Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/ef450639-e6ba-33a7-8d48-aec62dc91a89.roa
File: ef450639-e6ba-33a7-8d48-aec62dc91a89.roa (raw, json)
Hash identifier: k05a2SEczmlu3r0emtSDRaWFRcRcq2IcE9xvzPGKMIQ=
Subject key identifier: 3B:5F:E0:7B:7F:E8:E4:7D:EA:2F:3A:A9:3A:7A:FD:14:E2:75:3C:6A
Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial: 010D0C9F43285848BA563F77EB6E3BCC37B39600
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/ef450639-e6ba-33a7-8d48-aec62dc91a89.roa
Signing time: Fri 31 Jan 2025 14:00:51 +0000
ROA not before: Fri 31 Jan 2025 14:00:51 +0000
ROA not after: Thu 01 May 2025 13:00:51 +0000
asID: 394089
IP address blocks: 128.77.0.0/18 maxlen: 24
128.77.64.0/19 maxlen: 24
130.41.0.0/18 maxlen: 24
130.41.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ba:56:3f:77:eb:6e:3b:cc:37:b3:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : May 1 13:00:51 2025 GMT
Subject: CN=32722920-9105-4a73-a5c1-201449067be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e2:71:2b:b0:1f:00:80:83:61:eb:16:2b:63:
76:f7:db:96:1f:f0:47:3c:12:a6:f3:cf:b4:79:1f:
25:98:b4:dc:fb:46:ed:3f:6c:f2:64:4c:fb:eb:dc:
8e:4a:d8:81:87:e4:68:97:2c:b5:6f:ff:72:57:cf:
29:d6:03:d5:4e:d8:10:b3:92:d5:77:2a:e5:78:79:
48:c8:0e:17:12:1f:23:34:3d:7e:1f:1d:ee:b0:56:
d5:ec:b0:0d:29:50:a2:86:dc:d7:2e:3b:87:97:8c:
74:06:2b:7e:6d:9d:d6:13:59:dc:1d:d3:b4:07:49:
e3:f6:1a:35:4e:51:77:91:a8:37:da:88:fd:46:25:
12:2e:d8:7c:58:90:cf:78:61:a5:de:cb:e3:0d:ac:
25:0b:49:1c:c5:2b:58:ab:f4:74:1f:3b:37:90:90:
aa:71:04:5d:cd:09:81:80:d1:a7:98:1a:67:10:60:
ac:72:d8:4f:dc:56:04:25:72:d7:1e:00:c0:27:31:
69:fb:ea:38:81:61:e1:23:e2:34:75:79:49:ff:76:
97:09:cd:36:80:cb:66:47:7f:86:c7:f7:1b:75:52:
83:6e:6c:d3:40:7e:86:c6:98:e4:2a:56:79:53:c3:
1c:5d:9e:37:f3:0f:f6:ec:97:bf:87:82:74:d4:93:
2a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5F:E0:7B:7F:E8:E4:7D:EA:2F:3A:A9:3A:7A:FD:14:E2:75:3C:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/ef450639-e6ba-33a7-8d48-aec62dc91a89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
X509v3 Authority Key Identifier:
keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
sbgp-ipAddrBlock: critical
IPv4:
128.77.0.0-128.77.95.255
130.41.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:eb:f4:78:1e:c5:ba:20:ac:e8:6f:12:9e:bb:95:f8:0f:18:
3c:bc:1a:7f:08:88:d2:9c:62:3d:a6:85:5e:44:db:78:a8:5b:
b5:cf:0e:a5:7f:1b:0e:16:48:ab:5e:de:75:02:0d:7b:b6:95:
a8:e5:53:2a:eb:d2:4b:d7:5c:12:f0:9e:96:32:b8:9e:b3:cc:
b0:69:ac:d9:57:4c:60:83:f4:ba:4b:aa:a2:1b:d5:ee:33:9b:
6e:bd:90:50:77:a8:16:44:11:7c:4b:50:b4:5c:8e:bb:26:29:
eb:d6:b2:fc:10:77:a7:70:da:93:16:01:58:b6:2b:33:f6:41:
e2:2d:41:f3:f3:12:ce:c7:b5:b4:2c:22:0b:ea:57:3d:24:1d:
f9:d3:e3:94:f5:07:8c:c5:91:11:ad:62:8c:de:60:c7:34:9e:
b5:2d:e9:72:32:e0:c5:0e:07:b3:7d:b9:fb:83:e7:4e:37:fa:
e8:84:6b:b3:ca:da:f9:8a:cb:18:97:5b:24:65:9a:be:2f:b7:
c0:9c:30:3c:0a:28:4d:fb:fd:24:33:cb:95:eb:76:f5:29:a8:
c6:05:d0:a0:17:5f:9d:c2:0b:39:5c:0a:01:2c:2d:94:f2:ef:
e9:10:ac:98:e2:44:65:fc:64:a6:15:12:17:1f:7c:cb:3d:4f:
d8:53:65:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:37:14 2025 by rpki-client