Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/d9449fbf-8dfc-3745-a759-c9e77a40fa1e.roa
File: d9449fbf-8dfc-3745-a759-c9e77a40fa1e.roa (raw, json)
Hash identifier: 52P0q9FAo3AFZAnmbQXpNiFa+s9B5wj2UX1QzoU9VSA=
Subject key identifier: 6A:1C:AB:C1:CA:BC:3D:04:56:B6:41:55:F0:3F:F9:4A:5D:B9:82:B0
Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial: 010D0C9F43285848A13606769F37B9BE0FED0440
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/d9449fbf-8dfc-3745-a759-c9e77a40fa1e.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 396982
IP address blocks: 130.41.244.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:06:76:9f:37:b9:be:0f:ed:04:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=0378f881-0d0d-40aa-8a12-e4936c2d27ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8a:17:82:57:fd:5d:c5:cb:db:fe:7a:a8:1c:
82:1c:63:86:ba:6d:5d:18:75:c1:84:ad:2e:25:5b:
8d:8c:29:7f:44:e0:9d:dc:b2:91:43:a0:d2:94:5c:
6e:e6:56:56:90:e5:06:4e:7d:e2:33:b9:79:55:db:
bd:21:f9:61:a9:fd:6d:cf:70:fe:19:65:7b:34:6b:
03:1a:b9:8c:61:9b:5e:5a:ae:03:43:60:df:07:cd:
ed:1c:9c:60:d3:d0:d3:b7:3d:ee:b4:81:8c:c8:98:
8c:73:43:e8:a6:fb:60:2f:38:1b:04:22:e6:b4:24:
18:ea:6b:02:0a:d2:75:44:7c:af:c9:fa:d9:01:80:
1b:2a:96:f0:3f:24:9b:74:e4:47:ba:29:18:c5:07:
b0:a4:f5:2b:e7:19:ae:06:16:3d:fe:5f:37:25:b9:
c9:45:dc:2f:22:da:51:b9:5f:a7:d3:54:9c:32:5c:
78:f0:be:a4:6b:33:a5:fc:b4:c4:33:ca:9b:0a:2b:
2c:32:07:51:a7:c7:08:88:ce:ba:ff:79:50:c3:46:
92:4e:7b:89:31:03:16:13:58:9d:53:b2:19:bb:4c:
b9:38:2e:80:c3:81:fb:a2:49:ef:c9:e7:5a:d6:e7:
8e:65:0c:93:cb:cf:7a:c4:fb:b3:e8:da:8b:b8:32:
ad:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1C:AB:C1:CA:BC:3D:04:56:B6:41:55:F0:3F:F9:4A:5D:B9:82:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/d9449fbf-8dfc-3745-a759-c9e77a40fa1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
X509v3 Authority Key Identifier:
keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
sbgp-ipAddrBlock: critical
IPv4:
130.41.244.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:7f:50:ae:48:c7:e9:ec:57:cb:1d:f7:d7:60:39:01:99:a7:
66:5d:26:17:c6:8b:b9:13:b1:6e:ed:22:4b:1f:7f:a8:d2:62:
70:d3:99:cd:6c:95:14:49:db:02:75:f0:c8:ae:c2:ca:a9:36:
a5:5b:73:bf:71:89:31:fd:bf:d3:65:ef:d9:8a:19:70:c5:fb:
9b:33:df:4e:34:15:c6:33:e3:af:24:c6:25:26:8b:6c:e6:19:
4f:ef:ec:9a:3c:13:89:11:00:02:33:df:7f:7c:7b:1b:be:27:
9a:4c:79:a9:49:9b:05:e7:6c:9f:5d:fc:95:a3:a1:8a:5f:97:
ea:13:c8:10:01:a2:9b:ad:8b:8b:a2:36:af:b0:39:1b:7d:9b:
af:c6:8b:d5:0d:11:d4:79:59:d9:18:94:9a:43:ba:9c:81:af:
b7:fe:6f:0c:e9:88:9c:e3:55:04:03:72:dc:eb:32:bb:0c:d0:
ab:95:11:6a:1a:2d:f2:82:ac:4b:93:fb:0d:c2:91:a9:54:5c:
a0:ec:29:79:21:f6:50:1f:52:74:b5:69:0a:02:25:48:9b:3c:
7f:92:97:c8:4e:fd:8f:b9:8b:02:ce:b9:a0:df:13:2d:28:96:
ce:4f:e8:bb:b6:d4:43:a5:42:37:c7:9c:95:d0:00:04:3c:7f:
32:81:e1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:01:30 2025 by rpki-client