Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/1c2eb888-b2c0-379d-8a77-cc5b58784197.roa
File: 1c2eb888-b2c0-379d-8a77-cc5b58784197.roa (raw, json)
Hash identifier: kroRDt2kyN84FXZ69ciAoz3g+8VIx5rg+SoEloDmxAM=
Subject key identifier: DE:7E:F5:33:11:7E:DA:1E:7B:D9:A9:14:B5:9C:E9:AD:B7:77:1C:3C
Certificate issuer: /CN=a8be3c5e-6978-49bf-8f66-05aa6b1c2021
Certificate serial: 010D0C9F4328584817050EAE90611A9D03F2B100
Authority key identifier: B4:B5:7A:BC:39:C8:9A:C7:4A:F1:9A:8D:8A:93:1A:5F:5C:76:51:43
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/1c2eb888-b2c0-379d-8a77-cc5b58784197.roa
Signing time: Wed 04 Dec 2024 02:00:39 +0000
ROA not before: Wed 04 Dec 2024 02:00:39 +0000
ROA not after: Tue 04 Mar 2025 02:00:39 +0000
asID: 2496
IP address blocks: 129.237.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:17:05:0e:ae:90:61:1a:9d:03:f2:b1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8be3c5e-6978-49bf-8f66-05aa6b1c2021
Validity
Not Before: Dec 4 02:00:39 2024 GMT
Not After : Mar 4 02:00:39 2025 GMT
Subject: CN=3060f81e-1e65-4300-b3f3-44d45fb51b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:02:95:8c:0e:30:ab:e7:08:96:73:69:eb:13:
b8:da:f9:97:bb:7e:bd:a1:c1:66:b3:eb:05:69:b3:
cb:a1:fd:86:04:78:7d:b6:2a:b2:a2:29:af:0b:ca:
1d:e9:a8:70:85:1d:1a:71:13:b2:ab:87:8c:18:fd:
1c:92:88:54:bf:d2:e3:f0:eb:12:5a:05:1e:16:b9:
85:6d:6f:ed:0d:d7:d3:b6:a5:09:54:ef:ff:7b:e0:
9e:4b:b0:48:10:ae:35:46:55:ea:28:84:01:32:cc:
00:86:02:d5:75:75:f6:d6:18:f8:7c:09:e1:9f:e5:
7e:b5:ff:a6:6d:3d:d7:31:1a:72:dc:cb:3b:58:82:
c6:13:d7:f0:8e:06:fd:eb:41:1f:0b:c0:3f:9f:21:
1e:e5:e1:65:5e:7b:75:c8:14:cd:9d:ed:e7:28:a3:
33:f4:aa:ae:2a:2d:d4:58:95:15:5d:ef:1e:d2:7d:
b9:bc:d3:e3:19:e7:cc:43:d2:4f:cf:0f:20:78:59:
cc:35:67:5e:b2:4d:9c:78:b0:5c:c9:19:ad:ef:50:
ef:a5:fe:9d:f2:b5:c1:9f:39:05:0b:5b:00:d6:f3:
67:53:13:e3:a6:d4:f9:80:f0:57:bf:0e:03:60:a6:
fc:5e:55:ad:4f:71:df:a3:40:91:7f:e9:98:26:c8:
fd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7E:F5:33:11:7E:DA:1E:7B:D9:A9:14:B5:9C:E9:AD:B7:77:1C:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/1c2eb888-b2c0-379d-8a77-cc5b58784197.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.crl
X509v3 Authority Key Identifier:
keyid:B4:B5:7A:BC:39:C8:9A:C7:4A:F1:9A:8D:8A:93:1A:5F:5C:76:51:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8be3c5e-6978-49bf-8f66-05aa6b1c2021.cer
sbgp-ipAddrBlock: critical
IPv4:
129.237.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:85:77:82:d9:c0:f9:60:54:0b:2e:76:d6:d6:d4:f5:7f:3a:
d6:b6:c1:19:06:14:49:e3:6a:11:1e:d3:0d:fe:78:66:89:aa:
9a:04:d4:1e:09:96:12:d1:5d:70:6c:03:ee:b8:65:0d:e9:a8:
cf:8c:09:4b:af:61:4c:59:c4:ab:73:e9:34:bb:0e:4d:81:1b:
7e:ad:9b:d7:e2:54:ad:38:a5:21:a8:5c:6a:70:58:09:9a:cc:
9d:d4:9b:49:2d:d0:07:b3:d9:fd:53:f8:cf:6b:1a:86:e5:69:
8f:c0:d6:b0:f5:9d:84:8d:7b:72:e8:54:5b:e3:8c:37:0c:af:
12:af:e2:5c:6b:f4:53:26:d4:b0:94:fe:90:e8:84:1a:71:6b:
db:b4:18:4e:b1:da:80:80:13:bf:78:f0:dc:37:32:44:b2:a7:
a9:b4:95:0c:b0:0b:a1:e9:12:6a:31:5c:dd:86:ca:e9:15:c8:
c8:fb:5e:6f:dc:94:d2:e3:90:10:0e:e7:dd:a0:5f:94:e0:48:
37:87:14:11:a0:28:20:2b:55:17:26:57:1b:e1:c9:9e:b9:7c:
18:21:73:4c:9c:9d:bf:2c:ba:83:d7:97:aa:47:32:01:c0:e4:
d1:01:10:06:26:26:36:53:96:81:0c:c3:74:38:09:b3:da:06:
90:46:1d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:17 2025 by rpki-client