Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d3d9c43f-9258-3cb4-b3ca-80836b76faf4.roa
File: d3d9c43f-9258-3cb4-b3ca-80836b76faf4.roa (raw, json)
Hash identifier: D1A2JmBlwau/lNt8PxVlXM8jkirDdD7QUHplLk66sWg=
Subject key identifier: 7A:3D:7E:25:FD:80:AB:43:17:F0:72:8B:E6:74:EE:27:DC:C9:EC:31
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F43285848BE8629781C60A4F3B03BF100
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d3d9c43f-9258-3cb4-b3ca-80836b76faf4.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 8757
IP address blocks: 128.1.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:29:78:1c:60:a4:f3:b0:3b:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=af7f90f0-befb-4261-900c-5823d99933be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9a:82:4e:2d:cb:81:a8:40:a4:8e:9f:1f:93:
0b:40:50:b7:e2:29:82:f0:94:29:c5:9a:d2:5e:62:
52:5c:a2:34:9e:8e:74:f1:d7:1b:c0:0e:2a:28:7a:
17:b5:de:ef:c3:f3:4d:14:a4:9c:ec:13:49:de:cd:
f1:c8:dd:13:f8:11:99:7c:2b:5b:fd:01:dc:f3:2b:
0a:db:f0:6e:3c:fc:c8:b9:52:1c:51:a7:8b:be:9a:
fa:f7:53:00:83:9c:c6:31:d9:37:19:4e:74:84:fd:
e9:77:4c:c5:b0:b3:41:90:d0:86:e2:d2:6d:17:d3:
c6:41:47:e9:16:37:3d:e1:a4:91:8c:50:7f:65:fe:
14:b2:06:a2:9c:91:7f:6a:40:3e:3c:d9:1a:14:c6:
78:4f:ef:77:63:32:2d:bf:2c:af:1b:e0:85:fe:9a:
32:59:e3:a2:5c:9d:72:5f:e9:41:3d:22:11:a8:32:
0a:bc:64:be:99:63:e4:ce:3e:aa:dd:9d:07:c5:0a:
8d:86:7c:31:3d:4e:7f:17:13:34:8f:73:35:bc:7d:
79:6d:c6:f6:cd:28:69:9c:d6:df:22:0c:77:79:4a:
27:83:87:ed:4d:7d:a6:11:e0:dd:1b:93:7e:49:e4:
68:f6:aa:df:a9:f3:19:9b:2b:95:33:55:f7:6e:18:
46:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3D:7E:25:FD:80:AB:43:17:F0:72:8B:E6:74:EE:27:DC:C9:EC:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d3d9c43f-9258-3cb4-b3ca-80836b76faf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
128.1.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:f8:f2:b4:22:c5:60:9d:88:55:61:c3:3d:7a:f6:86:4c:ac:
56:b0:49:c4:f5:99:c9:73:bf:d3:ec:61:75:5c:cd:70:30:f8:
13:71:16:78:08:2f:ec:b1:a2:40:9c:fb:81:e3:a0:f0:c0:a3:
61:ac:72:ca:48:18:4a:dc:4f:a5:07:86:cc:6a:7c:45:f8:f3:
8d:06:2e:21:28:a0:9d:37:12:9d:44:cc:eb:8b:02:c7:90:43:
0a:e7:4e:e4:c2:be:d3:24:c4:f2:0f:95:30:60:7c:7f:e6:fc:
3d:5e:2a:7b:78:c6:ff:2f:28:3c:3f:c5:d0:80:74:e3:04:66:
d4:3c:ae:31:6c:6f:4c:37:7b:9c:1a:9d:2b:9f:4a:e1:71:8b:
61:a8:cc:19:fc:1e:dd:aa:1b:d3:a9:56:4c:94:e6:70:de:00:
e8:4f:ba:a8:70:ce:75:d7:7d:e8:ee:f3:de:df:e5:b8:a6:fc:
c2:39:75:97:5c:03:b6:fe:c7:1c:30:5c:79:ef:f3:e2:c3:27:
60:08:d1:10:56:26:e1:1b:3b:5d:60:0c:cf:cc:17:ff:4a:2b:
a0:51:5a:ae:a0:e4:6f:b9:c8:af:e3:ce:b0:6e:ca:60:e5:66:
8a:3d:24:9b:e9:43:2b:6a:7a:78:c6:7e:80:b4:3b:71:9d:a3:
86:5d:08:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:46:40 2025 by rpki-client