Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/88630cac-7d18-3b8e-8847-9847e81f16d8.roa
File: 88630cac-7d18-3b8e-8847-9847e81f16d8.roa (raw, json)
Hash identifier: CDe5Pv5W5KWeYcbl3O78H9IrWPFdJ1Zf5S6F3RE7E9s=
Subject key identifier: A6:58:84:D8:D9:12:BA:05:B6:26:A5:4C:FD:47:D7:9F:FC:00:FE:42
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F4328584849456AC5C86D7A43D0CD6460
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/88630cac-7d18-3b8e-8847-9847e81f16d8.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 29538
IP address blocks: 128.1.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:6a:c5:c8:6d:7a:43:d0:cd:64:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=7a19ca92-1f5d-4290-982d-e05de32b04a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:41:63:22:a2:42:bd:69:8d:ca:1c:36:86:e4:
5e:2f:b6:54:4d:4a:c4:12:bd:78:d0:3a:5a:05:e7:
51:39:82:a4:4c:a5:2f:6a:10:8d:f4:ad:78:23:24:
2f:c2:d7:16:cb:9d:a5:1b:2c:fc:d5:b2:ea:f7:19:
b2:39:d6:20:e3:a2:40:ca:4c:38:35:2f:51:f6:32:
03:67:00:47:d5:a0:8d:7c:bb:39:df:6b:f6:fc:08:
53:51:bf:bb:34:07:ea:b0:40:b1:53:71:76:13:92:
b2:3e:6b:57:b1:74:61:f6:46:a0:cc:17:80:65:86:
dc:55:0c:37:46:97:27:22:0d:f5:35:dd:02:6d:dd:
9e:6d:aa:e0:7c:7c:4b:b3:6e:b4:db:0f:c4:cf:0f:
05:8f:e1:b3:f0:a8:bf:6c:b9:fd:4e:77:52:af:1a:
75:d9:15:8d:88:1d:a0:8b:48:1b:c1:4e:19:58:1d:
9a:92:b1:16:ac:d0:db:da:9a:c7:47:e4:db:6d:ac:
04:aa:d4:71:0c:7d:34:32:2d:1b:f5:d0:69:07:7a:
9a:84:98:37:3a:a3:05:1b:03:58:26:99:57:21:6f:
c7:63:c8:95:11:a8:29:83:10:58:0e:4e:c2:ac:27:
9f:39:a9:f1:ff:9f:54:46:97:5d:37:6e:47:eb:7a:
1e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:58:84:D8:D9:12:BA:05:B6:26:A5:4C:FD:47:D7:9F:FC:00:FE:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/88630cac-7d18-3b8e-8847-9847e81f16d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
128.1.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:ee:0a:e7:7f:e8:25:4b:bc:e4:aa:11:ed:65:e6:8c:89:9d:
2b:09:01:2c:5a:60:fe:c4:75:cc:c7:40:71:5d:2e:48:53:78:
36:43:7d:37:16:95:28:14:0b:8c:86:21:aa:e8:5f:c5:6b:e2:
e1:c7:96:e7:ba:b5:78:6b:a4:47:c6:b8:89:1c:6b:ad:66:dc:
c3:8a:63:ef:f0:35:6a:e0:50:19:1e:1b:0c:0e:e8:11:ca:9d:
5c:ec:f7:17:71:d7:62:c8:58:eb:d7:c1:9f:19:5d:dd:ee:27:
ca:0c:c7:92:e1:f5:b1:e7:bc:ae:98:fd:6b:34:98:94:8c:49:
96:fc:d9:27:47:fd:8e:1d:a6:72:3f:80:95:2c:97:7e:0d:73:
3f:4e:2c:79:92:85:22:0b:10:ce:cc:88:0c:71:c5:b3:16:e6:
f0:c4:99:68:bf:ca:c7:7c:20:de:1d:b9:66:62:9b:d6:fe:da:
c3:8d:f5:a8:47:a4:9b:5b:4c:dc:59:d9:eb:fb:11:be:be:4b:
bd:a4:7c:a5:10:20:3a:84:88:ca:09:a2:57:a8:82:01:bc:d4:
a8:ea:9d:6e:cf:e9:1d:71:3f:5e:bb:3b:c7:2c:61:24:09:47:
24:ff:69:20:ba:2b:a3:d3:3e:b5:a2:d5:29:90:bb:4b:e1:f4:
98:e7:fd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:21:03 2025 by rpki-client