Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/98cb6939-c26b-3ef5-bea2-f4c3b6a95436.roa
File: 98cb6939-c26b-3ef5-bea2-f4c3b6a95436.roa (raw, json)
Hash identifier: 15OeVVn63cgyTykCLdlLh96oVnyAT34PjZvMJHBaJgs=
Subject key identifier: A8:58:77:61:FD:2C:12:45:78:AC:63:21:2A:8A:96:80:D8:88:89:42
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F432858487755CEAEEC81CF8B70BD1D50
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/98cb6939-c26b-3ef5-bea2-f4c3b6a95436.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 21859
IP address blocks: 128.14.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:ce:ae:ec:81:cf:8b:70:bd:1d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=87433e85-7722-4f26-9d6c-704d322b8955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2f:0b:05:d3:08:4d:0b:9d:66:d0:4d:29:d0:
68:7d:9b:1a:5c:65:41:ba:92:28:66:fd:32:05:39:
85:a7:00:f4:b6:cd:e8:cc:11:26:a8:57:c6:08:1d:
3b:8f:dd:12:6e:3f:1c:11:cc:37:b3:f7:11:85:85:
e5:1a:a5:1c:3f:31:3e:13:01:30:5e:98:35:25:3f:
09:2a:60:d7:b8:4c:3f:82:a3:2a:3b:b1:e0:0c:5a:
79:0b:89:5d:ac:9f:3c:3b:86:c6:86:37:a5:21:71:
b7:44:13:aa:0b:ae:4e:82:6b:ba:11:71:08:3c:ee:
9e:82:a9:17:ea:ce:22:04:60:3c:c4:31:44:ed:52:
aa:52:2e:e4:77:58:2b:ab:58:66:d9:e5:c0:42:69:
ec:fd:d4:94:76:0e:37:55:19:9e:5c:1a:2c:90:d4:
90:cf:b7:a3:b5:53:51:d7:df:61:31:a7:e7:a4:09:
e8:b1:dc:ff:3a:f2:a0:77:b0:b9:d9:b7:eb:7e:7e:
af:09:ea:ef:30:1f:d5:e7:53:1e:a8:85:6f:cb:00:
92:c8:55:d8:6b:6d:64:da:f9:c8:15:fe:1e:8c:fb:
05:24:25:36:6d:56:3f:12:42:2e:11:43:45:a8:a2:
e9:93:0a:24:cf:41:92:2f:f0:8c:11:d4:7a:e2:e9:
c8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:58:77:61:FD:2C:12:45:78:AC:63:21:2A:8A:96:80:D8:88:89:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/98cb6939-c26b-3ef5-bea2-f4c3b6a95436.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
128.14.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:b7:ef:2b:71:b5:ad:ff:b8:1b:c8:2d:21:64:dc:b0:f6:6b:
64:e4:ec:b5:2c:aa:ad:38:4b:07:d5:91:c2:6c:38:b9:5d:1b:
3b:71:59:e4:e6:31:17:f7:5c:ca:a9:74:3f:1b:14:59:4a:b0:
a1:ce:d7:cc:26:dc:17:a4:85:17:09:ec:05:8b:31:1a:34:60:
f1:fd:fe:a8:5d:c4:ec:e1:c7:5b:89:88:86:f8:65:52:da:62:
5e:e1:13:53:8c:ce:b4:ab:2d:76:77:ed:b0:e3:38:2a:af:82:
cf:c7:02:8d:8f:33:06:ea:76:73:65:61:34:3e:c3:29:22:a5:
a9:88:02:d8:03:ca:0b:2e:9f:7f:38:ad:6a:78:46:ee:f8:ad:
29:34:e7:c9:f9:0e:5c:41:00:8a:3d:40:53:0f:2b:5d:02:8c:
d4:d4:37:16:b4:5e:bb:9c:fd:66:4b:c4:ec:5a:57:1d:79:fd:
3c:14:5f:cf:92:6b:25:ee:d7:27:19:54:29:46:15:5e:13:8c:
1d:50:1e:92:c4:fe:b7:81:0e:a8:9e:d5:65:b0:6a:ba:1e:70:
c4:24:e1:ba:3f:25:69:f2:02:b5:78:3a:7d:c6:6b:10:51:90:
69:14:91:10:d4:c8:50:bf:43:11:b5:8f:12:27:4e:66:9e:9a:
a8:5e:92:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:23:13 2025 by rpki-client