Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/12f21b5a-6e5d-339e-9173-6bd6aa699b77.roa
File: 12f21b5a-6e5d-339e-9173-6bd6aa699b77.roa (raw, json)
Hash identifier: my3kqADzuOtOX4Pi5+7BtrCxy2GYE06/Vd0zEcCmkwc=
Subject key identifier: 2E:14:D4:F9:CF:32:BC:3E:28:00:23:64:7C:78:F6:F5:C8:6E:AE:3B
Certificate issuer: /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial: 010D0C9F432858480A751FBA452150039B362C80
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/12f21b5a-6e5d-339e-9173-6bd6aa699b77.roa
Signing time: Fri 29 Nov 2024 14:00:51 +0000
ROA not before: Fri 29 Nov 2024 14:00:51 +0000
ROA not after: Thu 27 Feb 2025 14:00:51 +0000
asID: 54600
IP address blocks: 130.51.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:75:1f:ba:45:21:50:03:9b:36:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Validity
Not Before: Nov 29 14:00:51 2024 GMT
Not After : Feb 27 14:00:51 2025 GMT
Subject: CN=8a1b97a9-4618-480a-8751-ff68342728c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:eb:44:b0:39:56:88:e5:ff:6d:9b:6b:80:86:
42:73:dd:fc:ae:ae:4a:9d:39:98:0d:02:be:5b:af:
4b:56:e5:f1:25:bf:69:25:ca:61:02:9d:b3:df:9e:
5e:c7:6f:a5:97:fe:c3:37:f1:cf:72:6f:fd:38:b9:
93:dd:bd:fc:46:c3:32:69:4c:a7:8d:03:c3:62:82:
5d:e8:f1:65:5e:07:ae:ed:5f:10:76:1b:90:2a:46:
89:89:7b:21:6a:42:94:57:7b:1a:2e:e2:7d:6b:cb:
c7:e8:b9:3c:5c:5b:a1:2f:74:5c:d7:e9:ea:97:6a:
7b:f7:9e:e5:e6:5b:3f:81:e4:6c:ff:58:ad:3d:2c:
90:13:c8:d7:d3:a8:ce:4c:da:ad:1b:a9:40:1c:70:
77:22:a2:db:04:dd:84:c8:67:2c:b3:14:b6:21:d5:
cb:dd:aa:55:58:d8:8a:46:41:51:a6:d7:0f:d5:80:
9d:ca:2f:7e:cd:99:4e:98:c2:ef:3d:ad:57:a8:89:
20:28:81:b5:f8:be:01:57:78:06:57:96:d6:c4:d8:
02:8b:55:92:05:f1:d5:ac:2e:78:94:45:32:9b:92:
33:ef:ff:3b:da:f1:be:8b:31:2b:fa:e9:ca:f5:6e:
c7:88:db:f8:a0:2a:ba:1f:43:45:c0:09:7b:ac:e8:
bd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:14:D4:F9:CF:32:BC:3E:28:00:23:64:7C:78:F6:F5:C8:6E:AE:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/12f21b5a-6e5d-339e-9173-6bd6aa699b77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
X509v3 Authority Key Identifier:
keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
sbgp-ipAddrBlock: critical
IPv4:
130.51.112.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:76:b8:ab:42:35:d0:da:46:83:a3:11:ec:46:26:f5:7d:29:
4c:c3:43:91:8c:1f:98:a0:c5:63:18:fa:80:21:1f:69:fb:a5:
74:74:7a:df:6e:b6:62:35:29:44:15:b1:97:98:ff:74:ba:b6:
e8:03:38:f1:c8:28:31:01:34:9f:0a:45:61:da:cd:ba:d3:07:
56:e3:28:d6:8d:c1:39:27:cd:0a:9b:55:5d:82:bd:da:26:fe:
0c:65:19:fa:86:a5:48:ad:61:cd:db:e3:c7:58:49:ae:76:9d:
9a:0a:86:77:4f:1f:9d:26:7b:27:f5:fe:92:2c:b5:c7:11:81:
81:d2:8e:e0:d5:d1:8d:03:00:30:64:1c:bd:54:1e:7e:3f:2d:
87:a6:f3:1e:99:92:b4:c7:70:fa:bd:4e:91:d1:54:3f:9f:5a:
89:a7:2e:7b:69:2d:ad:60:45:57:1a:26:ff:70:e0:72:2d:d4:
cd:b4:51:fb:ca:c2:a8:fb:be:41:81:12:94:0b:dc:ea:3f:4a:
6f:ef:22:30:74:99:88:45:cf:67:49:98:04:a0:2a:23:47:66:
fb:71:a5:4b:c9:40:ee:bc:fd:a6:70:09:53:ee:0a:12:c1:52:
d8:55:ad:bc:94:50:af:3b:1d:5d:b9:8d:6b:fb:96:d2:bc:50:
05:2a:96:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:06:29 2025 by rpki-client