Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/84d4eb80-08dc-4831-917b-fffca15980b4/4250c7dd-c8fe-3f90-9d9d-4c4ee1ecc019.roa
File: 4250c7dd-c8fe-3f90-9d9d-4c4ee1ecc019.roa (raw, json)
Hash identifier: 8HZfZWZEh/YLBaleL+vz69+15NDWWuwREA9TTCYlPyU=
Subject key identifier: 2C:09:33:85:B4:DD:4B:F4:34:FD:75:08:2E:B1:CC:7E:19:18:21:EB
Certificate issuer: /CN=84d4eb80-08dc-4831-917b-fffca15980b4
Certificate serial: 010D0C9F4328584894A5EAACF9B091B48D714A00
Authority key identifier: 22:AB:CC:EC:F5:E7:52:9F:36:7C:65:DD:7F:3C:69:8E:B0:3D:C9:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/84d4eb80-08dc-4831-917b-fffca15980b4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/84d4eb80-08dc-4831-917b-fffca15980b4/4250c7dd-c8fe-3f90-9d9d-4c4ee1ecc019.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 2544
IP address blocks: 146.129.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:ea:ac:f9:b0:91:b4:8d:71:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d4eb80-08dc-4831-917b-fffca15980b4
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=faa74da1-b711-488e-8144-13876868ae23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:89:c5:25:37:99:1b:8c:7e:df:86:3b:7a:b9:
20:67:e9:17:d4:33:42:e2:d0:50:04:79:3e:f1:e0:
11:9a:46:2e:a3:03:e2:4b:d4:2d:29:62:ba:1f:95:
a2:83:14:40:f1:a4:32:cc:70:59:ab:48:24:55:20:
30:bc:ec:36:24:75:71:df:6c:51:48:8a:f0:1d:f2:
77:65:d1:79:8b:dc:6c:10:a6:3c:2c:2a:65:59:54:
ac:8d:51:a2:8d:04:55:e7:96:33:be:10:59:79:10:
3d:c0:0d:f3:0f:db:a5:c3:1a:34:63:cc:6e:8e:1d:
a5:da:17:f4:06:73:9d:3c:84:af:ed:4c:4e:a7:25:
5c:11:0e:de:89:40:50:44:ae:ef:f2:d9:8f:38:b5:
b7:d9:20:d8:a7:77:f9:23:24:5a:9d:4a:3e:04:be:
47:bd:26:4c:31:7d:7f:47:46:2d:c1:f0:24:34:bb:
2f:a5:33:7a:0e:2b:b0:d5:93:d9:3e:29:1c:7f:0d:
0f:96:30:1b:8c:84:53:ab:d2:e8:9f:63:b4:51:71:
9c:3d:cc:95:30:42:6d:38:25:1d:9b:aa:15:b3:f8:
3f:c2:40:46:d4:c8:9b:51:c5:ee:fc:26:dc:fe:11:
34:e6:b2:92:95:5d:22:de:80:56:a0:61:c1:61:02:
87:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:09:33:85:B4:DD:4B:F4:34:FD:75:08:2E:B1:CC:7E:19:18:21:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/84d4eb80-08dc-4831-917b-fffca15980b4/4250c7dd-c8fe-3f90-9d9d-4c4ee1ecc019.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/84d4eb80-08dc-4831-917b-fffca15980b4/84d4eb80-08dc-4831-917b-fffca15980b4.crl
X509v3 Authority Key Identifier:
keyid:22:AB:CC:EC:F5:E7:52:9F:36:7C:65:DD:7F:3C:69:8E:B0:3D:C9:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/84d4eb80-08dc-4831-917b-fffca15980b4.cer
sbgp-ipAddrBlock: critical
IPv4:
146.129.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:96:6e:c7:4f:06:e7:ed:bf:e9:7d:eb:ca:1f:2d:28:5c:10:
ec:27:b3:f6:9a:06:9e:3b:8d:7e:0b:42:39:47:0c:a8:d9:73:
64:0a:ac:2e:e0:ad:2b:a5:12:c7:21:8e:75:16:65:58:13:65:
27:8c:4f:65:cd:d8:18:05:d7:66:0e:2d:d5:47:e7:58:0a:32:
10:d6:dc:f9:8d:e9:7f:cb:3a:82:da:d0:0d:cc:9d:db:08:82:
5b:d4:0c:56:0b:7d:7d:65:fb:30:2b:53:a9:29:1b:f6:fd:81:
68:60:3d:76:40:61:92:9f:8f:0a:50:68:c2:6d:d3:0d:b0:5a:
52:17:84:a9:a7:37:85:ae:fb:2d:4f:8f:64:40:0e:2a:eb:c1:
7a:1a:1a:73:46:ef:12:b0:22:fc:8c:b1:7e:bc:1b:40:ca:41:
87:27:98:95:42:bf:87:bf:c2:df:b1:7d:6d:3e:3b:10:85:b9:
71:f1:8a:40:34:5f:36:ed:e8:ba:c3:b4:44:52:ab:72:f4:61:
96:83:29:9f:6d:61:fe:54:03:7f:8b:dc:f7:21:d3:dc:0d:01:
2a:fe:5e:45:9d:18:66:bf:e2:30:cc:5f:0c:b0:27:1a:4a:09:
e0:ac:a1:6d:ba:66:f0:41:e0:80:70:08:d0:7e:6c:ff:a8:b0:
9e:02:2a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:51:44 2025 by rpki-client