Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/5ba90132-30fd-3e7f-a67e-05193a6cd348.roa
File: 5ba90132-30fd-3e7f-a67e-05193a6cd348.roa (raw, json)
Hash identifier: YAgdSIRYzg++JeybhhXPgAy+hT1w31iS2ViwD7RH8iI=
Subject key identifier: F8:76:17:8E:EE:4A:78:F1:AB:72:51:4C:C7:68:92:C0:21:D3:C0:00
Certificate issuer: /CN=7aba55ae-833a-4487-8be1-9b997adbbec9
Certificate serial: 010D0C9F43285849244E80AAED7881FD5A1C6320
Authority key identifier: 9B:B9:AA:F7:14:07:24:F9:63:FA:BB:15:32:7F:AD:AA:C9:11:2E:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/5ba90132-30fd-3e7f-a67e-05193a6cd348.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 7922
IP address blocks: 134.195.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:80:aa:ed:78:81:fd:5a:1c:63:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aba55ae-833a-4487-8be1-9b997adbbec9
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=51e7543d-3dac-44ea-a1cd-eb33f28aac2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ef:4a:5f:2c:92:b8:59:0c:87:6b:bc:ab:0e:
c0:7e:cc:cd:ce:f5:19:5d:78:3e:c2:2e:32:17:df:
3f:39:29:38:ad:95:3d:21:c7:41:53:56:57:c8:9f:
06:34:72:47:3b:19:95:e3:c2:9f:73:6e:8d:fc:73:
fa:6f:b4:40:ae:02:1b:b3:3f:3e:30:dd:d5:27:8f:
23:fe:d5:32:54:df:ef:91:fa:dd:8b:1e:ac:c2:5a:
b1:50:4b:08:21:d6:f9:b8:9f:3f:36:36:b2:be:8d:
12:71:22:23:d4:9d:5b:5d:be:0e:f6:b5:76:d8:5c:
a1:76:6c:39:e7:84:09:45:d9:40:13:1a:c8:6b:d6:
7f:9f:b4:0d:8d:b2:08:01:23:67:f7:a5:11:25:e5:
92:99:2a:26:32:6c:5f:57:d4:f2:c8:fa:76:31:6a:
2c:4c:45:f1:75:96:dc:cb:33:fa:1a:3f:81:af:fd:
48:01:f6:76:1e:b0:11:7e:56:bc:37:96:e3:29:a2:
d2:21:b0:93:c9:0b:34:2a:e5:12:7f:fa:38:5a:e7:
6e:e3:2a:34:cc:81:62:be:5d:ae:17:4e:aa:04:67:
95:c3:5d:5d:99:da:b6:c3:38:b6:f6:9b:a7:c2:95:
b4:87:e0:d8:ac:87:8e:41:10:48:92:35:09:f0:2d:
59:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:76:17:8E:EE:4A:78:F1:AB:72:51:4C:C7:68:92:C0:21:D3:C0:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/5ba90132-30fd-3e7f-a67e-05193a6cd348.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9/7aba55ae-833a-4487-8be1-9b997adbbec9.crl
X509v3 Authority Key Identifier:
keyid:9B:B9:AA:F7:14:07:24:F9:63:FA:BB:15:32:7F:AD:AA:C9:11:2E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7aba55ae-833a-4487-8be1-9b997adbbec9.cer
sbgp-ipAddrBlock: critical
IPv4:
134.195.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
dc:2d:40:cb:3f:4f:32:22:f0:89:d4:cb:34:17:be:54:a7:ab:
ef:e8:ba:6c:b9:77:3c:59:ba:45:37:03:10:d5:cd:ad:27:e0:
06:ac:ed:d9:4a:17:2b:d1:a4:3b:9a:e2:e6:f3:56:84:31:d7:
4d:21:90:d9:2c:28:97:b4:97:f1:c7:c5:f7:2c:e3:e6:f8:a5:
80:d3:4c:9b:11:1a:69:63:15:92:c7:85:59:ba:26:bd:b5:bd:
0a:d0:fd:99:39:43:ac:95:56:60:28:94:98:a5:75:d8:94:29:
c8:a6:1e:da:44:f7:23:4f:be:9e:3d:ac:10:39:e2:44:e3:9f:
06:8d:be:6d:e1:c6:5a:5b:f5:6f:46:81:fa:c4:c4:71:7e:af:
09:f1:7e:a2:08:e9:d4:4f:c1:3d:20:79:24:7b:71:20:fa:88:
ec:4a:eb:a5:9a:3b:2d:17:33:0f:cb:b8:4a:37:d9:6d:84:77:
b1:9a:a8:7e:d5:31:4d:f8:16:78:6a:86:ed:3b:9d:98:56:98:
ed:97:7e:8c:33:e6:b5:d5:a7:29:fd:12:9a:2d:c4:33:2d:99:
a0:0a:f6:0f:8d:3a:07:cb:96:80:14:b4:d0:db:f8:d5:bd:a5:
8b:24:08:2e:a1:65:a2:7a:ee:7f:49:24:b8:0d:37:f4:32:b2:
2b:10:c6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:24:53 2025 by rpki-client