2024 18:10:32 +0000
ROA not after: Sun 30 Mar 2025 17:10:32 +0000
asID: 81
IP address blocks: 128.109.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:31:e2:7b:ab:c3:ea:2b:31:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:32 2024 GMT
Not After : Mar 30 17:10:32 2025 GMT
Subject: CN=9e8f6af5-8bcd-42a5-8c11-baa9a9eae053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f1:0a:e5:fd:8a:4f:aa:7d:1a:a8:54:a7:fa:
51:c7:7c:ea:4b:f0:e8:5d:2a:65:00:53:be:73:0a:
c4:64:25:0d:6e:86:92:dd:c9:67:0b:db:4e:2b:39:
e3:f5:4e:7e:25:af:ad:95:7a:4e:8a:a9:97:44:aa:
c2:5d:5b:df:82:49:ac:7a:b7:aa:51:a5:da:ca:4b:
0f:98:bf:bc:75:18:bb:6e:da:59:9c:2c:71:ae:51:
4a:20:10:9c:0a:24:d4:5b:0f:ab:fd:c7:a2:8f:93:
9e:28:29:05:5f:e7:fd:95:12:80:33:eb:89:8f:0c:
62:5f:2e:0f:8f:cb:fa:03:b0:96:e3:4e:f1:0d:b0:
ce:b1:c2:18:12:90:48:bc:f5:82:5b:39:4d:52:10:
cc:7d:6b:2d:47:43:36:36:d2:ff:1c:2a:de:4c:e9:
03:9c:19:6c:a2:3f:55:d1:8b:ff:7c:8c:b6:2e:c6:
1c:b7:bc:e0:9f:12:c5:57:dc:e1:63:db:2b:f9:03:
23:86:00:27:7b:39:38:53:d1:f9:e6:86:12:6a:5b:
73:8d:9a:eb:d3:6f:db:0a:75:d9:61:69:6b:08:ea:
f6:d5:e3:28:ab:ae:87:18:0a:e6:2a:ec:53:9b:69:
64:75:89:3e:e6:7a:3e:c4:86:5c:9f:0b:b7:a2:5b:
3c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:11:CD:A1:C9:1F:A4:5A:DB:58:4B:F3:C4:58:8E:F4:22:FB:67:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8e426359-21e5-3633-8356-c2a41652ce59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
128.109.193.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:2b:f4:6d:75:58:37:f7:b3:26:28:04:77:17:aa:d6:d7:c0:
ea:59:88:a2:26:ad:d3:97:b4:e1:ea:4a:2b:86:cb:b6:e7:64:
3a:f1:7e:c9:99:de:cc:5a:f4:fe:ef:8a:42:0a:88:f9:e7:4c:
0f:37:ed:69:1c:e1:60:a5:0c:0b:74:95:a3:40:3e:43:09:37:
68:3d:64:87:95:8a:f8:1c:ae:27:ae:fa:1a:5b:a7:9a:0b:46:
40:a5:f2:8b:ff:81:5e:74:c0:3c:68:7c:ba:8a:8f:82:73:d3:
fd:7f:d9:1d:84:69:ec:cb:48:e5:49:33:32:2c:04:5b:e5:6b:
bb:19:89:96:0b:a2:ab:b8:45:eb:20:f9:3b:d5:ac:03:9c:f2:
82:8a:20:53:c5:d1:45:db:bb:1f:e6:da:ff:f0:55:53:cf:13:
6c:9c:0d:f2:6d:35:b2:67:4d:d7:08:7a:22:c3:3e:5a:87:43:
3f:55:0a:d2:1a:4f:db:b2:29:9d:45:ac:58:f0:a4:03:64:df:
ef:2c:a5:fc:cd:16:07:ff:75:ed:a8:2f:7e:f5:a8:79:12:fe:
50:07:f9:11:d5:7f:dd:18:a3:d2:f2:fc:6f:dd:77:ea:d2:d9:
fb:2d:89:be:0b:eb:92:5f:ba:37:e1:9b:b4:be:64:1e:a9:e9:
07:f5:8b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:11:49 2025 by rpki-client