Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/21e0b6f5-3c15-31ed-bd48-9f8d63c4178f.roa
File: 21e0b6f5-3c15-31ed-bd48-9f8d63c4178f.roa (raw, json)
Hash identifier: t4gjg2K/nbXS4PDEjnc8o15lKLhyfHfc8JcYkgCGySc=
Subject key identifier: 8A:AE:72:AB:57:5E:85:F4:67:47:5D:68:78:91:C0:A5:16:CF:10:A6
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328576D51CC73C042CFC1664242535B
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/21e0b6f5-3c15-31ed-bd48-9f8d63c4178f.roa
Signing time: Fri 05 Oct 2018 03:25:34 +0000
ROA not before: Thu 04 Oct 2018 04:00:00 +0000
ROA not after: Mon 10 Apr 2028 04:00:00 +0000
asID: 2914
IP address blocks: 128.241.192.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:42:42:53:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Oct 4 04:00:00 2018 GMT
Not After : Apr 10 04:00:00 2028 GMT
Subject: CN=159e93c1-0ef5-44ac-9137-5a380f2ab134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:39:e4:86:3e:2f:39:53:af:0f:c2:65:8a:99:
25:ae:69:a5:3a:e8:2e:1b:79:2f:5f:73:00:43:35:
81:7f:a7:b8:a3:92:0e:75:82:6e:3b:3c:65:40:4c:
11:ff:40:72:58:4e:1f:ff:56:a0:bb:f2:91:94:77:
eb:0d:1e:26:ba:8e:29:fe:dd:90:24:0a:98:5d:27:
f0:1e:60:58:1b:b1:30:e2:42:67:12:ff:8c:4b:23:
45:f0:08:e6:a0:98:53:6b:98:31:3a:fa:b4:f9:f2:
6e:ed:99:60:78:42:d6:c7:c8:55:16:3e:aa:51:69:
8e:17:1f:fe:71:9c:41:cb:72:ae:a3:ff:3b:dd:45:
2b:cf:74:87:bd:59:05:9d:f8:f5:ab:b0:77:57:38:
74:a7:a8:94:61:08:fd:c3:04:1e:7c:52:e6:18:1a:
d6:34:46:cf:33:29:54:a4:56:ef:03:07:a8:91:4c:
35:b7:8f:19:d9:85:99:ce:12:38:71:d3:81:f7:51:
ce:5a:9c:36:a7:de:d7:bf:3f:e7:b7:03:91:5f:a9:
e0:69:52:26:4d:a9:d0:51:8a:e5:ea:1b:56:47:ca:
d4:71:22:e8:aa:d4:71:14:29:fe:c6:e1:cb:a0:c7:
df:f0:97:a5:7b:86:11:57:0e:14:b8:b3:ee:df:39:
ab:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AE:72:AB:57:5E:85:F4:67:47:5D:68:78:91:C0:A5:16:CF:10:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/21e0b6f5-3c15-31ed-bd48-9f8d63c4178f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
128.241.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:4f:a1:e4:2a:e1:85:c5:55:02:0e:be:72:0c:59:58:91:e0:
24:7c:f9:33:eb:f3:b4:2f:e4:f0:13:bc:5f:57:2a:18:ac:a8:
96:21:e8:74:82:73:69:c7:3d:d5:15:9c:fc:78:be:1d:c0:15:
39:4e:ce:70:79:6c:fc:6d:3f:3f:c5:67:66:69:61:ee:bd:09:
62:5e:5f:8a:bc:26:c3:00:49:70:89:33:bb:e7:1b:94:3c:3c:
3b:c6:d1:bc:28:d7:f3:49:66:29:41:54:3a:8b:db:23:eb:3a:
8f:30:46:13:94:13:a6:fd:68:31:27:82:91:76:0c:71:59:7b:
c4:00:af:23:9d:76:8c:df:79:26:aa:00:00:0a:e5:fe:6c:8e:
f5:f4:a5:5e:3d:11:7c:d0:c1:e2:33:5d:13:02:32:d7:2a:8e:
11:76:67:fa:c6:56:79:8e:28:0c:fa:b9:13:76:55:75:12:20:
0c:3e:9c:6f:9d:33:45:6e:b4:83:18:0a:28:46:d8:d9:c0:a5:
b2:d2:83:94:70:44:e1:dd:41:53:e2:a1:72:16:33:e8:e5:f2:
b1:92:03:8b:5e:5e:bb:99:eb:60:10:a9:61:94:62:43:3b:71:
43:68:be:4d:27:8b:8f:57:65:e3:83:b4:60:67:51:81:3a:3b:
2a:13:ad:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:21:30 2025 by rpki-client