Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a9d63830-af6c-3450-85d9-b6a575a21f7e.roa
File: a9d63830-af6c-3450-85d9-b6a575a21f7e.roa (raw, json)
Hash identifier: M5y6GBeiIRBE91WJ6dSjC5QKVDJ0kgWfmgEkmaNDMEc=
Subject key identifier: 1F:CE:17:9E:B7:4F:C7:09:75:EB:DF:33:AC:B6:9F:8F:AF:4A:61:5B
Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial: 010D0C9F432858487755D343840FC5F00CD83900
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a9d63830-af6c-3450-85d9-b6a575a21f7e.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 16509
IP address blocks: 129.33.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:d3:43:84:0f:c5:f0:0c:d8:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=9d5a378e-ec09-4303-a9c9-4ab7edfe1254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:69:0a:ce:cd:5b:e9:96:19:40:94:f2:2b:c2:
bc:23:61:18:2f:9a:f0:ad:64:d3:d5:a9:bb:31:cf:
2f:ad:c9:f8:f1:27:bf:2b:12:92:34:51:f8:fc:a2:
d5:14:11:d7:bf:dc:bc:32:43:57:72:a3:13:64:d3:
c8:82:a5:df:7e:a3:6f:20:bb:ee:c8:8f:75:63:13:
61:7d:0a:a1:ff:9a:88:51:21:7b:de:95:01:1c:8e:
26:13:b6:56:4b:19:c4:fd:be:08:62:11:c8:7c:c5:
22:a9:d7:fe:46:79:74:37:64:5c:2a:cc:78:3c:b2:
35:1f:a6:4b:e9:bb:b9:1e:7d:53:2c:28:fe:3c:59:
db:d4:d8:f5:5e:da:0c:b9:f6:7b:40:b4:27:e0:0c:
17:e2:80:cf:00:14:06:2f:c7:d9:f5:d6:60:cd:8b:
2d:2a:b8:26:b4:8d:98:b6:aa:39:38:98:b0:a6:1a:
e9:70:03:2f:dd:ad:9c:29:17:89:13:5e:1f:77:c4:
b2:02:e8:77:58:c8:68:37:33:05:ae:88:99:10:0b:
e4:a3:46:d0:0a:e2:76:fd:d5:0d:39:7e:f3:1a:0d:
bd:5f:16:24:96:5c:33:39:bd:04:51:a9:78:b7:f4:
c8:91:c5:ee:8f:a9:7c:bf:61:d1:4b:c7:a3:50:74:
89:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CE:17:9E:B7:4F:C7:09:75:EB:DF:33:AC:B6:9F:8F:AF:4A:61:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a9d63830-af6c-3450-85d9-b6a575a21f7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
X509v3 Authority Key Identifier:
keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
sbgp-ipAddrBlock: critical
IPv4:
129.33.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:86:af:43:4d:63:a2:c4:b6:42:c8:9b:93:34:f4:55:1d:06:
98:11:1d:8f:6e:12:ef:45:2b:7e:82:47:a2:90:4c:10:64:1a:
cd:91:db:9c:cb:af:7a:f3:12:4c:5d:a1:a5:0a:f9:9b:9e:45:
47:43:39:ee:02:4d:4b:b5:f7:c8:ee:0c:d9:e3:27:cc:89:21:
40:ce:74:68:e3:34:c4:ff:61:a8:60:b7:55:05:77:84:1b:be:
79:4d:df:75:48:bc:bb:97:c8:50:da:68:bf:ea:43:c4:34:5d:
80:e6:cb:ac:d1:fb:c5:6c:ff:74:3d:ba:be:2f:8b:63:ca:54:
d0:38:1a:80:e1:3c:b7:5c:8f:de:50:d3:d6:4a:cf:cc:63:24:
51:2a:23:1f:5a:ed:c0:fa:17:87:8d:a1:ad:29:b4:d7:1e:bd:
74:f9:fe:6a:b6:4f:31:76:ea:ff:92:b7:c9:02:50:77:35:d2:
47:97:c1:42:29:20:72:e5:af:67:00:25:ea:81:ba:ce:00:33:
03:14:d0:f3:0d:0a:60:4b:47:66:b3:b0:93:27:ad:76:25:58:
c0:4f:c8:17:6e:0b:48:b1:ff:bc:da:52:11:95:4f:ee:d9:b1:
0e:b5:06:17:69:dc:8a:a8:3d:f2:7c:65:3a:70:65:c8:c8:2f:
21:8b:c3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:34:52 2025 by rpki-client