Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1a9f8575-e0e4-3a29-b0f0-029b67cdefa2.roa
File: 1a9f8575-e0e4-3a29-b0f0-029b67cdefa2.roa (raw, json)
Hash identifier: 0siQw7OUHev/U4whSMuZWn4/+Pu5eUv1xg+EIETi7og=
Subject key identifier: 95:41:D0:D8:7C:1D:26:AF:F3:6E:BA:A3:30:1E:20:FE:13:41:86:41
Certificate issuer: /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial: 010D0C9F43285848A1360D201B34639BBB316580
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1a9f8575-e0e4-3a29-b0f0-029b67cdefa2.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 14593
IP address blocks: 135.129.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:0d:20:1b:34:63:9b:bb:31:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=a229b5e2-f0a3-48b4-bc91-aecec4cee01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6f:b0:1b:84:97:64:61:60:96:00:43:d0:00:
f4:76:cb:3f:2d:28:f3:20:30:4b:c3:07:24:7e:71:
b6:81:e5:5c:b0:79:3e:12:94:c2:54:71:0a:04:0d:
fd:f3:0e:c0:9c:7c:9d:29:ac:bb:a1:17:7e:b6:71:
b2:3c:4b:af:66:90:2a:12:b8:92:93:f5:29:ad:89:
68:4c:28:d0:c7:ca:03:c7:55:f5:26:4c:96:67:0b:
10:f5:9c:7d:0b:42:04:a8:15:fc:bd:c4:6d:ee:23:
eb:45:d1:ba:81:01:68:ac:89:dd:ed:5f:ff:4e:bb:
74:96:fa:3b:b1:b6:8b:4d:fd:02:21:48:46:8c:86:
6e:be:f7:4b:81:ff:0f:a3:3b:fd:2e:43:da:19:1c:
09:c0:ba:94:d0:b6:cc:a8:84:d5:65:6d:2b:e9:13:
32:f6:cb:93:51:c6:8e:83:6b:ec:18:54:74:0d:ee:
2e:9d:07:e8:de:94:e6:88:01:83:81:b1:e6:2e:0a:
60:06:f0:f6:cf:48:ae:c7:5f:25:4e:72:0e:4c:04:
17:4b:76:f7:a5:dd:9f:16:53:b4:45:cc:de:d0:2d:
99:ed:b5:65:ca:cb:8d:e9:61:62:36:b5:ba:6d:ec:
0a:73:46:a5:ae:80:14:57:e0:78:80:71:79:ff:c6:
06:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:41:D0:D8:7C:1D:26:AF:F3:6E:BA:A3:30:1E:20:FE:13:41:86:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1a9f8575-e0e4-3a29-b0f0-029b67cdefa2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
X509v3 Authority Key Identifier:
keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
sbgp-ipAddrBlock: critical
IPv4:
135.129.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:78:95:8d:14:06:83:98:1a:64:49:b7:53:83:4e:76:59:90:
c5:20:37:4b:06:b8:9e:43:d5:f0:91:e8:39:52:b0:81:67:39:
ab:f1:45:66:08:4d:ae:66:d9:7a:15:88:33:b1:a0:db:74:e7:
77:d5:db:06:a4:57:e0:9a:1b:d4:7b:56:f6:e7:05:34:d1:14:
95:b1:9a:35:86:95:2a:24:38:a6:d0:0d:9c:41:53:7d:d9:9c:
fe:de:f2:06:4a:3b:16:e1:a7:8e:48:42:57:36:24:c2:8f:c2:
a7:a6:b3:eb:5d:85:21:0f:6e:e0:a7:d0:e4:07:2d:d2:59:2a:
38:af:38:4e:cb:fa:62:bf:e4:28:7e:be:96:f4:d7:62:ee:2e:
6f:10:09:89:b7:57:b6:c2:02:1e:e4:ad:f3:7b:66:30:11:60:
09:d7:27:a5:13:48:98:a7:03:6b:a3:30:1b:4b:d3:eb:ce:b7:
97:d8:b7:d3:9f:bf:26:14:75:a5:49:f2:85:30:b8:02:df:0b:
59:0c:c1:d3:f8:22:30:ac:eb:e5:3a:8c:15:d2:60:32:04:e0:
51:8f:1c:2a:2a:3b:43:10:5b:d1:f8:81:59:62:0e:4f:1d:13:
f2:38:1c:07:9f:79:3a:d1:8b:ce:11:d5:21:c3:c2:e7:6a:3e:
cb:89:c9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:30 2025 by rpki-client