Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/32ba4e5a-916b-3bbc-87c3-470a27252555.roa
File: 32ba4e5a-916b-3bbc-87c3-470a27252555.roa (raw, json)
Hash identifier: ZkL5p+pn+uxwgSy30aBL828I0PmBTuY0fZLMrqj1M1Q=
Subject key identifier: B2:48:CF:02:C2:50:FB:04:88:AB:86:57:90:9D:34:54:6C:26:43:9D
Certificate issuer: /CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d
Certificate serial: 010D0C9F4328576D51CC73C042CFC1734E32BBC5
Authority key identifier: B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/32ba4e5a-916b-3bbc-87c3-470a27252555.roa
Signing time: Tue 14 Jul 2020 16:40:14 +0000
ROA not before: Tue 14 Jul 2020 04:00:00 +0000
ROA not after: Sun 09 Jun 2030 04:00:00 +0000
asID: 8075
IP address blocks: 131.253.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:4e:32:bb:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d
Validity
Not Before: Jul 14 04:00:00 2020 GMT
Not After : Jun 9 04:00:00 2030 GMT
Subject: CN=a4ac9418-e38c-4f5a-a590-4a7b06769f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:af:55:b8:a5:c5:79:e3:91:8f:33:11:a9:2b:
78:df:f1:fc:e6:a9:e5:30:21:3b:cf:f2:bc:98:77:
10:2c:19:9d:7e:98:60:bf:45:01:8b:1e:9f:35:8f:
e3:e7:35:47:eb:fb:0a:d5:18:d9:d9:fc:74:cd:79:
ea:e3:9c:26:5b:ce:73:c5:fb:61:cb:71:8f:5e:f3:
c2:59:b4:a0:9e:cb:a3:5c:b8:e8:ad:b0:71:94:f7:
50:ef:31:47:e9:04:66:37:15:31:bc:57:8e:da:93:
d5:51:51:07:88:71:ea:95:6d:1d:de:6a:87:2f:2d:
74:a6:18:9b:d6:76:04:b3:d4:d5:d5:ed:3e:95:b2:
54:83:e5:b4:3d:ba:7a:87:7a:d6:b6:a5:4f:89:ce:
ae:6b:93:57:69:87:ce:f3:6a:69:5a:d6:af:b6:ba:
b8:19:af:f1:a6:c3:dc:5c:95:d1:0b:dd:b5:a7:dd:
6d:30:14:0a:23:be:f0:1e:19:f4:e6:e2:69:01:74:
66:2e:2b:03:28:2b:67:95:dd:3f:03:bd:c4:14:7b:
9b:09:00:83:b9:e0:02:e1:04:c2:ec:03:f4:2c:ae:
4a:3a:90:c9:df:de:7d:2f:75:a3:e4:75:b0:67:9d:
45:65:c2:68:8e:40:8d:9b:88:bb:7a:16:ad:54:51:
9c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:48:CF:02:C2:50:FB:04:88:AB:86:57:90:9D:34:54:6C:26:43:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/32ba4e5a-916b-3bbc-87c3-470a27252555.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl
X509v3 Authority Key Identifier:
keyid:B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer
sbgp-ipAddrBlock: critical
IPv4:
131.253.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:e1:d1:4c:e0:8f:06:90:03:59:bf:8c:8d:17:09:19:10:79:
a4:4c:92:af:61:84:44:0f:77:9f:70:e0:23:df:a6:e7:7f:e4:
d2:62:23:54:2a:0b:05:bf:f4:96:4b:71:56:24:e9:6e:f3:4b:
4b:c2:21:ea:3c:a9:fe:b3:b9:4a:84:8e:1b:18:f4:5d:d5:9e:
85:a8:5b:28:eb:fd:16:03:c7:63:e3:15:f4:6f:a7:b5:8b:3b:
4a:d6:63:0f:09:7a:fc:fe:47:cd:6a:3d:a5:1e:73:ee:57:97:
bc:66:fc:cf:4c:91:cd:e9:a5:71:ed:a1:fe:36:a3:dd:6c:0d:
46:f2:e7:67:a6:7a:53:ca:c3:8c:73:37:53:c5:42:87:55:0a:
4f:70:9b:b4:83:cd:80:9a:29:db:4b:95:3d:96:5e:34:49:a5:
dc:c1:9d:80:c6:e9:11:f8:5d:fc:17:78:e4:a3:b2:03:ae:0a:
ed:22:3e:62:07:d4:5a:08:73:dc:93:c9:cb:96:9c:da:3b:52:
53:19:4d:76:d4:51:4d:b5:79:aa:30:be:82:e3:3f:21:db:d1:
d1:6e:bf:6a:dc:03:9b:1e:66:58:e7:f6:25:93:1a:7a:e4:6d:
c1:63:af:ec:a3:01:a2:9e:e7:23:dd:33:db:b7:30:ba:c1:39:
3e:ad:e6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:45 2025 by rpki-client