Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0e62a5ec-6384-371b-aaea-44fd0649d91d.roa
File: 0e62a5ec-6384-371b-aaea-44fd0649d91d.roa (raw, json)
Hash identifier: fkNKmyic+iaVxjUYPqCPvVNSa14DLjQBlAZ9ctkIf0I=
Subject key identifier: CD:71:63:C2:DD:79:42:5F:E3:EC:AD:F6:36:EB:25:9A:B9:7B:32:DF
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F432858486C2B0FAAD369FC08DF26EAD8
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0e62a5ec-6384-371b-aaea-44fd0649d91d.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 62610
IP address blocks: 128.1.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:0f:aa:d3:69:fc:08:df:26:ea:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=4233f7aa-c92a-4bda-9df0-d1195de776b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2f:7b:b3:d6:c5:3e:da:9e:b0:fb:c2:75:8f:
ad:09:9b:d4:e0:1f:02:11:3d:5d:14:f8:b1:74:3f:
89:d9:57:8e:c5:60:85:8f:cc:57:8f:65:27:02:9d:
3e:5f:b7:53:96:a2:fc:3d:93:d0:32:cf:05:80:bb:
57:49:7f:d9:e6:3b:b8:ef:01:93:f7:69:2d:00:92:
47:46:e0:ce:81:28:ea:21:42:51:78:0e:3d:08:9d:
df:e5:57:0f:43:ec:d4:3c:0c:dd:e1:77:78:cc:09:
51:9a:c5:68:5c:e7:6a:07:ef:d5:93:b0:91:46:0d:
e0:c8:0b:e0:67:a6:c4:12:aa:88:e8:3f:18:9d:d2:
d2:18:dc:b7:27:a9:21:2a:24:7e:92:a0:87:38:58:
96:c8:8b:fe:33:dc:2b:a5:a8:45:1a:37:48:a7:43:
54:c7:45:38:be:1d:14:ed:61:ad:ad:e1:a3:54:a6:
8f:3e:49:35:d1:66:2c:24:f4:00:c2:55:22:7e:65:
aa:c9:f5:7a:1b:b6:f1:e5:29:b7:fb:61:24:0b:17:
5d:7d:05:52:8f:36:da:83:ea:cc:e7:6a:2d:9e:98:
ea:10:ef:0f:dc:7e:20:a4:e5:76:db:d8:b7:bb:9e:
e8:70:41:9e:df:fd:53:63:ac:eb:67:3e:6d:4d:5a:
1d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:71:63:C2:DD:79:42:5F:E3:EC:AD:F6:36:EB:25:9A:B9:7B:32:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0e62a5ec-6384-371b-aaea-44fd0649d91d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
128.1.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:86:18:82:b1:b3:14:c6:d1:36:fd:35:a4:ff:95:ed:32:12:
66:73:3d:37:24:79:a5:f8:d0:c9:99:a6:2b:53:a6:4d:22:36:
b2:96:89:95:c6:07:cb:a8:a5:d2:0c:ee:d7:39:fc:be:fa:6a:
59:d9:72:8b:74:21:d6:46:35:db:7e:9b:48:51:a7:ff:4b:6b:
85:70:20:1f:35:de:5c:42:c4:2c:89:8b:35:0d:9c:7c:8a:55:
0b:18:ec:e2:95:d2:37:37:b3:07:89:6c:fd:eb:e3:49:85:49:
43:49:b0:84:1f:eb:6c:42:2a:97:e8:ba:7e:07:9e:0e:68:6f:
cf:b3:03:28:bc:2c:b0:08:73:aa:91:3b:cf:94:5e:54:0f:2f:
dc:ba:f9:1b:b2:3e:27:04:a6:ff:0e:d9:8c:12:6f:af:9a:f0:
a0:f6:05:91:dc:ae:95:ae:ba:fe:83:2b:24:0c:68:dc:cf:f8:
24:04:b7:3a:93:9b:bb:6f:bc:c9:a2:e9:83:19:d7:5f:73:9e:
53:46:c8:eb:b9:04:4f:80:fc:b9:1b:72:c5:78:03:10:3d:55:
bb:38:0a:82:4c:33:cb:53:7c:e0:62:2c:e1:7b:5a:77:8a:4b:
63:96:a1:97:be:a0:02:f8:04:5d:95:67:4b:49:94:69:37:fd:
a2:23:02:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:38:40 2025 by rpki-client