Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/b47f4a91-d1d5-37c8-b661-b064d98eb393.roa
File: b47f4a91-d1d5-37c8-b661-b064d98eb393.roa (raw, json)
Hash identifier: f1PPd5ya0J9bSUrRFnJ1EJsB33aeBP1B2Ys1TF8IHWo=
Subject key identifier: BE:B2:C5:DC:46:FC:7A:3F:B3:40:B8:C2:D0:1D:C3:F5:9C:07:7F:4D
Certificate issuer: /CN=429c38be-db51-4d91-a361-94ba3bfd9e9a
Certificate serial: 010D0C9F43285848F926972D35898DF2A7966540
Authority key identifier: 3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/b47f4a91-d1d5-37c8-b661-b064d98eb393.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 16509
IP address blocks: 135.84.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:97:2d:35:89:8d:f2:a7:96:65:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429c38be-db51-4d91-a361-94ba3bfd9e9a
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=c9ba4ad2-eeb7-4304-9ba0-9ad9732596da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d5:9f:6a:39:16:aa:6d:e6:62:a7:d5:51:f7:
3f:02:ec:a6:02:bd:6f:e1:36:84:1c:c9:f2:0d:3f:
9c:6b:7f:ef:b4:fe:4b:cc:9e:3e:69:87:19:af:21:
55:15:06:30:86:44:a6:c1:9a:e0:48:4c:89:18:da:
07:99:0c:8b:fa:be:a4:12:90:65:7f:bc:e0:f1:53:
32:17:9e:89:38:3c:c1:cd:a0:42:b8:95:99:29:20:
1b:7e:0c:c1:02:6b:a1:6f:db:73:f4:68:24:68:67:
6c:f0:9f:ab:71:c5:2d:92:17:2a:a6:6f:88:d3:8a:
ec:3a:3c:f8:25:53:f7:91:a9:e4:cd:93:a2:c6:17:
06:19:60:44:22:d1:c7:60:86:9e:08:ed:12:52:ea:
0b:a3:ad:58:ba:4c:b7:89:6a:65:20:40:83:2b:97:
80:34:17:05:34:ce:40:91:bc:66:59:e9:e3:67:93:
b3:3d:b5:93:ec:e7:1b:58:a6:51:36:44:44:60:01:
65:77:78:58:3c:c2:71:c3:22:f1:23:39:c8:36:ec:
b9:b6:d8:fc:52:ed:5c:83:da:c7:05:2e:12:00:08:
69:0b:40:3e:f8:2a:cd:5a:ca:c2:c1:1c:9c:91:79:
11:3e:39:e3:36:36:88:9b:a6:cc:35:b1:6f:20:c2:
0e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B2:C5:DC:46:FC:7A:3F:B3:40:B8:C2:D0:1D:C3:F5:9C:07:7F:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/b47f4a91-d1d5-37c8-b661-b064d98eb393.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.crl
X509v3 Authority Key Identifier:
keyid:3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer
sbgp-ipAddrBlock: critical
IPv4:
135.84.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:39:4b:6d:a5:db:4d:c9:65:1b:a1:ae:fa:1d:f9:4d:f4:ff:
24:82:82:c3:a2:0b:8f:e7:8e:73:43:ce:0e:2e:b4:81:0b:3a:
07:2f:bd:e5:a8:1b:25:bb:d1:60:32:73:4e:bb:ad:98:19:9a:
b8:09:a8:5d:0d:2e:d3:5c:d6:c8:f4:b3:87:e8:6a:d8:f2:85:
6b:4f:03:95:c6:88:fa:28:67:d6:dd:63:9d:05:8c:0f:14:61:
f9:28:1f:7f:91:17:a4:81:62:1a:df:3a:2c:53:99:8b:7f:54:
1e:de:db:16:31:7f:94:04:53:8c:97:6d:22:1d:23:3f:0b:bf:
a0:96:9d:1c:4d:4e:3a:26:41:10:fe:a2:52:35:69:05:82:d9:
4d:1d:cb:00:93:a8:2c:59:00:45:23:86:8c:0c:07:4f:c5:e3:
65:b2:76:84:44:1a:6b:4b:e1:e7:d0:9c:c8:a0:65:d3:f5:2d:
90:34:a5:31:cb:02:fb:2e:95:14:0a:a4:8e:fb:17:e5:d7:ce:
27:79:40:ed:1d:5b:18:12:5d:2a:17:cc:2b:94:41:5f:23:b1:
47:20:e9:1d:81:d7:f9:10:68:64:b3:84:9c:75:e1:b4:af:ef:
79:2b:74:37:c8:20:91:71:cf:11:57:1c:8b:24:2f:2b:35:a1:
90:94:b7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:04 2025 by rpki-client