Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/70b8f7c6-0c20-3009-98e6-185bb036b6d8.roa
File: 70b8f7c6-0c20-3009-98e6-185bb036b6d8.roa (raw, json)
Hash identifier: LfcZh3MQ7YuGdax3AV7KVDSFECcF6OvqXY0WZs0scmk=
Subject key identifier: 81:67:8C:C5:17:A8:3B:42:1F:E2:0B:92:48:71:89:2A:32:2E:A0:A8
Certificate issuer: /CN=b50a2dec-1d8f-47d7-b523-5a2ca365f5c3
Certificate serial: 010D0C9F432858481C9A7A96A06B638948670900
Authority key identifier: 35:60:12:FD:7A:D5:B1:82:94:7A:A1:8E:8C:62:72:51:0E:7D:25:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/70b8f7c6-0c20-3009-98e6-185bb036b6d8.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 47027
IP address blocks: 130.51.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:7a:96:a0:6b:63:89:48:67:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50a2dec-1d8f-47d7-b523-5a2ca365f5c3
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=b67e7f0b-09d6-47d5-ae41-19bfa98a697f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:d2:12:dd:0b:56:2a:39:94:e7:7f:57:13:
ca:5c:94:65:99:91:a9:78:0c:f7:b6:b4:c1:46:3a:
b6:9f:59:7e:9a:25:e9:d4:41:1c:d6:b3:88:f1:87:
3b:14:72:bf:4a:7b:5b:5a:94:bd:93:8f:2d:ac:03:
ac:21:11:1a:0b:e8:88:1e:b8:15:6c:5d:18:f5:2e:
bb:54:96:4a:c0:e3:df:99:86:1d:b0:4c:06:25:7c:
a8:19:67:9e:66:cd:5f:42:77:1f:fc:3d:fe:46:98:
38:57:09:10:55:3c:0b:d2:43:97:3b:61:f7:12:9b:
4b:9f:1a:e6:03:a4:f9:ca:6d:17:5b:82:3d:31:d0:
81:24:dd:85:0a:61:cf:e8:4a:b8:f4:ef:1d:43:95:
0a:2b:2c:e4:87:f1:d8:a8:00:63:91:9b:38:fe:a0:
0c:9b:3f:53:af:26:4d:b3:c9:34:47:ab:2a:9f:1e:
d1:c2:2d:bc:21:d4:06:83:78:ed:6d:bb:60:23:3b:
ea:41:f0:21:22:b4:50:1e:dd:53:57:bb:cc:78:79:
c3:94:cf:f5:1a:0c:ed:30:44:68:4e:ca:e1:ce:43:
34:61:fe:bb:17:69:5b:2d:9c:69:e5:cf:ad:0c:3a:
f1:39:b9:f3:93:5d:55:b8:c3:4c:96:da:64:53:ad:
b3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:67:8C:C5:17:A8:3B:42:1F:E2:0B:92:48:71:89:2A:32:2E:A0:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/70b8f7c6-0c20-3009-98e6-185bb036b6d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.crl
X509v3 Authority Key Identifier:
keyid:35:60:12:FD:7A:D5:B1:82:94:7A:A1:8E:8C:62:72:51:0E:7D:25:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.cer
sbgp-ipAddrBlock: critical
IPv4:
130.51.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:99:8a:a6:3c:a4:d3:eb:53:81:04:41:b7:1f:13:8a:29:20:
9a:80:72:13:36:9e:c8:cc:7b:d0:af:44:ff:3b:2b:e9:2e:37:
8a:e1:9f:77:d8:e1:13:e2:8a:f9:fb:46:f0:e4:c2:76:60:59:
ca:7f:4a:71:5a:5e:c2:b2:1a:48:2d:44:3c:cd:e9:5b:6d:d5:
63:3e:07:d1:76:77:3f:78:32:23:ae:09:9c:93:7a:b0:45:47:
86:af:5c:2b:47:09:4d:ab:32:2b:20:d4:4e:4a:65:74:30:39:
02:ae:15:9f:f0:58:2b:bb:1b:9a:cd:17:45:09:5b:e8:69:01:
60:f4:63:b4:21:95:e0:3b:98:59:20:ed:f4:9d:9d:b5:30:6b:
1c:14:18:23:84:55:d5:27:65:e9:47:5a:e0:ee:ad:cd:11:93:
2d:d4:12:d1:2a:d7:85:47:14:9b:65:65:02:80:fd:cf:2f:80:
90:47:9c:93:e5:fa:54:86:7f:73:4d:9c:7f:ce:a5:66:b2:c2:
0b:8a:9f:7f:2f:04:29:85:00:f7:ac:44:5b:ee:cb:06:f0:da:
ad:3e:08:57:d2:55:3a:8f:4e:21:c4:f4:69:94:ef:fa:cf:54:
01:30:fe:fb:74:44:d9:2c:3c:8f:1a:f6:77:eb:5f:bb:26:f9:
95:f0:c9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:22:56 2025 by rpki-client