Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/c5492a25-61e2-3397-848b-141163ce58ef.roa
File: c5492a25-61e2-3397-848b-141163ce58ef.roa (raw, json)
Hash identifier: kHNJrW5lF0T4E5wEiipSkhKoBvopcmNNpBoz7wOT6m4=
Subject key identifier: 79:18:C5:57:22:FC:76:E1:40:80:D6:C7:35:37:CF:D5:98:AE:8F:CC
Certificate issuer: /CN=a07401de-4b0a-4532-ac08-dba8b0588c48
Certificate serial: 010D0C9F432858486C2B20527A7110DE45C3B700
Authority key identifier: 2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/c5492a25-61e2-3397-848b-141163ce58ef.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 397511
IP address blocks: 128.211.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:20:52:7a:71:10:de:45:c3:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a07401de-4b0a-4532-ac08-dba8b0588c48
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=e7017a60-3046-4d88-b149-94167d9fba8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:aa:f6:55:99:34:a3:23:43:cf:61:2b:7c:26:
f4:91:1e:ca:e7:bb:48:fd:09:85:1c:b2:7f:f4:dd:
e6:e1:8c:48:24:2d:66:ae:f9:03:a1:02:cd:0b:b3:
fc:15:57:f2:e7:1f:a3:3b:90:e9:38:af:78:5a:ca:
27:68:36:f4:51:fd:99:42:f6:be:dc:49:76:48:68:
ff:5b:6a:9a:69:88:92:c4:a5:17:e4:32:02:58:08:
37:45:86:38:78:ae:51:ec:99:e0:83:64:25:85:d3:
38:97:80:e2:45:14:b9:74:6b:53:c0:b2:4e:fa:02:
d8:0f:ba:f6:bc:06:e9:96:97:8e:4f:ba:ca:f4:f4:
bb:26:1b:a0:1d:84:b8:a3:7d:72:5e:1b:b8:0b:f8:
cc:76:fe:23:fa:4e:a9:80:fb:a0:b2:f8:99:6c:9b:
a3:02:c1:61:2c:fa:f7:f8:a1:ef:08:b8:68:40:89:
04:ae:fe:7f:00:7a:8f:96:59:d1:78:8a:a2:8b:c0:
a1:21:30:9c:87:84:2f:23:7f:5a:e8:5e:d8:c0:b1:
46:c6:72:3e:96:aa:a0:93:15:0a:5c:e1:94:06:4a:
7c:a1:28:a7:c2:fc:96:58:62:a5:a4:0a:fa:c0:4a:
79:73:e2:57:7c:03:b4:5f:44:11:c9:f7:1d:ff:00:
cb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:18:C5:57:22:FC:76:E1:40:80:D6:C7:35:37:CF:D5:98:AE:8F:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/c5492a25-61e2-3397-848b-141163ce58ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.crl
X509v3 Authority Key Identifier:
keyid:2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer
sbgp-ipAddrBlock: critical
IPv4:
128.211.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:48:15:cf:ab:c5:e8:8d:23:c6:53:74:38:a1:db:67:bd:7e:
8c:e4:aa:f8:5f:4c:8c:1e:91:d7:b1:2e:25:a2:92:84:49:1b:
23:0b:c6:2c:a9:3b:cf:ab:f4:b6:d4:d0:46:45:85:6a:06:45:
a8:2c:23:90:7e:bf:6f:ad:ff:f7:10:6b:fb:b4:67:99:cf:d3:
d2:27:1e:69:ae:5a:4f:86:73:ea:c7:63:0b:32:61:b1:27:6b:
92:ad:7a:68:13:8b:47:2b:cd:7e:0d:d7:8f:26:ce:ab:0b:2f:
67:8d:4a:91:3b:ee:8a:88:c2:9c:2e:12:97:af:ef:dd:8e:56:
26:e4:f4:57:8c:54:68:51:0b:61:82:97:4a:bd:e0:b7:cc:55:
49:7a:f6:9f:fd:8d:23:a7:7c:96:fc:e5:80:bd:c4:b7:65:95:
d5:6e:c7:80:37:56:68:34:0b:e3:db:f8:a0:d7:54:62:33:f0:
2b:ea:57:21:02:fb:37:f5:0b:c2:69:f6:e0:cd:a5:a3:40:df:
36:33:56:ac:7e:7f:9e:6a:83:b5:53:ac:7c:5e:9c:04:ae:1d:
e9:e2:07:55:ba:a4:0e:d5:93:89:68:3c:1f:b7:56:b2:37:01:
41:a7:1c:dc:b2:d9:d9:2d:d3:7d:a2:d7:50:80:31:b6:bc:67:
a0:23:5c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:56:03 2025 by rpki-client