Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/b480fbd5-a5da-3a40-afd3-517a1f251e3e.roa
File: b480fbd5-a5da-3a40-afd3-517a1f251e3e.roa (raw, json)
Hash identifier: 3U60s+ibbbUhkwMaogE4wzSEbFvqjtzAq/2IqCu3kgo=
Subject key identifier: 01:39:3C:3A:B6:DE:BB:2F:B5:BB:BF:62:6D:96:6D:12:21:A5:A6:F1
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F432858487755D550CE8CFBF5D9D22B00
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/b480fbd5-a5da-3a40-afd3-517a1f251e3e.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 62610
IP address blocks: 128.14.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:d5:50:ce:8c:fb:f5:d9:d2:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=72074263-1fc1-433b-b999-99d652c18869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:69:b4:40:ef:6a:1f:7a:bd:76:1a:55:fe:e1:
33:ac:8f:4d:63:a9:5d:ed:0e:60:f1:4f:77:08:d8:
3f:c4:c5:5c:10:4b:3a:5a:d9:29:71:0a:bc:85:e0:
a1:1e:82:41:71:de:6a:49:e4:52:8f:23:ca:8e:55:
2d:a9:22:6d:2f:fc:bf:5f:08:52:a6:14:b2:67:47:
5c:61:db:7b:13:b6:a4:51:7b:6d:e2:6b:8d:18:7b:
6d:90:98:bf:1a:a2:ab:75:ef:cf:8e:0a:d3:60:a4:
96:ae:13:e9:18:62:5a:f6:21:28:9d:68:b9:bb:87:
b5:11:f1:15:f7:f3:a5:fe:88:bf:02:38:b3:d2:b1:
d8:d7:6f:35:55:8a:00:5b:00:91:9b:c0:d1:91:a6:
ab:fe:3a:d2:aa:57:a0:b4:92:68:c7:5b:bd:c9:91:
d5:df:f1:06:53:78:7d:c6:13:01:03:67:a8:8a:5d:
7c:ac:0d:b4:88:fc:c8:bb:9c:46:cf:77:b1:73:bf:
4d:f1:9b:8f:55:45:6d:88:d4:6e:44:59:b6:dc:b1:
ad:b1:ac:c2:7c:02:69:7f:0e:ba:8d:e5:af:40:47:
26:9f:f1:14:01:0a:66:d5:06:23:f2:ad:f0:5c:72:
74:b1:02:97:6c:04:28:22:0b:18:4f:7e:29:52:32:
ac:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:39:3C:3A:B6:DE:BB:2F:B5:BB:BF:62:6D:96:6D:12:21:A5:A6:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/b480fbd5-a5da-3a40-afd3-517a1f251e3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
128.14.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:f7:3f:31:23:61:af:96:8c:dc:63:74:46:18:59:7f:0c:f0:
c4:23:5b:c1:db:30:39:7d:ee:7e:6b:11:ec:53:0d:d7:3a:88:
23:3f:ab:92:cc:ce:86:61:bf:cc:e2:00:84:46:f9:bb:a2:e1:
9d:f4:31:19:43:b8:40:ee:59:7d:e2:16:0e:82:ba:4b:c0:38:
2e:f3:61:78:aa:9b:20:34:79:d9:f4:dd:52:34:fc:9e:e3:08:
be:09:e4:77:e9:41:93:6d:22:43:09:69:3d:b1:23:24:f2:1a:
93:c4:57:0f:ac:f2:71:30:da:c0:48:d6:5f:60:60:0a:c2:81:
57:5a:45:c9:a1:e4:24:8b:ae:7a:e7:0d:49:fd:6a:f3:8f:57:
81:62:48:21:0a:fb:fb:92:bc:65:b0:bf:e6:89:f7:24:ce:0e:
63:f0:c3:90:df:67:bb:dc:dc:e0:3b:76:82:59:5f:02:21:da:
e5:ea:62:ba:27:da:0c:63:c6:9b:4d:0e:21:58:20:fc:72:2a:
36:fa:0f:d1:e2:18:e8:ab:e3:b2:38:40:8b:65:2b:6d:52:f0:
78:df:82:40:2d:3d:f6:37:ea:20:9e:96:e8:26:ae:25:ea:e5:
7e:65:8f:dc:8a:f3:19:13:f8:9d:f5:01:2a:53:db:a3:c6:ff:
a8:1b:c5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:11:37 2025 by rpki-client