Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/cac12f27-e3af-3803-a69c-e1db5cbc4dc6.roa
File: cac12f27-e3af-3803-a69c-e1db5cbc4dc6.roa (raw, json)
Hash identifier: FBQAjAaFD/WmPaEGQfOPJkgpf3RC4SJIY+CO2UuLfpI=
Subject key identifier: B1:2A:12:7E:96:E5:CE:71:8F:B2:2E:32:40:A4:55:B9:DA:44:72:22
Certificate issuer: /CN=319d5f20-2367-457b-970b-7f1c1a60fcae
Certificate serial: 010D0C9F432858480BDA6EDF63B207AC68349B40
Authority key identifier: 9C:51:2B:15:7A:87:63:E4:EE:5C:4E:E6:F3:26:B7:38:67:1C:E2:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/cac12f27-e3af-3803-a69c-e1db5cbc4dc6.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 14630
IP address blocks: 142.148.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:6e:df:63:b2:07:ac:68:34:9b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=319d5f20-2367-457b-970b-7f1c1a60fcae
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=2f3723a7-cbfa-44e4-ba27-6067adedf051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0c:90:3a:89:82:d0:68:36:99:fe:4f:ba:29:
ad:39:35:3c:bf:d8:8d:c5:3b:9c:da:b7:77:6e:7a:
ac:a4:2b:3e:b0:ec:c5:93:2a:3b:95:66:dc:e3:91:
dd:86:ac:42:34:24:f9:6c:c1:8f:77:be:da:ce:3b:
d6:1c:16:ce:24:6d:c8:f7:b9:80:90:e7:6f:b7:70:
28:6c:a1:56:29:50:c2:63:e1:ca:92:e4:7f:73:d7:
b4:c5:f2:de:7d:1f:1f:54:56:38:22:33:41:9c:cd:
53:ed:3a:e6:7d:7b:ee:fb:67:da:55:5b:17:8d:da:
cd:78:6a:f3:67:a6:9e:f3:d7:f0:92:15:91:a8:ca:
01:97:46:57:45:d6:59:b5:3b:16:71:c7:67:9b:f7:
2e:01:87:18:5e:e3:05:a4:0a:81:e6:f2:01:a8:a0:
ec:30:52:55:64:1e:5b:ca:bd:71:e5:85:62:b2:c5:
b8:04:4c:ac:8d:2f:58:de:9f:2a:a6:b7:d2:be:6d:
2b:8f:20:90:e0:4f:05:21:0c:18:1e:4e:6e:00:dd:
82:32:1f:de:53:d8:60:4e:77:57:cb:e5:f7:cd:70:
d4:3e:e9:7f:4a:6d:44:4f:82:d5:c1:6f:86:eb:09:
ff:d3:a2:a2:18:0d:00:1f:89:bf:9a:b7:97:89:b1:
69:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2A:12:7E:96:E5:CE:71:8F:B2:2E:32:40:A4:55:B9:DA:44:72:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/cac12f27-e3af-3803-a69c-e1db5cbc4dc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/319d5f20-2367-457b-970b-7f1c1a60fcae.crl
X509v3 Authority Key Identifier:
keyid:9C:51:2B:15:7A:87:63:E4:EE:5C:4E:E6:F3:26:B7:38:67:1C:E2:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae.cer
sbgp-ipAddrBlock: critical
IPv4:
142.148.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d2:f6:2d:04:6d:c5:3c:d3:b8:5e:e4:c4:97:a9:0f:5e:e9:fc:
a6:50:fe:b9:10:e9:dc:a2:7c:5a:55:94:24:6f:30:66:8d:31:
f2:53:83:b2:72:78:03:6e:ab:ee:02:94:b5:cc:e7:d1:bb:8e:
01:8a:04:57:5d:da:07:6d:ad:b0:0d:34:61:ce:8f:72:e3:a8:
9a:8f:5c:ec:6c:f6:df:6a:f8:45:32:84:ae:eb:6c:11:b3:40:
4b:b6:ba:02:b3:6c:bf:37:31:40:0e:53:01:18:a0:e1:c9:76:
ec:56:cd:83:cd:a2:84:7c:42:63:ac:bd:92:52:14:35:dc:51:
28:e7:26:ef:1c:88:8d:38:9b:40:22:a4:da:c6:76:24:01:66:
4c:c7:f0:8f:ec:29:a6:30:76:0b:e1:01:d8:b9:21:91:7c:7a:
ca:23:80:72:a5:3b:96:dc:30:60:32:46:6e:c4:35:d4:1c:2b:
66:a1:58:f7:90:6e:26:96:a1:9e:da:bc:25:0f:dc:06:6c:fd:
9c:cc:78:df:a8:58:d6:b1:e0:ee:69:38:5b:41:e0:16:86:bb:
1d:12:ed:a1:93:fb:46:f5:18:b9:41:34:c7:40:a9:ea:85:7c:
df:c5:a8:cb:54:28:d8:b8:88:f4:49:e1:f1:05:a2:64:73:12:
bf:c1:86:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:27:11 2025 by rpki-client