Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/8b53ab0a-c85c-3b93-8b70-07a56b5b3dad.roa
File: 8b53ab0a-c85c-3b93-8b70-07a56b5b3dad.roa (raw, json)
Hash identifier: gHxI9hJ9nSNUXxkFidZPg4NCoXrGJOpqxw/UgIX331Q=
Subject key identifier: 11:7B:1A:A2:9B:65:F1:1A:46:76:99:8C:9F:C5:5B:9B:4D:D2:A4:1B
Certificate issuer: /CN=df298930-fdd9-473b-93ed-6736f8296931
Certificate serial: 010D0C9F432858487E5069DE9E86E830769BCB00
Authority key identifier: E8:19:25:7A:88:CF:CD:31:EC:25:C8:20:0F:7A:92:FE:1A:E0:AF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/8b53ab0a-c85c-3b93-8b70-07a56b5b3dad.roa
Signing time: Fri 10 Jan 2025 02:00:40 +0000
ROA not before: Fri 10 Jan 2025 02:00:40 +0000
ROA not after: Thu 10 Apr 2025 01:00:40 +0000
asID: 2055
IP address blocks: 130.39.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7e:50:69:de:9e:86:e8:30:76:9b:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df298930-fdd9-473b-93ed-6736f8296931
Validity
Not Before: Jan 10 02:00:40 2025 GMT
Not After : Apr 10 01:00:40 2025 GMT
Subject: CN=d16667fd-7103-4f00-9065-70d1fcd163c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3d:d3:32:a6:f8:8b:ef:73:39:5f:c4:4b:4e:
1a:f3:d0:e0:6f:d0:5f:4d:4e:42:6c:b4:97:13:db:
b1:fa:82:e6:b4:87:f7:27:71:c6:81:36:d1:3f:cd:
a0:3f:19:64:6e:b5:38:f5:72:eb:38:48:da:b5:d6:
87:d0:9f:8e:20:ba:66:31:a6:b5:7f:d8:dc:a0:d1:
26:16:a3:a6:38:cb:99:51:1b:f1:90:97:09:ec:7a:
7c:95:fa:17:10:54:33:58:93:83:74:a4:c0:cb:07:
4a:5a:fb:18:ee:92:ff:07:9e:8b:b7:43:3e:07:f2:
e8:aa:02:1c:31:a1:17:10:e6:5c:04:0a:9a:6d:b0:
ec:77:39:7c:de:d9:20:47:18:2c:da:60:ea:a5:88:
ad:87:93:c6:40:d2:bf:b0:79:a4:a9:5e:17:2c:19:
ec:74:81:8b:4a:64:53:e8:02:0d:06:9e:69:30:0c:
39:0b:b3:05:64:98:0e:d7:35:b8:c5:4c:24:9f:c9:
94:06:d2:b6:19:73:67:e1:22:7f:d6:b7:1b:a4:19:
92:dd:51:65:14:97:38:4b:9f:ee:bd:7f:8d:ef:be:
2a:bf:93:d9:eb:77:c0:6c:69:80:ca:0e:a1:55:d4:
89:68:3a:d5:5f:39:9a:ef:0c:2b:55:50:41:2d:57:
4b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7B:1A:A2:9B:65:F1:1A:46:76:99:8C:9F:C5:5B:9B:4D:D2:A4:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/8b53ab0a-c85c-3b93-8b70-07a56b5b3dad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/df298930-fdd9-473b-93ed-6736f8296931.crl
X509v3 Authority Key Identifier:
keyid:E8:19:25:7A:88:CF:CD:31:EC:25:C8:20:0F:7A:92:FE:1A:E0:AF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931.cer
sbgp-ipAddrBlock: critical
IPv4:
130.39.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:50:8a:21:fa:8e:f8:27:52:32:f0:14:ae:e1:cb:b5:1d:67:
7e:c0:20:57:b4:7f:39:0e:52:74:b0:ee:8d:63:3e:30:35:24:
70:c3:38:b4:5b:6c:55:77:f8:d9:8a:6a:9d:48:a3:9a:54:0f:
7d:19:59:6a:ba:64:94:ad:00:1a:0d:4b:0b:4b:e6:04:58:f4:
27:42:56:81:8f:5c:6e:a6:71:5e:37:8b:36:c6:29:73:27:71:
6b:7d:af:18:fa:7b:65:b3:dc:81:e8:90:ba:0c:be:32:54:3b:
16:a2:7c:8a:a3:d1:7f:97:2e:32:70:f0:d7:39:9a:ea:e7:e0:
07:a9:a9:25:85:fe:bf:31:ea:42:02:92:fe:fd:65:3c:6f:9e:
4a:19:fe:a9:55:65:97:e5:f8:d1:d3:a1:ec:b9:10:ed:69:91:
a8:62:77:d7:44:ed:4a:71:12:29:92:9c:e3:fe:54:b2:02:4f:
c5:0e:31:ba:03:a1:bf:6c:5c:b1:42:77:3a:7a:42:9f:bf:f6:
56:b8:16:9c:0e:35:eb:33:08:6f:1d:8b:63:fa:27:29:c9:39:
56:a5:ed:83:6c:0e:b7:9a:9d:2c:7e:0d:8f:b0:0b:c4:09:6c:
20:d2:73:95:56:64:cd:bc:1c:ba:18:12:6a:88:9d:4c:bb:f1:
7f:6c:b4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:35:39 2025 by rpki-client