Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/c217b43a-96c4-3cd4-a384-3d4effff1bd9.roa
File: c217b43a-96c4-3cd4-a384-3d4effff1bd9.roa (raw, json)
Hash identifier: OC2MnkzJe+KqculEd+8J+nsX09JVjT4VWun41f0YNrs=
Subject key identifier: B7:C6:E7:E3:FD:42:94:7E:34:01:02:D8:41:65:09:E1:00:12:2D:8B
Certificate issuer: /CN=69df89b1-6446-4f76-b802-330eeb5819c6
Certificate serial: 010D0C9F4328584854703BF74B5DC56602C4F600
Authority key identifier: 3D:58:6B:3F:CD:66:47:01:3A:08:98:AC:85:EF:91:BE:74:EA:AB:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/c217b43a-96c4-3cd4-a384-3d4effff1bd9.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 1706
IP address blocks: 128.196.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:3b:f7:4b:5d:c5:66:02:c4:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69df89b1-6446-4f76-b802-330eeb5819c6
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=03087758-e10f-4e59-8338-5ce1565b634d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:58:2a:6a:27:6d:3f:ac:5b:3c:33:39:3d:b5:
83:16:a6:fd:81:d3:03:7e:26:98:90:08:15:7e:c1:
36:5e:e2:67:60:64:9e:8b:04:bc:cd:7e:2a:19:5a:
86:48:44:b1:c2:eb:ff:c2:56:bd:e5:ff:fc:e5:20:
86:9b:64:be:f4:22:5a:59:23:d8:2c:32:ef:3d:69:
86:4c:fa:58:2e:d5:32:b0:8b:7a:9f:d5:3d:10:16:
f9:87:b0:0d:08:08:a3:84:c7:bb:da:60:36:f9:77:
05:71:36:ef:ea:12:53:6d:45:09:18:ee:18:0d:5a:
cd:e1:ee:03:2a:ba:a5:f6:33:97:3a:16:00:a9:96:
d9:90:68:53:8b:8d:a8:c7:ed:9c:9b:8d:64:a4:f4:
bf:92:6d:f3:93:14:23:63:16:d2:40:12:9d:0c:59:
0e:0c:a0:ad:09:5f:58:79:eb:d4:db:04:4f:7e:94:
8f:84:1f:69:18:5f:c3:b7:1f:58:2f:d0:37:62:d4:
0b:c2:b3:c0:3c:76:b1:a1:4d:a8:1e:34:87:a7:3f:
1c:22:d9:b9:0b:f8:cc:c3:09:20:a0:09:8d:e0:3a:
46:1e:8a:47:c0:1f:3d:0c:53:92:41:2e:8d:d7:ea:
90:1c:e1:48:3e:27:91:98:de:aa:98:04:8e:e4:58:
40:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C6:E7:E3:FD:42:94:7E:34:01:02:D8:41:65:09:E1:00:12:2D:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/c217b43a-96c4-3cd4-a384-3d4effff1bd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.crl
X509v3 Authority Key Identifier:
keyid:3D:58:6B:3F:CD:66:47:01:3A:08:98:AC:85:EF:91:BE:74:EA:AB:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer
sbgp-ipAddrBlock: critical
IPv4:
128.196.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c1:29:97:6e:7f:b5:64:19:3f:ee:e4:76:7a:c2:45:53:d3:04:
fc:fc:a5:35:f3:65:1b:a9:a3:2d:f6:d0:a0:79:3e:2e:88:2b:
76:34:3b:f4:6a:4d:4a:a6:45:b0:69:f5:84:28:7c:71:f6:1f:
fd:70:7e:13:0c:9b:b8:fe:bc:e0:82:b0:74:1a:8a:41:39:85:
b0:cd:27:ad:83:29:f5:cd:66:55:d9:c1:63:33:d7:32:14:23:
dc:9f:30:00:a2:fe:ad:b2:ae:80:5a:dc:09:dc:7a:02:b3:18:
5e:42:44:2a:59:5f:fa:f4:02:e3:d2:cf:e9:b1:09:30:6a:1b:
48:da:bd:d4:d9:69:cb:25:2a:6a:e7:66:31:fb:66:fb:2b:42:
0c:b2:9c:61:ae:3b:f1:24:7e:07:86:6e:a4:00:2b:ca:76:67:
c8:5e:4c:4b:37:b8:e6:01:a2:5f:37:c6:9d:72:54:c5:57:40:
1c:b1:ce:fc:4c:63:b3:f1:5e:1e:2f:dd:32:e7:74:d5:5d:c6:
8c:e5:bc:17:6f:bd:a4:20:ee:7d:76:65:3a:2b:7d:cd:2e:5b:
5b:3b:33:a6:82:33:67:df:52:01:72:54:1e:f8:d4:5b:f0:c2:
6b:6f:4a:a6:5b:1a:88:a3:54:55:c7:95:94:a8:f0:32:4c:44:
51:c6:2b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:57 2025 by rpki-client