Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7aaedf42-8faf-449b-8735-b772a5f92af2/cd1864d4-e3e2-334f-86a3-d88d4d0d9bf0.roa
File: cd1864d4-e3e2-334f-86a3-d88d4d0d9bf0.roa (raw, json)
Hash identifier: aVT3YYtVrA4czeytwL92pNy/cH6aSlK+xO88tXix5cw=
Subject key identifier: 8A:98:33:13:1D:92:BE:1D:46:51:A2:A5:E1:B5:CF:CC:C4:3B:A2:34
Certificate issuer: /CN=7aaedf42-8faf-449b-8735-b772a5f92af2
Certificate serial: 010D0C9F4328584834557B868BE1C5B0AD4C9980
Authority key identifier: 53:47:BF:66:C8:68:67:B2:33:9F:6A:F6:9C:2D:95:0D:27:A6:E6:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7aaedf42-8faf-449b-8735-b772a5f92af2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7aaedf42-8faf-449b-8735-b772a5f92af2/cd1864d4-e3e2-334f-86a3-d88d4d0d9bf0.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 12213
IP address blocks: 24.170.128.0/18 maxlen: 32
131.226.192.0/18 maxlen: 32
149.137.192.0/18 maxlen: 32
2604:7ac0::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:7b:86:8b:e1:c5:b0:ad:4c:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aaedf42-8faf-449b-8735-b772a5f92af2
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=5451c0d9-7b83-4680-8773-3522b2b87f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a4:8d:53:7f:f5:2b:70:03:cb:e4:2c:08:e3:
ed:7d:0e:d1:11:33:1e:89:2d:da:88:14:95:3a:3b:
4c:64:cf:39:92:5a:f4:8f:76:ab:0c:a7:27:3c:62:
52:8e:99:cb:17:95:e9:32:56:5b:15:25:fb:57:b0:
3e:99:b7:19:c4:04:c9:78:f6:a0:b1:38:4a:f1:c9:
5b:31:df:4e:25:70:d5:e0:b3:1d:94:56:79:16:2a:
10:5a:78:df:d0:4e:ed:e4:82:b3:bd:85:ec:62:86:
3b:14:24:35:3e:74:d2:f1:b5:59:5e:54:31:8a:25:
be:40:27:a8:e0:9e:bc:ff:83:a1:86:04:e7:82:2f:
20:6d:a2:b2:61:1c:c8:8f:33:7e:4d:8e:d1:fa:be:
0f:e3:93:32:ee:6d:50:b9:10:5d:5b:11:8e:37:dd:
89:de:eb:cd:6d:c5:dc:8b:f1:ca:74:f5:32:1f:d4:
d6:f8:a8:df:44:a9:3f:1b:4c:a6:b6:f3:ed:ea:e6:
47:3f:2f:64:81:3a:f2:d6:a7:6b:e4:07:e3:b9:12:
62:dd:3e:82:db:a5:53:50:09:26:16:4c:07:50:d3:
f1:44:c4:66:55:d4:60:9a:ba:d1:36:71:be:7a:05:
fa:9c:34:0c:65:bd:ee:3c:84:3e:b3:fc:ff:00:e3:
71:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:98:33:13:1D:92:BE:1D:46:51:A2:A5:E1:B5:CF:CC:C4:3B:A2:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7aaedf42-8faf-449b-8735-b772a5f92af2/cd1864d4-e3e2-334f-86a3-d88d4d0d9bf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7aaedf42-8faf-449b-8735-b772a5f92af2/7aaedf42-8faf-449b-8735-b772a5f92af2.crl
X509v3 Authority Key Identifier:
keyid:53:47:BF:66:C8:68:67:B2:33:9F:6A:F6:9C:2D:95:0D:27:A6:E6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7aaedf42-8faf-449b-8735-b772a5f92af2.cer
sbgp-ipAddrBlock: critical
IPv4:
24.170.128.0/18
131.226.192.0/18
149.137.192.0/18
IPv6:
2604:7ac0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:60:7c:f9:14:cf:3a:1d:0f:97:e0:ec:fa:54:af:e1:2c:1f:
ec:9d:94:2c:89:27:11:d1:8f:80:bb:b6:bd:f6:be:55:c1:a3:
2b:cf:4e:1f:3a:a5:23:ef:43:9e:3d:17:74:5c:95:b9:3a:bc:
86:1a:88:e6:1f:26:cf:f9:42:dc:1e:c9:90:de:9d:d5:88:d5:
b3:26:92:00:4e:97:f5:39:d2:0e:ca:ff:53:34:47:3d:83:ca:
91:86:65:be:76:a4:a2:f2:4c:ab:c6:79:5d:6c:7e:eb:81:62:
bb:4d:d8:92:32:33:32:a3:6f:84:a8:ab:10:ef:5b:b4:fb:e8:
24:d7:87:1b:25:e9:b6:2a:57:0f:6d:1e:8e:a3:6b:15:67:d4:
e5:89:7c:25:5b:93:78:8e:47:f8:a8:31:92:5c:64:80:9d:78:
43:b4:6d:4d:9f:52:6e:2a:12:8e:62:7e:12:8f:2e:37:c5:9b:
2a:4e:01:ce:35:aa:32:46:be:a9:85:df:89:02:51:4e:27:0d:
80:40:af:fc:73:ed:5d:e0:90:ef:59:9c:75:1a:8e:01:1c:6f:
c4:be:7e:88:d4:2a:1f:d2:8c:42:5e:5f:fe:92:e4:0d:0a:a7:
b1:e9:9f:1d:68:e3:1b:97:fd:9c:23:65:8f:01:6a:a0:a0:ee:
58:7d:79:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:01:09 2025 by rpki-client