Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9feab245-a594-3dee-9158-896a2d26f46d.roa
File: 9feab245-a594-3dee-9158-896a2d26f46d.roa (raw, json)
Hash identifier: 9AtMg9YMNz4fNRPoob2j4GtgU/LeqNynrQkGZzCEt8M=
Subject key identifier: 91:22:AB:83:44:16:09:7A:FD:A0:66:11:8B:DF:FB:5A:ED:A4:58:3C
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F43285848E0065DB1F89472249CB88A80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9feab245-a594-3dee-9158-896a2d26f46d.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 19893
IP address blocks: 128.121.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:5d:b1:f8:94:72:24:9c:b8:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=91ec1c96-0cae-4108-867d-fad3fddaec66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b5:b8:3a:f9:03:0c:5d:14:be:7c:ce:52:76:
7d:06:47:1f:44:77:3d:81:13:57:20:05:57:83:ce:
4d:bb:e7:6b:5b:19:9a:d8:e3:ef:83:ba:df:bd:37:
d1:3b:31:07:91:6f:07:47:9f:66:2a:30:ff:a8:a4:
93:9c:3a:cf:34:94:32:46:ba:aa:d8:d1:dc:de:c1:
da:66:08:e0:c3:d0:d8:4f:1f:d7:fc:ba:ed:10:ea:
7f:15:65:6c:b5:7c:8b:d6:49:83:67:00:91:a9:26:
d0:b4:59:3a:ab:2e:0b:94:0e:86:41:5a:e3:19:37:
77:dc:f8:0c:f4:e8:c2:75:d5:c3:71:7b:dc:6f:5e:
72:88:91:c8:a0:d6:b4:30:86:68:46:32:4c:15:5e:
bb:e8:0a:53:13:2f:ef:bb:3a:23:cd:64:44:ad:8d:
e6:d2:cb:bb:65:4c:be:ca:7c:cd:ea:45:58:0a:1e:
87:75:68:84:60:83:5f:df:1e:a2:b1:57:3e:5d:14:
74:03:5c:15:73:50:e1:b8:ee:37:44:83:66:ee:20:
1a:70:33:84:b4:a3:a2:cf:f5:2b:48:12:8d:17:f2:
8b:03:9c:a6:e6:9d:31:b1:e2:ef:ca:79:65:96:f8:
ac:96:8c:64:4a:d9:33:91:bc:82:7a:3f:fc:dc:1f:
20:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:22:AB:83:44:16:09:7A:FD:A0:66:11:8B:DF:FB:5A:ED:A4:58:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9feab245-a594-3dee-9158-896a2d26f46d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
128.121.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:62:d5:ea:9d:83:bb:e9:a5:fd:05:3a:11:c9:cf:e8:17:bf:
0a:be:dd:31:86:74:9b:f1:64:17:f0:75:3e:bf:4e:2d:64:da:
40:a1:e6:76:37:c4:ab:36:61:f7:b6:ab:e8:5d:f7:af:50:5a:
14:60:19:a3:36:9f:0e:e6:7f:79:d3:68:66:d9:c8:05:18:7c:
e9:50:24:3b:fa:b8:d4:71:a2:39:75:d7:2f:a0:ee:0e:d0:28:
af:70:8f:ee:af:6c:1d:af:00:1e:de:1c:55:5f:78:1d:dc:f4:
a0:6a:48:7f:19:25:a0:78:db:f8:bb:32:29:62:b4:33:1e:06:
b4:a6:70:15:4c:f5:b5:8a:15:0b:91:5c:fc:a9:cf:20:14:be:
50:4d:39:ff:4d:2f:d8:d2:db:53:77:03:f1:dd:85:91:89:8a:
67:5b:b0:d4:53:47:b9:49:32:dc:c6:b8:6b:be:85:80:c1:b3:
4e:52:5e:e0:87:98:dd:bc:74:90:16:f3:a9:d9:ad:be:c9:20:
e5:a8:5b:21:db:7a:2d:4d:d8:db:d1:1e:4e:8e:20:db:5e:a3:
6b:75:ca:0e:b0:ef:f2:32:df:28:73:45:90:e1:e7:c2:ed:75:
d1:fb:e3:32:3c:36:ac:89:e1:5a:14:c8:dc:8c:66:91:82:ac:
2c:9f:43:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:28:03 2025 by rpki-client