Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/b287c706-2d12-3e67-bc19-1bb937299cb7.roa
File: b287c706-2d12-3e67-bc19-1bb937299cb7.roa (raw, json)
Hash identifier: w1kbgj91x4yNFoXjN4fBjgdMu6bbeWUkbu+/GSAg5fY=
Subject key identifier: 95:E7:4D:42:74:EE:0A:FC:7E:34:1E:FF:54:B3:AE:A0:BB:A4:75:A2
Certificate issuer: /CN=a07401de-4b0a-4532-ac08-dba8b0588c48
Certificate serial: 010D0C9F432858486C2B2041B234FDADC7594880
Authority key identifier: 2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/b287c706-2d12-3e67-bc19-1bb937299cb7.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 397501
IP address blocks: 128.211.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:20:41:b2:34:fd:ad:c7:59:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a07401de-4b0a-4532-ac08-dba8b0588c48
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=74cd7010-9472-41f0-85e4-edf697e575ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ca:b4:28:7f:f2:98:a6:c9:1d:01:aa:19:d5:
46:1e:c4:f1:4d:d4:e7:0f:bf:25:2e:cc:ff:00:9e:
59:26:c5:eb:0f:bd:a0:7a:ff:75:7e:bc:da:10:73:
b6:b6:01:32:e8:48:e9:38:46:f6:c1:33:69:de:0d:
ed:0d:50:4c:f3:f7:db:cc:7c:d5:28:58:73:92:c1:
0c:8e:bb:6c:3e:3f:14:5c:1d:c8:1f:ec:2e:72:37:
ad:07:44:9a:78:b9:84:65:16:e5:f5:ae:be:0a:55:
d0:2a:cf:0c:3e:d2:df:e9:19:3e:c4:68:c4:06:7b:
ff:49:31:86:2f:02:4e:f0:5d:dc:3c:16:40:d1:02:
27:c0:ba:4e:ae:1c:21:4b:08:ea:3d:14:53:9b:9f:
12:56:10:f0:01:f1:69:09:74:9c:e3:8b:1c:c3:d4:
5b:71:f9:86:8e:51:39:0b:0e:4a:39:71:9a:08:82:
8c:46:21:49:b7:f8:7d:30:ef:f2:fe:76:c9:b6:03:
8f:96:71:11:82:d1:9a:cc:2f:ac:4a:ce:c7:17:f2:
0b:95:03:8e:39:0c:ed:50:c9:59:42:73:85:8c:9b:
53:63:59:dd:60:62:c1:5a:fa:78:5e:c5:0f:f1:91:
2e:76:3c:33:a9:4b:32:d1:1d:85:db:c6:04:0e:b6:
e1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E7:4D:42:74:EE:0A:FC:7E:34:1E:FF:54:B3:AE:A0:BB:A4:75:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/b287c706-2d12-3e67-bc19-1bb937299cb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.crl
X509v3 Authority Key Identifier:
keyid:2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer
sbgp-ipAddrBlock: critical
IPv4:
128.211.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:61:5f:83:5f:5d:9c:b5:9a:80:8c:3c:82:56:e8:04:58:84:
a1:b4:0c:d2:be:d7:1b:80:97:db:ac:3b:ad:90:38:ce:65:06:
53:19:e9:ba:97:2c:d7:42:0c:50:54:80:a6:21:d0:0f:56:e0:
67:20:46:f6:25:61:ad:65:21:f0:16:d4:4a:c3:b8:7b:ce:e4:
86:08:89:ab:25:6f:dc:51:97:cb:0e:a1:2f:17:86:a4:5d:32:
59:a4:ff:88:df:a3:97:3f:f0:01:48:c8:c3:f6:9b:32:84:ac:
b3:fd:2d:b8:80:cd:98:60:ec:71:e0:c2:df:20:fb:23:4c:27:
76:04:4f:9c:47:e0:62:d3:ef:82:18:be:80:f8:7c:c5:6e:57:
05:8e:a8:7c:8f:ee:17:18:b4:5f:82:40:3d:e0:89:ac:2d:7c:
f4:72:ab:a4:78:cb:9d:af:6a:c1:b4:48:0c:79:d5:e1:86:50:
b3:3f:91:3b:92:01:fe:87:47:b1:7f:55:fb:e7:64:28:e2:f1:
c2:9e:4a:ac:0d:dd:97:72:f6:cc:dc:06:19:a6:b6:93:24:2c:
a6:8c:19:80:b6:e5:b9:2d:ea:f6:86:7b:84:10:a9:8a:23:7a:
90:93:66:98:f6:f4:6f:92:0b:26:47:ad:06:d0:ec:63:b0:6b:
41:95:84:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:45:56 2025 by rpki-client