Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/7bf1bc84-5193-350c-bb60-61b01001116a.roa
File: 7bf1bc84-5193-350c-bb60-61b01001116a.roa (raw, json)
Hash identifier: 3DHlAqhCN1PpHCwmTvdm/3WZRyZ/iteVqaU22QDdOdY=
Subject key identifier: 02:7F:93:FE:A8:81:61:BC:A0:C2:B6:58:F1:0F:BC:06:8C:6A:14:51
Certificate issuer: /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial: 010D0C9F432858487A2081C397C49DFB98758E20
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/7bf1bc84-5193-350c-bb60-61b01001116a.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 7922
IP address blocks: 134.202.16.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:81:c3:97:c4:9d:fb:98:75:8e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=de8a4a84-650c-448c-b42a-3cb0427b3e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:70:73:f2:80:d2:27:cf:75:9d:ac:57:bd:55:
e8:85:8a:ef:41:0a:7e:98:a8:5b:28:34:9e:ff:2d:
1a:57:f8:c2:4a:f0:ef:f4:ac:94:83:b8:92:7b:92:
ad:3c:a0:ba:5f:ba:b2:ff:86:e1:ef:14:35:b7:63:
72:cc:5e:5a:07:cc:2d:dd:c8:35:d6:c7:f3:52:73:
f0:02:5d:87:ac:4b:e8:f4:3e:29:aa:4c:f2:4a:d7:
bd:cf:c7:ff:4f:43:cb:a0:fd:e1:bc:03:cb:e5:61:
03:f9:e2:77:9e:de:0f:9b:18:af:0a:72:0f:01:36:
c6:1b:d7:bc:a1:0f:48:cd:24:88:c3:58:73:a1:41:
cb:da:19:58:bd:68:80:10:e7:dc:11:19:3c:b5:01:
db:94:d7:ab:3e:38:1e:4b:a2:4f:79:81:2b:8b:e4:
46:cb:52:9f:dc:40:40:7a:4b:b2:a9:78:a1:6e:3f:
6a:b9:d5:fa:e4:57:94:94:97:73:03:67:7f:35:4d:
ad:18:db:bb:b3:3f:f7:88:98:6b:45:c1:0d:93:46:
83:83:73:0b:f0:67:4d:8a:ee:65:0c:68:34:25:bc:
7c:8a:f9:06:16:b4:56:d1:c9:62:c0:f7:74:ed:30:
31:a3:39:c1:47:6c:0b:30:df:22:5d:45:ac:8b:c2:
3b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7F:93:FE:A8:81:61:BC:A0:C2:B6:58:F1:0F:BC:06:8C:6A:14:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/7bf1bc84-5193-350c-bb60-61b01001116a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
X509v3 Authority Key Identifier:
keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
sbgp-ipAddrBlock: critical
IPv4:
134.202.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:9e:ee:2a:46:42:68:48:52:5e:fe:80:e9:4e:15:fc:79:1c:
b6:48:14:46:3d:a8:36:0b:31:5e:9b:e9:46:78:e3:2f:f4:51:
37:de:75:32:48:4a:0d:6c:fc:98:9f:67:65:32:35:74:9a:af:
41:98:ca:5d:1f:02:d7:29:93:0d:0d:81:41:0c:96:65:cc:c4:
76:1d:05:93:0e:1e:37:41:20:89:06:14:f0:9a:24:d3:db:5a:
91:a1:9a:ba:db:c0:bd:ae:d1:c5:da:ae:60:2c:6c:13:3d:a7:
55:0e:32:38:5e:2f:ca:65:3d:7b:27:30:30:2a:eb:fb:58:99:
2a:88:7a:36:26:ec:a7:39:74:9e:d8:0b:4d:b3:30:81:0a:7f:
44:e6:08:50:21:a2:b2:af:92:e5:f0:b2:89:3f:78:02:b7:eb:
8f:da:da:1f:8e:c0:e0:b7:5d:d0:c5:91:0a:2a:61:64:c1:fb:
d0:25:c9:ca:5b:91:8f:d4:a5:f7:75:00:16:d6:dc:63:9a:91:
c4:62:db:a2:c4:01:6e:c0:34:f9:14:4c:5d:fa:f5:bd:d3:7e:
53:d1:2b:ef:78:45:5c:b4:78:e8:b3:47:d0:99:7f:f3:aa:f5:
0b:ad:c9:5b:03:a3:76:b5:a1:c7:04:5d:a3:9e:3e:b2:bb:20:
88:ae:d7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:07:31 2025 by rpki-client