Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/1e413a1a-5431-33a4-918b-b141173b37d2.roa
File: 1e413a1a-5431-33a4-918b-b141173b37d2.roa (raw, json)
Hash identifier: 3sQVsaupIRRDxdW3vNBZ0qC7BpTJO2B/Ou5QDOS9lrI=
Subject key identifier: AF:52:7A:3D:A9:C2:BF:4F:E9:52:C1:54:2A:A7:98:96:83:5A:52:3C
Certificate issuer: /CN=a6ba0fd2-b526-4985-9314-bf6485056a64
Certificate serial: 010D0C9F43285848EC969100BEBBF0189F31CFB0
Authority key identifier: CC:23:95:78:8D:02:B3:B1:39:3C:D8:49:09:D0:31:6B:4F:1C:A6:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/1e413a1a-5431-33a4-918b-b141173b37d2.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 2552
IP address blocks: 128.252.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:91:00:be:bb:f0:18:9f:31:cf:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ba0fd2-b526-4985-9314-bf6485056a64
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=88601a1e-2faa-4a6d-9e20-c42fdf9ee58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ce:76:35:65:78:87:1a:be:71:7d:67:be:f6:
a8:cf:84:a3:fc:ba:37:5b:7f:eb:8a:7f:07:35:7e:
23:9e:f8:40:6b:40:ad:f3:90:ad:15:da:ef:66:4d:
57:92:c8:b2:2e:f6:31:f6:d6:f2:61:95:71:4a:f7:
8a:99:f9:3f:eb:61:eb:b6:c6:f5:5f:10:9e:2c:2b:
8b:37:1c:c5:95:33:8b:98:5c:f4:00:10:34:c8:50:
4b:54:e5:86:87:19:f2:87:c4:47:e2:6d:9a:c8:94:
26:dd:29:a1:9d:73:dd:93:71:62:e3:c2:71:38:00:
e1:d1:41:66:1c:8c:7b:37:9a:6d:6e:31:79:98:a9:
e7:26:c2:01:58:eb:e9:82:2b:ed:39:3f:c9:68:b8:
26:02:53:ce:99:db:07:ff:6d:e1:4a:fa:36:5e:7f:
8e:b6:89:5e:5c:c9:7c:9a:a6:fc:b4:7e:c3:81:af:
21:2c:53:2a:7e:79:ce:09:a4:10:5a:c1:c4:30:d2:
5a:df:4c:0b:26:8a:a3:8e:79:21:a7:11:9c:67:07:
95:18:34:f1:c8:0b:91:ee:b4:47:d0:73:2d:2c:fd:
29:21:4b:4d:26:64:9c:52:6d:84:4a:8c:42:92:59:
4f:46:96:40:f4:16:83:57:da:93:24:39:ef:6f:0a:
e9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:52:7A:3D:A9:C2:BF:4F:E9:52:C1:54:2A:A7:98:96:83:5A:52:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/1e413a1a-5431-33a4-918b-b141173b37d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/a6ba0fd2-b526-4985-9314-bf6485056a64.crl
X509v3 Authority Key Identifier:
keyid:CC:23:95:78:8D:02:B3:B1:39:3C:D8:49:09:D0:31:6B:4F:1C:A6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64.cer
sbgp-ipAddrBlock: critical
IPv4:
128.252.182.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:bd:0d:4b:69:af:4b:df:f2:83:91:16:12:cb:e3:c2:a8:9a:
2d:9e:4b:9c:47:00:3c:f1:62:66:f4:f9:45:de:e0:de:d9:b7:
f1:bb:f1:03:8f:49:e4:eb:f8:2f:7a:89:22:4d:62:90:84:04:
80:5d:8e:01:47:e1:ca:d8:3e:1e:47:f1:d9:18:83:fa:c6:d7:
2c:6b:ab:21:40:fa:52:0a:c2:0b:fe:a8:ef:56:79:02:ca:9a:
91:dd:d9:0c:81:24:36:9d:a5:e1:7e:ee:65:7c:30:07:a3:fd:
6d:38:85:f8:8c:87:be:71:ec:02:7c:58:f2:d4:dd:49:5e:2f:
c7:63:63:05:20:0b:14:35:65:eb:28:21:05:80:cf:7e:1d:5c:
b2:d7:ca:c0:5c:5e:97:97:64:b0:92:a3:f6:fc:60:d4:10:2a:
74:43:b3:d9:30:31:6e:5f:d5:68:4a:79:a7:ca:21:a6:62:ab:
a7:30:fd:87:cb:01:0e:c7:c2:a1:aa:4f:34:62:55:f9:75:75:
6d:76:57:41:05:a1:70:2d:48:66:9b:ff:6f:c9:95:a3:42:9c:
13:1b:bc:2f:2f:b0:cd:2b:3b:f6:2d:5d:ce:ae:95:02:30:20:
9d:7f:18:c3:6f:74:9e:da:2b:50:78:b3:e9:d0:7b:61:60:bc:
56:bc:5a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:14:00 2025 by rpki-client