Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/359d03d3-28a8-3f41-b79d-fc8a2087fd2f.roa
File: 359d03d3-28a8-3f41-b79d-fc8a2087fd2f.roa (raw, json)
Hash identifier: 8tk/gXePNfg0ve2Pv0L5AE/Z0L92BMfKtZdJLZX8W60=
Subject key identifier: D2:79:7F:40:C7:0E:A8:D0:66:A9:DB:D1:15:EB:D1:63:83:5F:56:87
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F4328584849456AB3E49C2024B7ED6A00
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/359d03d3-28a8-3f41-b79d-fc8a2087fd2f.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 21859
IP address blocks: 128.1.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:6a:b3:e4:9c:20:24:b7:ed:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=62238fef-22dc-48a4-a120-28906327558e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9b:f5:8d:05:42:d8:9c:e1:5f:da:18:06:ac:
0a:37:58:36:fb:95:0d:34:58:2e:6d:9c:0b:7c:ff:
94:3d:ef:cb:0f:9d:73:c4:5f:3e:f0:3b:cc:8a:46:
92:58:b6:08:75:a2:3c:df:21:f1:32:15:d1:c5:11:
af:ae:31:03:9e:db:8f:24:5c:36:fc:5d:a5:9b:23:
a3:c0:ca:c1:ec:1b:78:73:9e:e3:e0:4f:0c:99:59:
d0:1b:d4:1b:a8:4b:8d:fa:b5:f7:1b:79:d7:37:87:
d1:11:b8:cf:68:81:7e:75:fb:bc:de:58:cd:95:88:
8b:9f:af:ce:cb:b7:c7:be:a7:d0:fa:e7:66:24:a4:
3f:2c:2e:36:29:ad:87:ba:fc:de:2e:41:f5:b3:89:
9d:5f:a2:f8:72:31:29:e5:d7:49:94:d4:c4:db:ae:
c5:f0:94:fa:67:9e:a3:7e:74:f1:51:c5:61:a2:dc:
95:3c:90:b5:0b:83:ac:c7:31:7f:99:31:c0:03:91:
cd:cf:53:00:4a:9b:96:d8:6f:19:16:ce:a2:4d:d0:
e6:83:e9:be:43:4f:8c:0a:b9:d0:a2:25:74:3e:27:
4a:b9:89:35:c5:73:d6:fa:fc:9e:8c:72:45:f8:cb:
66:05:2d:39:46:98:0a:d5:9a:29:02:6d:21:20:b2:
66:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:79:7F:40:C7:0E:A8:D0:66:A9:DB:D1:15:EB:D1:63:83:5F:56:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/359d03d3-28a8-3f41-b79d-fc8a2087fd2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
128.1.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:da:96:f5:55:f5:8d:63:b7:55:aa:d4:e3:3b:3a:af:66:27:
c0:b8:74:9e:94:03:bb:4a:14:29:d0:c9:66:2d:8e:cf:44:83:
d9:5a:d0:ce:c9:99:f2:7a:ea:36:c7:8b:70:34:71:4b:59:c9:
8f:78:d7:61:9d:12:3e:02:37:3c:84:29:9d:14:1f:8f:7a:0c:
5a:b9:5d:a5:e8:c1:38:98:f5:ed:4c:91:9b:05:73:8f:e1:c8:
46:8d:5f:1f:02:e6:27:e8:de:df:ca:ac:b6:d9:dc:10:f2:9e:
53:e7:f9:0a:e6:df:7a:75:28:b9:47:37:a0:81:38:18:5d:04:
6a:5c:6a:d3:b8:e1:88:b5:da:ab:70:89:8b:60:03:9f:5d:8c:
dd:61:54:ad:1d:e9:a4:0f:d1:0b:e1:cd:ea:0d:27:eb:45:6e:
69:20:64:c7:c5:fb:91:c4:fe:6b:47:5d:0d:00:13:08:00:57:
92:1c:6e:b5:04:c3:57:23:5e:7b:ff:f6:78:7f:34:5e:be:68:
f1:57:1d:34:1d:37:e5:6e:04:34:9d:45:f8:1d:d6:74:f7:bf:
93:ca:06:a9:35:09:2a:c7:3b:72:a2:d0:fd:82:de:49:5b:e6:
76:2f:e4:cc:be:4d:f2:06:1b:58:5c:a6:88:90:0f:ef:f0:0b:
fe:72:95:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:08:23 2025 by rpki-client