Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/45005f29-389f-31e2-80b8-8e673e32200b.roa
File: 45005f29-389f-31e2-80b8-8e673e32200b.roa (raw, json)
Hash identifier: o77Ka6lFKi9R5s/T6gFE4rGn21QvoNOcpw1Nbv4Q3Zs=
Subject key identifier: 13:6E:8A:AA:D0:CF:B0:50:B9:E7:A7:B4:66:4D:64:60:83:FB:E2:44
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F43285848E0065D7B33DD6343AD18D7A0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/45005f29-389f-31e2-80b8-8e673e32200b.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 204670
IP address blocks: 128.121.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:5d:7b:33:dd:63:43:ad:18:d7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=3f89f091-5b1c-4f58-9025-a94bad6902a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5a:cd:2d:bc:34:ad:a7:d1:fd:f0:5d:80:8a:
33:9f:14:d3:2d:69:ba:b1:57:31:bf:9b:28:6c:ad:
59:31:be:26:8a:b5:83:a7:1f:ed:c9:c3:aa:cc:fe:
4d:45:fc:b6:1b:a6:19:46:8e:55:5e:f1:8e:8e:38:
29:89:ba:79:45:19:74:d8:30:f7:d5:e5:5a:9f:77:
df:45:14:47:3d:e3:83:b1:54:d3:23:f6:f1:3d:2e:
d6:d1:15:c6:b9:aa:ff:54:29:c5:51:c5:c3:12:d9:
cb:e0:17:d3:b3:66:fb:d9:40:88:05:b4:65:44:19:
6e:41:d5:25:a4:35:2a:69:e4:d5:73:a0:f2:e7:c1:
94:ad:2a:84:b6:46:5f:48:36:87:1a:d6:de:ec:d4:
a0:01:fe:b3:47:d9:73:a3:2e:0a:09:31:7c:c6:89:
73:5d:2f:9f:cf:0b:d4:63:48:d0:60:d7:21:ed:c8:
f3:bf:97:c6:75:e8:76:b3:49:42:e1:bc:a3:d7:02:
01:f0:71:fd:3e:a6:fd:61:9d:50:2c:1b:ba:09:1c:
04:e6:a5:8e:bb:00:ae:2b:40:c7:62:ce:27:45:22:
69:4c:16:c9:9a:51:19:e5:33:d6:cd:af:53:72:24:
8f:97:78:0f:c5:0c:56:f4:90:95:a1:5a:ea:e5:4b:
1f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6E:8A:AA:D0:CF:B0:50:B9:E7:A7:B4:66:4D:64:60:83:FB:E2:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/45005f29-389f-31e2-80b8-8e673e32200b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
128.121.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:41:cd:ee:8d:58:f4:8b:13:3b:5b:ae:06:53:54:23:05:a4:
cd:ce:f7:cf:c0:57:ed:56:89:6a:69:e6:33:1e:21:ec:29:c3:
1b:ed:c4:d7:af:3a:38:7c:8a:1a:70:30:f0:ef:4b:f3:aa:12:
ec:7f:5f:74:54:60:19:9d:58:8b:cf:ec:13:73:b4:e5:12:6d:
74:0f:80:0f:43:0b:a9:6f:65:d1:aa:1c:bf:57:09:21:48:86:
21:76:6e:39:97:a5:99:64:2b:4f:be:d8:5b:fd:3a:b7:b9:fc:
e6:c4:38:a8:8f:fa:e1:4c:9b:f8:01:bb:e5:66:b7:89:f4:da:
69:5f:f3:86:88:15:0d:fb:a7:c0:b3:ad:38:65:97:d6:90:b7:
d3:a1:60:dd:20:02:55:6b:82:e5:e5:2b:85:f2:16:14:12:80:
33:1e:77:c6:48:e2:10:67:ae:a0:22:5a:1c:66:29:0a:77:ef:
69:02:76:69:92:56:f6:07:92:d1:47:14:94:b6:ec:c8:e5:27:
ab:29:66:0e:25:00:b8:ea:6b:c0:95:98:c9:ad:22:5b:be:bb:
14:8b:97:78:7a:59:5a:35:f2:9a:3f:3f:0d:44:9d:d2:e0:32:
fa:d7:2a:da:ab:39:7e:aa:29:65:93:a5:bc:cb:f9:13:7d:e5:
d3:8f:f4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:31:39 2025 by rpki-client