Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/f26d7d43-d275-3402-8ae5-5579450cdc70.roa
File: f26d7d43-d275-3402-8ae5-5579450cdc70.roa (raw, json)
Hash identifier: /pDkuZ5XG02AQw/zsiF7oUnq1YHpcFpGoCkX5g+aRaw=
Subject key identifier: 81:82:5D:70:E1:FE:C7:5F:6B:F7:A1:54:E7:96:66:70:6D:44:C5:7B
Certificate issuer: /CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
Certificate serial: 010D0C9F432858488F10803B81E537F33FFE7600
Authority key identifier: 3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/f26d7d43-d275-3402-8ae5-5579450cdc70.roa
Signing time: Thu 16 Jan 2025 02:00:39 +0000
ROA not before: Thu 16 Jan 2025 02:00:39 +0000
ROA not after: Wed 16 Apr 2025 01:00:39 +0000
asID: 15171
IP address blocks: 144.86.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8f:10:80:3b:81:e5:37:f3:3f:fe:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
Validity
Not Before: Jan 16 02:00:39 2025 GMT
Not After : Apr 16 01:00:39 2025 GMT
Subject: CN=7f95be9a-7f28-482d-b8c9-ff4dde725cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:31:53:d5:35:ac:06:03:18:e3:c5:fb:45:91:
79:0f:03:13:79:f2:ca:c8:af:a7:f0:b2:7c:d7:0f:
35:f2:db:03:1a:93:5f:0c:d6:0f:5f:8d:01:1a:5f:
54:7a:68:3e:8c:8c:4e:31:e7:16:77:68:3f:87:d3:
5a:dc:8e:d7:ff:07:88:ec:1d:a2:09:ec:7e:d7:31:
f6:33:29:6f:85:6f:6e:d3:94:77:49:d6:06:28:6a:
26:c2:66:d0:9b:ac:2d:46:d7:27:e4:e4:44:3c:1a:
bf:17:8b:af:d7:3f:61:5a:21:3a:c3:b2:c4:77:19:
ff:86:c8:78:58:9a:c3:79:58:43:8c:66:82:5c:25:
fe:3e:60:33:50:48:51:e7:be:eb:bd:8b:83:c5:80:
d3:fd:fe:14:1b:15:07:db:41:82:04:cc:ca:0c:61:
03:b3:67:e9:0d:d5:0a:81:3d:c0:ed:50:25:e5:d6:
fd:0e:a8:bc:ff:88:0e:2c:d5:1b:78:0c:02:34:91:
d6:49:f9:b9:6d:f6:15:eb:8f:28:40:2a:b5:55:23:
c3:68:17:cf:7b:c2:a6:ab:74:e4:77:76:d8:9d:3b:
d1:48:ca:1a:2f:07:a2:1a:0e:f4:ef:be:62:75:a5:
9b:37:53:11:89:f5:4c:46:33:66:75:ab:43:ce:06:
f8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:82:5D:70:E1:FE:C7:5F:6B:F7:A1:54:E7:96:66:70:6D:44:C5:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/f26d7d43-d275-3402-8ae5-5579450cdc70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.crl
X509v3 Authority Key Identifier:
keyid:3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer
sbgp-ipAddrBlock: critical
IPv4:
144.86.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:1f:47:f0:fc:34:53:fd:2c:e8:a3:98:ff:00:e8:02:f1:68:
ce:f6:10:d6:b6:b9:f1:9a:b2:30:15:f8:8b:02:09:97:5a:76:
3f:58:ba:58:15:2c:c9:08:31:ef:f9:9d:27:ab:71:df:0c:c9:
08:63:51:54:b2:70:47:a5:2d:ee:b8:26:eb:a0:e7:9a:a0:5c:
25:44:8c:5c:1f:56:86:09:2e:9c:da:f5:f2:94:ff:11:72:dc:
18:35:7d:ce:a7:b4:2e:39:14:58:04:a9:17:93:21:6c:2d:11:
19:9a:9f:bf:01:2e:50:82:7f:11:fc:7c:1c:60:89:51:e0:16:
64:72:0e:2c:b0:02:6d:27:e8:41:24:bd:2c:a1:43:00:65:71:
0d:9c:82:e4:36:54:3c:63:8b:29:f3:45:e7:d9:11:11:18:e6:
3a:b7:f9:59:52:29:13:e2:a5:5c:35:ea:b4:3b:92:7e:9c:af:
64:b6:06:b8:7c:bb:12:66:c3:2f:04:0b:7b:1d:15:39:b6:b7:
49:9f:91:89:73:49:66:ed:1b:d2:6c:88:37:ee:ea:71:e2:b8:
3b:2f:36:52:38:29:a2:51:c5:d4:e7:a8:50:2f:9d:8d:42:91:
06:c3:3e:25:63:78:81:d8:28:7e:ed:d4:c0:46:59:60:c9:8b:
89:b7:69:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:02:44 2025 by rpki-client