Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/33d538b2-9967-3429-aa3c-f4a346f31749.roa
File: 33d538b2-9967-3429-aa3c-f4a346f31749.roa (raw, json)
Hash identifier: d4FFf3xvX0gsilJAE274YTvFc9mbmMeUkfSK1NSKT7Y=
Subject key identifier: 74:37:22:3F:2B:21:CC:3A:4C:8E:F5:25:30:95:A3:C3:D3:09:E7:09
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F432858487755D4F530F8301C04EDAE00
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/33d538b2-9967-3429-aa3c-f4a346f31749.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 62610
IP address blocks: 128.14.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:d4:f5:30:f8:30:1c:04:ed:ae:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=59c8f909-a370-447f-b8eb-4bee2f098500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1f:94:28:b8:85:c9:ef:4e:66:11:e2:7a:fd:
e8:79:fc:6a:de:b9:49:46:06:ce:dd:9d:de:4e:7e:
92:58:65:48:fc:62:b8:3e:1f:e5:55:7a:fd:83:7f:
c1:fc:f6:d3:06:cd:1d:56:09:ca:1f:31:1e:40:fb:
48:aa:10:de:52:56:34:0a:cc:e1:5d:26:fa:1d:55:
61:d4:f8:4c:a0:08:79:b2:ec:33:6f:ac:af:ff:d1:
28:02:a0:1d:fa:82:85:32:f5:72:ff:d5:1f:71:8e:
7c:0c:f0:7d:6d:51:4f:b0:f5:ff:11:9b:48:47:86:
16:da:c1:ea:17:ae:17:5d:cf:98:46:5f:75:87:52:
91:1c:0d:0d:83:5b:31:6f:0b:44:7e:f5:89:d3:db:
76:60:56:da:e4:2a:90:f2:31:39:26:4c:56:64:86:
83:35:98:b1:58:ca:5b:0c:cf:35:d8:f4:9f:d4:ca:
25:f9:a5:a7:bc:e1:ce:ce:10:90:16:d1:01:38:ab:
c0:37:96:cb:d6:c6:75:37:59:ec:77:8e:9f:48:ff:
00:20:43:b5:aa:f0:a9:88:4c:17:2d:0e:6f:87:c0:
71:03:57:a9:f9:79:94:35:be:6e:7a:ea:54:0c:f5:
a6:b7:39:b0:1f:14:77:b0:f1:46:ac:1b:a5:e9:22:
66:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:37:22:3F:2B:21:CC:3A:4C:8E:F5:25:30:95:A3:C3:D3:09:E7:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/33d538b2-9967-3429-aa3c-f4a346f31749.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
128.14.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:36:dd:f6:aa:e2:4a:2e:c2:e7:f2:33:9c:8c:f0:c7:4b:00:
90:82:51:30:02:d1:b4:ee:6c:b7:26:a0:bb:80:28:38:50:e4:
70:ba:fc:a9:87:5f:c3:0c:05:9d:f1:4e:93:f8:35:aa:02:87:
ee:c4:ae:98:8c:67:1f:a4:1c:d6:2c:4e:b5:a6:87:51:d5:02:
ba:f8:9a:29:80:c2:4d:be:b6:e8:a8:0a:7b:88:b0:21:3c:42:
1f:6a:37:71:ec:e1:ba:ad:18:ef:4e:2a:9c:45:f2:98:74:a0:
4b:5b:98:49:1f:99:34:8a:58:e9:94:40:ac:2a:fe:c6:db:d4:
ca:99:ad:47:0d:be:97:9d:3b:82:bd:91:0c:23:aa:8a:de:33:
b5:96:ed:f9:09:c3:3b:62:a8:62:61:5b:97:d7:a2:e7:2e:f7:
83:36:81:6e:64:7d:24:d4:93:a1:d5:a4:bf:3b:ad:3c:26:17:
12:17:3b:56:86:f9:5c:90:b2:09:81:8b:0a:37:69:dc:93:53:
a9:fb:5e:43:bf:e2:17:36:5f:b8:1d:70:20:bc:1b:9f:b0:0f:
2c:17:e5:f9:f9:97:82:a1:8b:2a:3f:66:e7:cf:d1:ee:a7:ca:
da:be:80:53:71:6b:18:a3:08:8a:cd:66:f7:f8:b6:66:f4:d3:
7d:f7:36:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:56:04 2025 by rpki-client