Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/576102ce-aaa4-376a-8685-00b6e6cb9e91.roa
File: 576102ce-aaa4-376a-8685-00b6e6cb9e91.roa (raw, json)
Hash identifier: /CB83nWJ/Nul9j4XdpVyzkG5DpcfmB4z2QS39ABfvLY=
Subject key identifier: 2B:81:50:75:59:06:4F:9A:5E:4F:0C:7C:E9:15:7C:9F:73:16:04:25
Certificate issuer: /CN=734331b5-ba25-4d2e-ad3a-ce9ff6524e1f
Certificate serial: 010D0C9F43285847FDE4D507F1D4456B2EAE1E40
Authority key identifier: B4:37:CD:B6:90:F1:2D:53:ED:DE:17:C7:CE:9A:22:44:93:0E:EA:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/576102ce-aaa4-376a-8685-00b6e6cb9e91.roa
Signing time: Mon 25 Nov 2024 02:00:28 +0000
ROA not before: Mon 25 Nov 2024 02:00:28 +0000
ROA not after: Sun 23 Feb 2025 02:00:28 +0000
asID: 393950
IP address blocks: 172.98.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fd:e4:d5:07:f1:d4:45:6b:2e:ae:1e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=734331b5-ba25-4d2e-ad3a-ce9ff6524e1f
Validity
Not Before: Nov 25 02:00:28 2024 GMT
Not After : Feb 23 02:00:28 2025 GMT
Subject: CN=6c8072a1-faa8-4665-a913-63ecb775c3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d8:12:38:81:d0:d5:27:d7:69:ad:97:3c:79:
de:c1:13:cc:14:f1:7f:3c:07:45:7b:73:ae:ff:93:
ec:46:f6:ce:3e:3e:42:5f:b7:4e:f5:4e:8c:6b:ae:
01:bf:e4:4e:a7:b5:d1:79:86:fb:f6:4e:fd:88:30:
eb:3b:23:dd:5c:7c:49:08:4d:76:65:e5:dd:e7:f3:
08:26:e5:af:15:a4:c5:3d:f4:57:18:07:d1:0d:82:
b0:d8:e5:e8:2a:92:84:f6:7b:ad:7d:af:28:8b:99:
cb:fa:6f:2a:3a:24:23:f6:e2:9d:a5:65:9d:52:92:
e2:3f:f8:cb:3f:21:33:83:93:ca:d0:32:62:35:a6:
db:d1:d1:24:b7:2d:38:6d:45:84:72:bc:9a:95:23:
14:8e:b6:38:d6:ae:36:05:7d:ea:74:bd:f0:5c:1a:
69:cd:94:d0:4f:6c:e8:56:08:43:f2:d8:91:1f:c9:
a6:f7:38:be:6d:d2:07:12:8b:fe:3c:7d:e3:d9:c6:
09:49:99:4c:46:de:6b:c6:a3:a7:08:a0:b7:ae:e3:
f6:c9:e2:01:90:10:e6:bc:28:6b:bb:9a:54:e3:c5:
75:ec:62:e5:fb:06:6f:ec:b1:4d:af:02:0a:12:c0:
c4:dc:66:3c:a1:49:d7:21:e2:73:e3:6d:db:eb:bc:
19:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:81:50:75:59:06:4F:9A:5E:4F:0C:7C:E9:15:7C:9F:73:16:04:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/576102ce-aaa4-376a-8685-00b6e6cb9e91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.crl
X509v3 Authority Key Identifier:
keyid:B4:37:CD:B6:90:F1:2D:53:ED:DE:17:C7:CE:9A:22:44:93:0E:EA:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:d2:0a:96:7b:9d:b6:9b:1a:45:67:40:f4:08:2e:2f:bf:76:
bc:27:57:09:67:8c:b6:29:6f:bc:7b:14:67:61:9c:2d:8b:8d:
0d:4f:9f:97:75:15:7c:41:a7:80:92:2f:b2:70:d3:7b:16:52:
22:18:2c:62:1e:cf:6c:0e:2a:54:5b:ff:72:bc:16:a4:93:b6:
fd:80:61:d4:00:fe:66:55:28:3b:08:5d:9e:d2:c1:a5:ce:57:
27:cc:d2:29:eb:db:df:e7:93:fa:80:a9:bb:2f:c9:09:ac:61:
31:c1:98:36:0c:05:54:68:80:12:6c:ab:c6:3c:8c:f3:34:1c:
b8:2e:4b:0c:f7:b3:fe:14:c6:2a:27:3c:6a:b1:c7:25:44:9a:
95:06:82:bb:e4:16:73:a3:6f:ab:71:bc:9b:33:3c:51:1a:7e:
f7:af:6b:70:1b:b4:2a:36:5f:c6:a1:49:e8:fc:49:58:67:c0:
59:31:ff:e5:4c:e3:69:72:48:3b:3e:60:4d:7a:4f:1a:0d:f7:
b2:72:17:0f:da:c5:fb:1f:1c:f3:15:39:c2:95:3d:01:52:30:
66:07:dd:5d:b5:63:b6:59:fd:c2:4c:d1:60:3e:51:81:f0:39:
b1:a9:db:7b:cf:7e:9b:fb:ac:8d:db:de:82:3d:98:cc:06:f6:
b1:1f:d8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:40:44 2025 by rpki-client