Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d800f374-dc8f-39ef-ae30-fc8c2baeb03e.roa
File: d800f374-dc8f-39ef-ae30-fc8c2baeb03e.roa (raw, json)
Hash identifier: ZY2OPoiiJY7CJfPhKKsxMXqLuqGxv0ImfJkoUGzNvw0=
Subject key identifier: 5A:4D:33:55:27:9A:B0:E3:02:3D:79:CC:FF:E0:56:71:2C:8F:32:C2
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F432858491D717D08F6F6859D0250BA00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d800f374-dc8f-39ef-ae30-fc8c2baeb03e.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 2914
IP address blocks: 129.250.63.0/24 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:7d:08:f6:f6:85:9d:02:50:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=f340c494-0fad-4776-bc00-3236b14dc2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:79:79:d7:35:a7:3c:2b:b3:7b:2c:9f:13:d4:
47:22:d6:ac:25:77:1f:55:4d:c9:38:97:50:f4:68:
0d:59:28:a6:ed:0f:a8:d3:73:f4:0d:a0:0b:7a:38:
c2:53:9c:c0:fe:84:ed:77:3f:33:b3:79:37:a0:82:
63:52:a6:71:53:16:2e:df:e9:c6:3f:cc:37:47:6d:
43:3b:a8:99:4c:46:46:5b:71:fb:f1:4f:7e:fb:09:
38:59:48:8b:e7:9f:0c:52:42:8e:ea:50:e3:14:fe:
46:48:86:05:9a:5a:a8:dc:a8:0c:da:2b:6a:25:97:
b3:27:5a:3c:05:b7:07:53:75:4e:b1:18:c4:77:db:
e3:5b:db:64:e4:2f:96:66:46:e7:5b:ff:38:3c:8a:
19:74:2d:ab:bb:b2:ef:f9:85:e0:63:bb:86:d2:28:
02:e3:69:ee:22:05:66:e3:35:a9:9c:18:0e:7a:47:
99:29:db:99:61:78:db:fc:80:d6:27:c9:69:9f:32:
cf:7c:cb:49:dc:7f:a1:aa:ce:72:4b:ee:be:82:3d:
da:fb:04:6a:af:cf:c7:57:3e:5f:68:d0:d6:ba:24:
bb:d7:9c:6c:88:26:b2:c9:49:38:a4:57:cc:5c:24:
f2:ce:32:42:11:a9:d4:30:28:4f:0e:5c:25:03:7f:
bb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4D:33:55:27:9A:B0:E3:02:3D:79:CC:FF:E0:56:71:2C:8F:32:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d800f374-dc8f-39ef-ae30-fc8c2baeb03e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
129.250.63.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:8e:4a:7b:4d:82:b3:59:42:6b:eb:27:f4:c8:f3:bd:6e:2c:
17:1b:37:96:d9:66:f7:f3:f1:e9:be:74:ae:37:a3:0b:b8:36:
0d:4a:23:97:2b:6e:df:de:6a:17:aa:33:f5:06:25:3f:78:f2:
f3:6d:69:61:9e:f0:e8:c5:78:f1:28:66:87:d0:bf:61:7a:c2:
26:92:14:46:7f:7a:02:4b:a5:83:ab:d5:30:74:bf:62:30:b3:
85:90:fc:2a:84:25:bc:06:97:a4:d8:b2:7b:25:75:e4:51:ab:
54:71:95:1d:66:dc:a9:8f:76:6d:12:48:a8:16:e7:6e:73:4e:
96:0e:9e:4f:bc:b2:2b:cd:25:ec:9d:de:a9:5c:a1:e8:96:be:
ac:6c:82:94:0a:de:ba:95:b2:51:65:11:23:d3:48:7b:b8:15:
2e:ff:13:dc:5c:79:fb:91:57:5f:96:ff:ac:fb:03:33:38:81:
d4:2f:18:8f:a4:59:41:b3:a5:b3:7e:9c:4b:6e:6b:99:ab:c8:
5a:1e:89:f7:37:b7:10:58:a7:15:e4:cb:fb:e5:af:64:60:53:
e0:e7:d1:86:a4:85:7e:e8:a3:74:71:1b:1a:fa:ed:35:65:ba:
e8:d0:b0:b8:ab:60:79:9e:09:e1:4e:b9:93:ee:b2:82:85:a4:
80:32:f8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:08:58 2025 by rpki-client