Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/84aaacfc-0f90-32c3-9b2f-9cef444f4fe6.roa
File: 84aaacfc-0f90-32c3-9b2f-9cef444f4fe6.roa (raw, json)
Hash identifier: zatMxUgMDOnsbHg1Yi+NcR7hN8or/Wg1nrNRhM7EVMc=
Subject key identifier: CE:B7:29:91:06:F0:E2:7B:F9:6A:D7:88:1F:00:A9:3D:3F:0B:C9:7C
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F43285848424ACFA5D60542CB31280FA0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/84aaacfc-0f90-32c3-9b2f-9cef444f4fe6.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 29538
IP address blocks: 128.1.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4a:cf:a5:d6:05:42:cb:31:28:0f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=43959117-6e29-4bac-8b8f-ad438fcbafad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b4:fe:81:f4:3b:42:17:c8:69:5e:e5:f2:74:
6f:c2:d6:2c:c0:cf:23:48:0e:4b:70:c3:97:29:37:
5b:6d:82:15:08:d2:97:f2:51:9d:81:8d:1c:f9:95:
ba:a1:ca:58:31:59:4d:96:5a:3c:34:8c:76:5b:b0:
51:87:bb:e7:dd:ea:d9:f5:cc:e8:fd:72:1c:a6:a1:
f3:8f:ce:48:3e:05:bf:fa:da:b6:fc:95:9e:ea:41:
8e:70:05:db:51:8f:54:6f:ba:ad:54:a6:2a:7d:97:
70:cf:01:fa:d1:1e:b0:40:be:88:56:f9:f3:55:61:
df:c1:6a:43:d7:ea:39:d7:bd:68:cb:59:34:07:30:
53:37:b3:a9:91:0a:61:9a:74:35:f6:97:23:7e:38:
19:cb:1a:9b:35:b2:54:99:7d:d0:d6:3f:05:91:ed:
ea:af:cf:cb:b2:16:57:33:86:0f:1c:65:4c:93:cb:
b5:cf:d2:a2:a3:ca:ed:19:15:38:65:f2:1a:7a:14:
f0:d6:0c:4d:5c:5f:93:01:b4:82:f1:6d:eb:55:b1:
df:49:6b:1a:e7:4b:6d:1a:9b:8d:56:d9:a2:21:ee:
72:21:db:d6:b1:7e:fd:fd:c4:5c:89:0f:5e:8a:26:
b0:22:1b:2f:8c:26:05:c5:57:5a:5d:bc:a9:56:61:
cf:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B7:29:91:06:F0:E2:7B:F9:6A:D7:88:1F:00:A9:3D:3F:0B:C9:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/84aaacfc-0f90-32c3-9b2f-9cef444f4fe6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
128.1.30.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:2b:ff:75:4d:7c:9a:21:59:70:a9:1d:b9:a9:56:0f:34:fc:
bb:4e:33:f0:7b:1b:a5:90:44:95:dd:fc:3f:e2:8c:13:da:26:
71:ce:e3:c1:63:49:dd:22:34:20:53:b8:1e:e4:c3:5a:80:21:
7f:55:ee:ca:ea:81:0c:55:78:ce:21:0a:4e:ad:2c:f8:c6:57:
e2:eb:61:e7:38:22:3e:8d:84:58:d1:b3:4f:bd:ee:84:9f:01:
ea:96:bf:5f:33:6f:0d:bf:99:19:3b:d5:47:5c:36:bd:8e:2d:
74:7f:74:c3:7a:69:99:1a:12:a6:02:93:2a:ad:51:40:37:2b:
3e:09:38:62:96:b8:9a:c2:84:bb:d6:46:60:f7:4a:4b:7a:7c:
47:d3:76:6b:f6:6e:c8:60:c0:0e:a8:20:6c:80:6c:3e:74:6c:
39:1e:12:15:5d:5c:73:f9:c6:e9:84:22:5a:00:0e:06:b5:00:
41:7d:f5:d1:ff:3a:7b:16:a8:0d:3a:5a:48:3a:f8:31:10:93:
3f:9b:2d:c6:12:b3:25:bb:c9:aa:05:22:b0:be:d2:26:b2:2c:
06:ac:9d:2f:39:59:92:f6:29:36:ba:d4:b8:ac:b9:f8:bf:3e:
b6:f3:59:b5:de:52:3c:fe:39:46:67:ec:41:db:5e:82:a5:df:
5a:2b:43:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:21:52 2025 by rpki-client