Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd/f799107c-be6c-3dcd-9e64-a6cbb684faf2.roa
File: f799107c-be6c-3dcd-9e64-a6cbb684faf2.roa (raw, json)
Hash identifier: X3Yfv6KBmtgJfVx6Oln6QIdG/UymT9FmOsGdtiz2Pfw=
Subject key identifier: A2:B8:C1:08:53:1B:82:01:13:F1:AD:50:79:F0:A5:18:15:01:1A:0A
Certificate issuer: /CN=053b9d11-14bb-4f24-8ea4-1d2cac24a2dd
Certificate serial: 010D0C9F4328584930DE63A51F4659776B34D2C0
Authority key identifier: A2:38:04:7B:3D:F8:16:BC:AA:B0:AE:33:5D:98:04:5C:1B:DF:14:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd/f799107c-be6c-3dcd-9e64-a6cbb684faf2.roa
Signing time: Sat 15 Mar 2025 01:00:39 +0000
ROA not before: Sat 15 Mar 2025 01:00:39 +0000
ROA not after: Fri 13 Jun 2025 01:00:39 +0000
asID: 557
IP address blocks: 130.111.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:de:63:a5:1f:46:59:77:6b:34:d2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053b9d11-14bb-4f24-8ea4-1d2cac24a2dd
Validity
Not Before: Mar 15 01:00:39 2025 GMT
Not After : Jun 13 01:00:39 2025 GMT
Subject: CN=f669568f-63b7-473e-9577-3cbd9fece16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fb:97:49:09:78:47:d0:93:6d:27:68:2e:51:
c2:5b:dc:2c:da:d1:84:96:b4:75:68:6f:2a:a3:f4:
06:8f:03:3d:d1:85:05:d2:fc:da:ad:45:2a:87:4c:
cb:a5:1e:08:fb:d6:06:5a:32:94:6b:f7:19:e6:20:
e7:e3:98:5d:92:22:9c:f5:0e:d7:4f:49:9a:cf:ba:
fd:09:98:ab:e2:95:51:b1:82:34:b2:e5:26:19:27:
47:0a:f4:8a:3d:6d:be:ed:02:1e:52:33:d7:43:84:
16:20:65:e3:f0:34:46:a7:b2:11:a3:27:30:14:33:
19:8e:8a:e3:77:05:6f:0c:3f:b7:4d:0e:66:34:59:
1b:f7:dc:20:e5:cf:d3:bc:e8:3e:92:31:e1:c8:70:
f6:4e:fe:6a:83:df:ca:80:62:7d:69:e6:9a:98:c9:
d3:b5:d4:ec:03:5f:24:9e:3e:e7:7b:96:08:0f:5c:
5c:68:a9:24:fb:bf:7d:ed:7f:c2:55:2d:55:c4:93:
af:5c:0f:97:46:eb:cf:66:fd:72:c9:43:30:85:31:
19:a8:4f:96:ff:d7:98:b2:ad:01:0f:2d:cb:b2:a9:
0d:1d:fc:4f:66:99:53:d3:9c:4f:b6:a7:4d:18:90:
21:57:34:9b:ff:67:9c:60:54:0e:8a:40:e5:f4:53:
dd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B8:C1:08:53:1B:82:01:13:F1:AD:50:79:F0:A5:18:15:01:1A:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd/f799107c-be6c-3dcd-9e64-a6cbb684faf2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd.crl
X509v3 Authority Key Identifier:
keyid:A2:38:04:7B:3D:F8:16:BC:AA:B0:AE:33:5D:98:04:5C:1B:DF:14:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd.cer
sbgp-ipAddrBlock: critical
IPv4:
130.111.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:54:83:09:42:08:df:a2:cf:18:4a:0b:c3:43:f4:0e:eb:72:
1e:9b:82:4f:0c:c6:1e:6d:3a:d7:0d:23:1b:35:0a:06:00:cf:
b7:6e:9e:8c:51:c3:d6:a6:92:b5:66:d8:2a:e5:12:e7:a1:0c:
20:e5:c6:0e:5f:01:d5:53:df:76:ad:0a:66:51:2a:c5:65:3d:
f3:4e:3f:a1:c7:ef:2b:d6:de:4a:07:ed:6e:1f:be:90:8d:a6:
56:3b:ec:e7:5f:11:cc:b2:93:f2:41:e8:86:9f:79:9f:4f:45:
97:a6:84:a6:74:1e:b0:93:aa:c3:2b:69:8d:1e:1c:21:7b:38:
e8:60:47:3e:1c:6b:14:d6:cf:f1:c6:4e:52:e5:e7:00:37:d3:
15:fd:bf:e4:65:5d:90:40:fb:de:a8:da:68:bb:42:a3:0f:70:
4b:22:d9:ba:1a:b4:0b:85:d5:a7:22:1f:c9:83:4b:06:1a:0c:
09:51:14:e8:a0:3d:8c:01:5f:15:52:41:e4:ae:21:9d:d9:c9:
de:2d:84:bb:cf:af:6e:fa:c8:ae:87:4d:6e:08:cc:15:a7:f8:
8d:1d:1f:98:2b:2a:46:0a:a8:03:1e:9f:86:65:91:a9:ae:30:
7f:16:0d:e2:4f:30:50:f6:52:de:95:20:65:2f:a8:db:c4:fd:
13:03:93:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:35:28 2025 by rpki-client