Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/b34df3c8-294e-344e-92b5-9e70dece3c86.roa
File: b34df3c8-294e-344e-92b5-9e70dece3c86.roa (raw, json)
Hash identifier: ONdIXA79Zs3RhdzFmsq978qc4G2yhm4xRkrCwfOJMGA=
Subject key identifier: F4:02:43:7E:C4:F7:F0:4E:09:85:B4:0E:F8:45:6F:4E:58:5E:60:25
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F432858487755D506050D6E35AA0B3E80
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/b34df3c8-294e-344e-92b5-9e70dece3c86.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 21859
IP address blocks: 128.14.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:d5:06:05:0d:6e:35:aa:0b:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=cbcd331c-23a0-4416-8b94-69ca93338132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d6:e6:96:2b:07:47:9b:05:a7:0e:6d:d8:1d:
36:80:ca:58:bd:c1:e9:7b:96:ad:3d:3e:34:78:31:
42:ab:98:42:19:33:f1:f6:d2:be:fe:66:1e:86:03:
0f:82:81:7b:d0:8a:3e:92:6e:a5:50:5a:f0:f2:c1:
2f:37:93:7a:67:e4:c3:bc:6a:f2:b1:0c:b0:1b:d4:
b4:71:86:db:ee:b9:50:f4:91:c7:6f:c6:91:f5:87:
8c:76:4a:74:70:47:4e:18:02:f5:15:19:0b:e1:98:
07:38:1c:ff:6b:f8:c1:41:e3:81:27:28:c1:c4:6f:
af:3c:44:c2:bc:d9:67:c0:ab:da:21:e2:77:1a:ca:
e9:fa:f1:19:ea:dd:39:fc:a4:9f:1e:c4:49:0d:52:
2d:96:60:4a:96:e4:93:a7:9b:a5:d0:5b:18:56:d2:
49:d4:a2:1b:e2:62:87:2c:5f:2d:18:ec:78:07:7e:
39:ab:1b:36:81:1a:38:5a:0b:50:16:99:0b:b5:34:
00:a6:b6:7e:c5:4a:5f:09:94:91:4b:2a:ac:26:ab:
61:17:23:06:bf:b9:d7:9e:97:43:78:88:5b:fe:2d:
a4:98:fa:ad:e1:fa:7a:81:d9:8c:2d:41:66:e9:3f:
a9:52:54:ac:d7:6f:e2:6e:00:e3:a2:c5:5a:14:fd:
67:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:02:43:7E:C4:F7:F0:4E:09:85:B4:0E:F8:45:6F:4E:58:5E:60:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/b34df3c8-294e-344e-92b5-9e70dece3c86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
128.14.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:c4:75:f4:66:94:7e:eb:08:e5:b2:f9:af:87:41:58:ee:e4:
28:ef:9f:b1:1f:bf:30:69:99:b8:49:a0:c2:90:6c:2b:d3:ec:
8a:aa:db:54:4f:46:84:66:64:a3:aa:54:c4:da:1a:08:8f:42:
cc:e2:72:11:9d:d0:e7:b0:65:20:d7:f9:6e:5f:46:09:34:96:
8b:1c:99:28:88:05:73:80:8b:ef:c1:61:3c:d0:fd:ca:ac:df:
8e:75:98:0a:47:5c:78:5e:bb:9a:f6:ae:a7:1b:89:9c:c2:09:
89:a7:e0:0e:ed:cf:77:8e:73:b6:81:3e:c2:45:22:36:92:b9:
76:ca:38:c5:26:f8:a7:5f:bc:e3:88:1d:d2:84:a5:09:e8:f6:
02:0c:e5:32:3d:8a:0c:bc:e9:fb:c3:4d:e7:ad:df:a8:35:54:
6a:fc:fd:0b:b8:82:24:95:3a:00:cb:cf:3c:ca:3b:f7:00:4d:
5f:fd:af:4e:a9:fe:50:16:f8:6b:5b:fe:35:64:22:b3:a8:b1:
b7:f5:03:0d:e3:bd:26:db:40:f3:35:f3:e4:e3:2c:d5:3e:76:
e4:98:a0:80:0e:de:70:f7:a0:02:a7:32:cd:15:ab:53:7e:d5:
23:4c:83:b6:d5:56:6d:8e:9c:16:8d:a4:ea:d1:fe:ec:04:e9:
87:9a:31:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:24:10 2025 by rpki-client