Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/3104a71a-20f3-3522-8e24-dc86758b4ef9.roa
File: 3104a71a-20f3-3522-8e24-dc86758b4ef9.roa (raw, json)
Hash identifier: 2P85YO/XEBnt36FD3dRfZOO1/piGl51Ka0J+1ZbilnA=
Subject key identifier: 97:FB:D4:A9:86:5F:2F:B2:C4:37:2F:78:58:10:44:62:B6:70:9A:FF
Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial: 010D0C9F432858484037468AFA99D45121879900
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/3104a71a-20f3-3522-8e24-dc86758b4ef9.roa
Signing time: Wed 18 Dec 2024 20:10:00 +0000
ROA not before: Wed 18 Dec 2024 20:10:00 +0000
ROA not after: Tue 18 Mar 2025 19:10:00 +0000
asID: 1403
IP address blocks: 72.10.128.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:37:46:8a:fa:99:d4:51:21:87:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
Validity
Not Before: Dec 18 20:10:00 2024 GMT
Not After : Mar 18 19:10:00 2025 GMT
Subject: CN=b162717e-1939-4323-8c1b-fb328fa62128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:83:c2:a0:62:36:d0:4b:b6:d2:69:fc:00:23:
70:ec:1d:ed:ff:a3:a6:93:da:2a:fa:b2:66:e2:05:
14:8b:47:50:54:ef:13:36:82:d3:34:c4:cb:ce:a1:
26:83:cd:39:6f:71:42:5a:6a:c7:c6:e5:ac:79:73:
1b:dc:72:34:e0:10:0e:42:9e:b8:97:7c:ac:78:28:
c2:f6:ae:67:d2:e5:64:f2:b5:0c:f0:34:91:8d:b5:
ec:4a:90:49:78:37:6b:28:21:1d:6d:2c:ce:68:34:
4a:65:44:29:32:a6:e1:d4:3c:35:24:8d:9a:46:42:
b0:e8:17:d7:ad:a9:de:27:96:45:8b:61:e5:d0:0d:
f8:86:ca:f0:80:ad:dd:a0:de:b2:70:fe:12:d6:15:
f2:f9:1c:80:43:be:c9:8b:f9:4f:e9:9d:ff:1d:03:
b0:9e:63:d8:81:c2:a4:72:ee:2d:29:74:5e:b8:88:
bb:30:0c:08:19:57:d8:34:c4:62:a6:c2:20:98:0c:
6e:98:0f:af:21:23:96:86:e6:0d:65:4d:b8:a6:e1:
d1:19:7d:24:75:44:41:a0:ac:11:b4:a2:fe:b3:08:
a3:bc:c6:64:41:f5:2a:c9:d7:90:03:69:73:67:30:
2f:1f:b8:4c:99:b8:ed:a0:25:75:f3:12:9d:34:33:
db:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FB:D4:A9:86:5F:2F:B2:C4:37:2F:78:58:10:44:62:B6:70:9A:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/3104a71a-20f3-3522-8e24-dc86758b4ef9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
X509v3 Authority Key Identifier:
keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
sbgp-ipAddrBlock: critical
IPv4:
72.10.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:a4:ac:c1:e5:9d:7f:3f:4b:d9:09:0e:18:d9:eb:d0:81:78:
2f:ea:88:de:16:65:2c:06:38:47:d9:e7:12:ea:e5:7e:74:a4:
f4:bc:64:c2:44:64:2f:86:34:dc:eb:e7:18:c0:19:b6:5a:44:
f6:47:82:4a:03:d6:84:74:b8:4a:be:e4:5f:11:a7:14:3c:48:
86:6b:d6:6d:a3:7d:cc:8c:5d:23:18:f5:4e:47:7f:47:04:57:
a4:75:62:cb:74:fc:e7:aa:16:88:c7:fd:ec:dd:10:61:24:2d:
5e:9e:2c:ed:70:c0:66:7b:2f:21:da:92:12:cb:92:a7:27:f8:
7b:c8:71:3c:c8:28:43:86:6c:80:6a:b9:e7:63:d8:33:96:4c:
9d:3a:a4:29:52:2c:2d:48:37:29:57:59:69:40:e7:79:2c:dc:
f0:a6:a4:53:1d:08:e8:c0:cb:88:32:6c:ff:4b:21:81:9d:bf:
76:36:cf:79:d6:67:82:b7:9e:5a:e6:67:50:43:d9:41:09:3e:
27:6c:b7:1d:b3:c2:7d:6b:2b:12:e0:d9:64:7d:ae:8c:2d:e6:
27:4f:e0:83:06:06:8d:4b:23:c2:f3:ce:eb:ff:f0:03:83:1e:
8f:c1:d8:dd:05:9e:a0:c0:b5:e8:c6:c1:70:02:2d:c9:41:8a:
29:2b:88:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:49:02 2025 by rpki-client