Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/2289cf57-959f-3a84-8712-d7d38208f851.roa
File: 2289cf57-959f-3a84-8712-d7d38208f851.roa (raw, json)
Hash identifier: 1rfA78/RoVORZaKSvUQsNGXPsmfEQXA6FAdgv4SWCkA=
Subject key identifier: 12:89:BD:16:19:C4:6F:4F:BF:75:22:D4:0F:18:98:67:EB:5B:0C:9F
Certificate issuer: /CN=1cfb66bc-dcfd-4c7e-bd00-38e923719ab4
Certificate serial: 010D0C9F4328584913AC1D25D373ACC218585680
Authority key identifier: 3A:40:F3:76:43:CD:0A:7A:FA:BD:DA:79:7D:F1:84:CA:E8:00:4D:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/2289cf57-959f-3a84-8712-d7d38208f851.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 31775
IP address blocks: 130.44.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:1d:25:d3:73:ac:c2:18:58:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cfb66bc-dcfd-4c7e-bd00-38e923719ab4
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=90fb890f-6c08-45f9-9c61-258e2ff66428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:00:59:bf:0b:f2:f5:10:68:23:87:c3:91:55:
fa:07:e1:3e:67:b5:11:f2:d7:6e:f4:0c:97:e4:41:
13:dd:5f:a6:0e:40:83:4e:3a:79:a1:84:51:2d:15:
f8:ad:d8:32:6b:fa:b9:32:36:d4:b2:8a:71:5b:07:
f0:c9:64:a1:58:50:ec:fa:a8:52:ea:be:2f:f0:d6:
36:5e:df:3d:20:7b:0d:e1:ac:80:ee:36:15:3b:40:
c9:36:84:48:66:64:95:10:2f:03:6e:77:82:12:21:
91:8c:ed:46:79:27:aa:57:59:87:56:fb:7f:3d:35:
01:62:e5:08:1e:f1:99:eb:27:8f:2f:da:ce:5a:11:
a7:91:30:fb:12:c0:d8:65:03:5a:a6:1c:0f:4a:29:
46:4b:00:bb:5e:44:58:89:06:14:4d:8f:c4:b4:4d:
5b:57:4b:6a:e1:28:58:c8:cc:0f:db:20:67:bb:f6:
f3:70:e2:b0:28:25:db:48:cf:3b:2f:e9:6e:81:f1:
dd:8e:9a:63:f7:96:a7:e0:00:78:c1:c3:96:c2:50:
86:26:e6:53:77:ca:8f:91:56:bf:59:86:51:66:2e:
19:38:db:a7:17:1c:55:97:2a:42:91:bb:46:4f:81:
97:67:02:e8:4a:c6:db:4e:77:85:fa:f9:e4:18:0b:
f2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:89:BD:16:19:C4:6F:4F:BF:75:22:D4:0F:18:98:67:EB:5B:0C:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/2289cf57-959f-3a84-8712-d7d38208f851.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.crl
X509v3 Authority Key Identifier:
keyid:3A:40:F3:76:43:CD:0A:7A:FA:BD:DA:79:7D:F1:84:CA:E8:00:4D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer
sbgp-ipAddrBlock: critical
IPv4:
130.44.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:67:a9:04:43:28:c8:ba:31:23:ec:69:4f:21:28:67:95:6e:
8b:77:77:bf:7f:cb:24:29:44:55:be:06:61:58:89:56:c9:07:
08:73:86:dc:0b:b2:53:eb:0c:0e:7e:9e:bc:df:25:68:07:2e:
ed:cf:67:cf:bf:9a:44:0f:cf:c8:75:8b:a1:f4:5c:70:4d:b8:
3d:0e:6f:18:42:2c:4b:9a:d1:e9:e1:71:31:c6:12:ab:a6:a3:
5a:47:c9:5e:50:d7:0d:98:10:14:5a:be:73:7a:ab:87:a6:d2:
5a:8f:a6:97:49:e7:c8:47:0c:c3:51:5f:01:02:f2:57:e9:2e:
84:53:81:9c:3c:a4:27:01:3e:be:72:48:57:07:be:bc:a8:61:
93:b6:d6:e7:2b:02:f6:1c:ba:9c:e7:e6:2c:9f:6e:86:f2:ce:
e5:0c:1d:92:ca:9d:2b:8e:63:c2:bd:7b:4e:96:62:98:02:9b:
bb:c7:62:60:d1:f1:54:59:d4:f3:f8:5c:50:7d:83:c7:e9:0d:
8c:9c:07:c9:97:ea:36:0d:f4:52:1e:86:65:22:66:ca:0d:fc:
21:ab:13:9a:54:54:ca:62:52:69:ff:fb:33:21:1c:ce:57:ec:
fd:f9:09:d8:75:87:a4:d2:2a:e3:8f:47:d0:d2:0f:d1:ba:05:
79:63:85:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:09:48 2025 by rpki-client