Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f9e10e40-55a1-3701-afc8-05c9fa64e0aa.roa
File: f9e10e40-55a1-3701-afc8-05c9fa64e0aa.roa (raw, json)
Hash identifier: E4Bu3+/XmhQiyvhq/txDsKIuaLsjq37MP4SJvwoM8vE=
Subject key identifier: 5A:A1:51:20:96:F0:3B:BF:1C:F8:A2:B3:03:6D:68:95:7B:65:0C:84
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C31BA5B5814BA31B90880
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f9e10e40-55a1-3701-afc8-05c9fa64e0aa.roa
Signing time: Mon 30 Dec 2024 18:10:32 +0000
ROA not before: Mon 30 Dec 2024 18:10:32 +0000
ROA not after: Sun 30 Mar 2025 17:10:32 +0000
asID: 81
IP address blocks: 128.109.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:31:ba:5b:58:14:ba:31:b9:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:32 2024 GMT
Not After : Mar 30 17:10:32 2025 GMT
Subject: CN=a9647188-7507-4e43-83a8-42227b07ad03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ca:68:ae:5a:51:4d:12:42:71:89:f4:3d:b2:
78:ab:52:ef:1b:1c:95:7c:e0:85:1f:07:f9:71:fc:
68:71:1a:02:13:7e:36:e3:af:f5:b6:6b:a7:62:f4:
79:e2:73:92:7d:ab:50:78:3e:e9:aa:de:6f:0d:41:
57:df:a9:5f:74:56:98:ce:f4:69:b2:3e:cb:cd:9f:
f3:ff:a0:55:55:7b:6e:fe:64:d3:da:1a:93:f7:50:
28:69:7b:5c:20:60:66:74:fa:4e:ec:82:d2:34:77:
c1:fe:11:dc:72:78:e8:f8:cc:09:e5:a9:0d:8c:e7:
81:f9:ff:5c:8b:91:7e:9b:bc:b1:4b:c9:bf:01:c6:
9a:38:4a:74:11:4f:40:a6:1c:84:bf:4b:e7:61:eb:
d7:df:02:41:f6:c0:e6:7f:54:97:fb:31:3a:23:35:
da:25:2f:0f:3b:70:a2:8b:ef:15:ba:7d:e9:d2:9b:
94:2f:6e:51:5f:50:b6:04:0f:60:d6:1c:85:99:77:
a4:79:c5:34:02:2c:a0:06:59:51:6b:c4:c9:3f:05:
e3:2d:a9:2c:fe:35:c2:28:d1:34:ae:0c:57:0e:ec:
23:ab:32:74:b7:3c:2e:93:c4:10:51:83:35:4c:64:
d6:a9:27:cf:37:20:29:56:b8:4a:e1:0b:b9:5d:cd:
51:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A1:51:20:96:F0:3B:BF:1C:F8:A2:B3:03:6D:68:95:7B:65:0C:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f9e10e40-55a1-3701-afc8-05c9fa64e0aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
128.109.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:62:4f:b6:6d:7f:cb:9d:05:09:c3:f7:4a:3e:d4:d4:29:b1:
d5:28:56:30:9f:fd:5c:c2:35:74:b3:1e:56:43:86:fe:f4:06:
80:1b:78:bc:8d:10:16:e0:ff:9e:1e:37:ac:25:81:2f:61:d2:
ae:9b:d7:78:73:81:a8:9c:9d:8c:ca:d4:37:d1:3e:70:bf:5d:
6a:c9:6d:3e:28:64:e3:db:a7:c9:fc:ea:17:0a:7b:c5:e3:08:
6f:c4:cc:bf:8c:f1:8f:bb:03:ae:89:de:85:eb:8e:3c:4e:cc:
08:b5:56:28:87:c1:23:7c:75:10:15:7d:60:d5:e9:c4:31:3b:
3e:4d:97:f7:98:06:c4:e9:1e:93:0d:2c:58:2c:c0:ff:f7:b6:
4f:ee:c1:fd:9a:21:60:da:23:2e:f7:14:3f:2e:91:03:78:47:
aa:f1:aa:09:1e:a3:7b:f4:ac:a9:9c:f9:a7:65:8d:2b:f4:51:
9b:d8:49:26:5f:12:6b:de:c8:e3:5b:2e:60:6f:95:82:0e:b0:
fe:7c:e6:aa:f9:41:03:7e:46:d8:2f:37:19:00:7a:21:a0:29:
2e:ce:4c:ba:4e:01:30:af:bb:42:f5:5a:36:c7:09:3f:df:62:
f8:b2:8e:34:b9:c5:5c:c4:06:cc:e7:f5:e3:de:47:cb:74:82:
e9:9e:f2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:12:25 2025 by rpki-client