Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0768b82a-49f9-3aa8-ac77-97de94bb54b8.roa
File: 0768b82a-49f9-3aa8-ac77-97de94bb54b8.roa (raw, json)
Hash identifier: W2MY6QlLTDUdPU2uIja+J9cP829Z7o0n8FDgokEQibw=
Subject key identifier: B4:64:48:57:D3:B9:EC:76:17:C9:C7:B7:B7:9B:69:DF:64:CD:6A:66
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F4328584849456A32E6A1E03BF4FF2880
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0768b82a-49f9-3aa8-ac77-97de94bb54b8.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 62610
IP address blocks: 128.1.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:6a:32:e6:a1:e0:3b:f4:ff:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=2f28593b-7807-4669-9f1b-3b0847e078c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:11:96:77:0a:8b:18:dd:0d:2d:89:0f:78:1c:
e0:d5:5c:a2:36:11:2f:d9:05:35:85:ea:b0:16:8e:
98:c9:b2:3a:2b:04:b9:84:d6:75:22:e4:c4:4f:5a:
a2:f2:1e:f1:bc:79:1a:e1:fd:a6:f0:e8:9f:f4:cd:
e1:f6:97:fa:5b:5f:ab:c6:1c:14:5a:96:20:71:1c:
da:bb:d1:88:98:c0:5f:eb:9e:c0:31:03:bd:c3:e7:
83:16:67:92:2d:78:46:5c:28:ec:3e:56:e0:20:91:
ce:8c:72:a2:27:4c:0f:22:58:9c:37:e6:4e:e7:b6:
6b:f2:5f:19:12:a7:ab:6a:30:bc:70:8a:7f:64:b0:
00:b7:61:c4:fb:6e:ab:ce:62:d9:3f:d5:3c:74:13:
81:37:87:6b:9c:f2:a4:27:6e:01:0f:54:62:66:b1:
55:bf:26:ab:7f:51:2e:51:0a:d0:1d:0b:2e:89:aa:
7b:8f:a3:49:00:e9:f4:96:b7:62:90:d6:a7:8a:b5:
42:30:35:52:41:04:36:ee:f4:dd:b7:06:6b:86:3d:
09:23:1f:00:e7:71:6e:49:fe:88:01:70:ac:d7:13:
91:4c:c4:d0:48:82:88:29:d9:98:a9:b6:36:a1:09:
d2:a8:83:a0:8e:be:56:7d:b9:29:cd:db:eb:fb:65:
41:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:64:48:57:D3:B9:EC:76:17:C9:C7:B7:B7:9B:69:DF:64:CD:6A:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0768b82a-49f9-3aa8-ac77-97de94bb54b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
128.1.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:95:51:b2:92:95:6a:5a:b3:93:c1:1a:3c:d2:f3:af:f9:f4:
11:80:48:65:44:e6:97:65:1a:a3:9b:4a:04:02:4a:d7:cb:6f:
80:c1:35:12:8e:d3:60:ec:28:a1:9d:65:83:3a:9f:ac:a8:39:
36:0c:f3:69:6a:22:ff:1a:a5:9f:44:20:45:4a:df:79:bf:e6:
4a:07:fc:0f:9b:4d:21:ce:6d:e5:cd:6c:d4:fd:46:cb:56:65:
60:87:17:76:7e:07:00:d9:63:3c:df:d8:aa:92:ff:f2:5c:9d:
e6:d9:50:a6:11:a9:3d:30:d0:be:77:71:e4:67:23:cd:19:ab:
dc:90:0e:71:dc:bb:cb:8b:69:db:35:3a:ef:70:2e:c5:92:d6:
91:04:5d:a8:da:8b:5b:e1:6d:27:98:26:72:1f:7a:b7:13:ed:
95:40:ab:4a:64:b3:3f:db:1d:3d:77:b6:4a:67:f3:8d:ff:ca:
4f:d8:7e:af:09:38:67:73:f6:5c:8d:3f:78:26:d0:1a:11:9e:
bd:49:b4:41:71:c4:54:f9:86:6b:e7:5f:73:45:c7:c9:ef:0f:
62:f8:f7:ca:61:0b:47:60:b0:24:54:51:6b:44:89:58:d3:9c:
98:02:3a:71:5d:80:a7:db:4b:60:32:11:f7:34:24:a2:b3:13:
6f:ee:9a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:38:33 2025 by rpki-client