Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/93638ba7-22ee-4fb0-8a1d-d1e213fa2881/a310d08e-2d7a-39ce-892b-ed71f96ae1f2.roa
File: a310d08e-2d7a-39ce-892b-ed71f96ae1f2.roa (raw, json)
Hash identifier: pQHRZ+/0lfr94bh5xHX5eu3X5+/3G6pdQuXX/H/8dXk=
Subject key identifier: BD:0D:05:31:97:73:D8:67:42:8A:CE:25:3D:3D:AA:EF:B6:3E:92:DC
Certificate issuer: /CN=93638ba7-22ee-4fb0-8a1d-d1e213fa2881
Certificate serial: 010D0C9F432858487B85B0044AAAF8369C0FC760
Authority key identifier: 76:55:CB:AB:65:03:13:E4:1E:8A:BC:64:6A:3D:A1:60:33:69:E4:EC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/93638ba7-22ee-4fb0-8a1d-d1e213fa2881.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/93638ba7-22ee-4fb0-8a1d-d1e213fa2881/a310d08e-2d7a-39ce-892b-ed71f96ae1f2.roa
Signing time: Thu 09 Jan 2025 02:00:40 +0000
ROA not before: Thu 09 Jan 2025 02:00:40 +0000
ROA not after: Wed 09 Apr 2025 01:00:40 +0000
asID: 31930
IP address blocks: 142.137.0.0/16 maxlen: 16
2620:fa:8000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7b:85:b0:04:4a:aa:f8:36:9c:0f:c7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93638ba7-22ee-4fb0-8a1d-d1e213fa2881
Validity
Not Before: Jan 9 02:00:40 2025 GMT
Not After : Apr 9 01:00:40 2025 GMT
Subject: CN=44a0de24-1d7d-474c-85f2-17e5841a2a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1a:fd:07:b5:f8:d6:92:d3:26:4a:44:b2:c9:
76:1a:51:63:d5:bc:3e:c8:55:4f:cb:4d:7d:8f:79:
03:29:5e:b9:6c:9a:01:11:40:9b:7f:a0:e6:5a:fe:
b1:60:de:97:15:6f:60:b6:c9:45:85:25:11:82:cd:
1e:a6:a4:06:6f:d2:34:61:a8:53:e7:20:4b:d7:45:
82:7b:c8:f3:39:7a:14:29:78:08:9f:61:7e:2b:87:
86:f4:9a:89:73:f3:cc:2b:94:df:c1:07:12:f6:7c:
d5:f5:f4:8a:9e:61:04:35:04:3c:37:ab:33:03:6a:
7d:32:72:2c:f2:51:3b:97:e5:42:fd:1b:fc:51:aa:
d9:a0:48:d6:29:f4:1d:74:5c:ef:0e:c1:91:01:64:
c5:67:bb:1c:d1:3c:ad:3e:da:37:9d:7e:8c:3d:4e:
75:67:45:d5:d3:3a:cb:da:6a:2c:a4:49:9a:b5:9c:
9f:0e:70:6b:f7:c3:9a:20:08:77:28:45:c7:40:9e:
20:ff:e6:94:17:2d:12:9b:c3:54:df:65:57:c1:cc:
eb:99:da:43:20:bf:73:3f:a6:b9:f1:ba:44:d5:7f:
85:79:75:ed:dc:59:06:11:c2:dd:a1:08:3e:3f:92:
d2:be:79:73:1f:1d:a1:4a:6b:07:85:e2:51:da:0f:
3d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0D:05:31:97:73:D8:67:42:8A:CE:25:3D:3D:AA:EF:B6:3E:92:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/93638ba7-22ee-4fb0-8a1d-d1e213fa2881/a310d08e-2d7a-39ce-892b-ed71f96ae1f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/93638ba7-22ee-4fb0-8a1d-d1e213fa2881/93638ba7-22ee-4fb0-8a1d-d1e213fa2881.crl
X509v3 Authority Key Identifier:
keyid:76:55:CB:AB:65:03:13:E4:1E:8A:BC:64:6A:3D:A1:60:33:69:E4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/93638ba7-22ee-4fb0-8a1d-d1e213fa2881.cer
sbgp-ipAddrBlock: critical
IPv4:
142.137.0.0/16
IPv6:
2620:fa:8000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:90:b5:68:98:c1:af:cf:13:01:e5:02:62:a4:05:6c:48:d0:
96:04:75:ce:5a:69:ea:d7:ae:e4:5c:da:a0:97:d1:0e:71:59:
b0:f4:15:ff:10:f0:1a:04:66:84:71:d8:9d:03:5d:d5:ec:81:
33:7f:a7:c6:75:1b:e6:1d:41:63:7b:12:42:c6:80:03:c6:a7:
1e:12:08:db:12:2c:a5:13:69:f1:04:22:a9:4d:3a:9a:f8:eb:
96:01:a0:7d:ed:ca:4d:1e:d1:b1:ea:13:a4:da:46:98:57:b3:
a6:ca:24:08:9e:2e:a5:e2:1b:52:55:0e:3b:34:7a:4a:9c:ba:
34:34:48:b8:46:58:59:f7:ae:e5:5f:82:f9:b7:2e:fd:e7:00:
83:79:30:ee:7f:bd:e2:9e:cf:3b:27:0d:1e:0e:f8:1e:d1:6b:
1b:90:c8:53:b5:0f:25:f0:48:9c:28:1b:0e:ef:0b:02:4a:93:
5d:fb:a6:b6:2f:0c:9d:64:e4:63:b6:65:72:2c:8a:5c:0d:22:
e8:60:d5:19:9f:88:ae:b4:ab:54:fd:f4:9b:1b:ee:7c:44:fb:
b3:9f:80:b4:7d:97:84:8c:58:b5:83:9e:d8:79:d2:73:6f:20:
e3:2f:48:51:da:bb:1c:30:db:82:81:16:d0:ac:f5:2e:1a:e0:
e4:bc:35:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:02:49 2025 by rpki-client