Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6aad4443-6edd-32c1-a02e-69bfb2c56f8b.roa
File: 6aad4443-6edd-32c1-a02e-69bfb2c56f8b.roa (raw, json)
Hash identifier: D981VWCM6CR8cyAX+WGiXqQFVdEdmJiEFg350E/EfD0=
Subject key identifier: C8:28:42:CF:9F:E7:E2:0D:76:75:68:9E:3E:4E:61:41:F5:D1:35:9A
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584917DC36ABD2543690A07091A0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6aad4443-6edd-32c1-a02e-69bfb2c56f8b.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 1225
IP address blocks: 129.250.38.192/27 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:36:ab:d2:54:36:90:a0:70:91:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=0051f1e9-77aa-4035-b96e-1b12b671317b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:10:f6:90:4c:8c:2f:1a:ac:96:c9:55:29:71:
2a:d2:0c:b6:7a:f4:b0:80:4d:e5:1b:1a:9f:64:c0:
ff:62:d6:4a:03:c4:92:db:e7:ab:85:5d:e5:4a:6b:
94:53:36:3d:4a:e1:1d:d7:f7:95:ff:aa:4b:87:e8:
1a:11:5c:f8:52:2f:c4:43:ea:be:e4:56:f6:85:dd:
ab:86:c2:98:e3:93:e1:b0:d8:02:a7:b9:c4:51:30:
36:a8:66:7c:94:37:09:37:bf:d5:31:e0:3c:1a:6f:
d5:f5:a1:11:56:cf:bf:bc:38:0c:7a:05:d5:32:4f:
03:ae:cb:98:1c:d3:5e:ca:e0:94:7d:ff:4c:0a:57:
aa:93:16:e6:d3:0e:1f:62:bd:02:b0:58:dc:e7:9b:
28:16:37:54:04:50:30:5c:68:21:b5:bc:91:fb:17:
a0:db:76:53:75:db:69:64:c9:d1:ed:6c:6c:dd:df:
49:5e:5c:bc:ff:f6:42:e2:83:c4:a0:88:bc:81:ff:
cb:52:8f:46:e4:4d:ca:b6:53:78:5a:5f:41:da:a6:
b2:65:29:b3:0e:ef:1b:bd:4b:57:d4:50:56:7b:5d:
f0:22:35:56:e6:91:6a:50:a8:e1:80:9b:e9:d6:7f:
d7:2d:66:8d:47:cd:3b:52:a1:b4:40:be:74:4b:79:
92:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:28:42:CF:9F:E7:E2:0D:76:75:68:9E:3E:4E:61:41:F5:D1:35:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6aad4443-6edd-32c1-a02e-69bfb2c56f8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
129.250.38.192/27
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:d1:b3:2c:23:12:92:2d:8e:da:03:95:d4:ca:ac:2e:fd:18:
98:ce:93:d5:7e:49:b0:c5:7a:4c:6e:2a:f3:3d:59:a3:e7:48:
ef:b4:69:dc:ae:1a:44:1e:02:3a:6c:f8:8b:87:56:c7:86:07:
5a:2b:ef:b6:33:88:f7:e5:6c:27:6c:7a:33:f0:ab:f0:8f:c4:
34:61:b8:76:4e:34:a2:d9:72:3f:ca:e9:61:1f:4b:2c:d2:12:
ae:aa:bf:1b:0f:c1:ae:c9:49:31:77:1a:49:7f:25:fa:47:75:
db:1e:28:a8:ea:27:71:39:85:fa:10:e4:24:87:71:d7:4b:ce:
90:dc:5c:63:16:11:c2:aa:db:ff:ad:82:43:a8:df:be:2a:60:
f4:25:4b:d3:70:1e:b0:e0:35:e4:9b:40:50:77:95:e8:22:16:
e7:94:48:f6:07:f4:7d:90:e5:05:71:84:c2:d5:40:d3:78:2c:
3e:11:40:29:d3:27:54:ae:4b:1c:fd:18:32:7b:bf:e9:27:ba:
6b:56:34:bf:aa:5e:a3:1b:37:1a:af:f4:e0:a2:e4:51:9a:e0:
a5:d5:2a:22:2a:fe:aa:75:64:b8:32:63:6c:97:6f:b6:2f:45:
6f:59:b3:ad:28:0f:fa:04:68:91:9e:3a:ac:39:ba:6f:dd:5e:
3b:e4:07:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:26:25 2025 by rpki-client