Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/aa1bbf6d-5c62-369c-9c8d-dfcd0d5d4372.roa
File: aa1bbf6d-5c62-369c-9c8d-dfcd0d5d4372.roa (raw, json)
Hash identifier: biVpzQu+AR4wxKbA/lI/L+VJcWK7bpH42t+VN3b/0Zw=
Subject key identifier: E7:96:90:E1:F1:02:EC:4A:C8:00:D2:00:58:7E:E5:C7:83:6E:0C:A4
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F43285848F9267B914832E69C6AC26040
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/aa1bbf6d-5c62-369c-9c8d-dfcd0d5d4372.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 26878
IP address blocks: 128.177.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:7b:91:48:32:e6:9c:6a:c2:60:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=46ebd537-ac3a-4d05-99f8-a14955c10e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:aa:1b:c1:95:40:f0:69:07:38:48:c2:93:7f:
0f:c6:6d:c6:82:81:a5:91:ca:39:1b:30:7b:cd:29:
da:34:98:fa:80:a1:58:fd:eb:56:5b:98:72:cb:9b:
2f:17:70:0e:f7:e0:2f:5b:ff:36:9b:1d:63:67:f4:
b2:64:ff:63:81:0f:f7:9a:6c:db:b4:04:b6:98:f9:
39:9e:5c:33:48:13:0d:86:92:de:4d:05:c2:ed:ac:
cc:6e:a4:90:48:b9:b4:2f:f1:5f:d5:46:11:54:18:
ee:16:70:12:44:7d:7d:22:35:db:c0:39:01:0a:21:
75:aa:d9:9a:59:02:58:db:6d:87:d5:88:65:aa:30:
90:e8:70:37:97:71:09:f3:37:e1:56:05:a6:46:77:
6c:8b:8c:fc:11:73:cd:80:d9:54:e6:ce:08:8f:9d:
57:4c:28:2a:c7:4d:b5:c8:ab:01:c7:75:41:c8:92:
b2:f2:ad:d5:af:0c:2b:f3:a3:68:32:92:5d:cf:9a:
a2:e1:cb:eb:6d:cb:ea:bf:b7:4f:6c:d9:ce:e2:d7:
b2:31:9e:25:69:96:f0:c6:83:f3:27:ed:61:79:22:
1b:b3:e5:f3:db:ef:57:76:e7:51:a4:97:1f:99:c9:
77:1f:13:54:d8:a5:fe:68:ba:5c:ed:aa:ba:ff:5a:
43:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:96:90:E1:F1:02:EC:4A:C8:00:D2:00:58:7E:E5:C7:83:6E:0C:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/aa1bbf6d-5c62-369c-9c8d-dfcd0d5d4372.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
128.177.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:31:51:5a:ce:5f:62:41:a8:84:60:e2:1e:80:a6:5b:48:8b:
8a:8a:4e:01:5b:61:e1:6f:90:a8:11:91:a8:63:64:43:07:80:
75:95:e5:23:8b:74:16:e0:cb:34:21:c6:de:e1:3a:4e:0d:e4:
a3:47:2f:86:ee:d1:72:48:df:6b:07:53:a4:59:a9:fb:36:be:
c0:f4:25:1f:20:cb:6c:40:62:17:70:41:1f:f4:9d:37:fe:2a:
94:32:08:a5:5f:ff:38:27:8c:c1:e4:23:f5:a5:7e:34:b7:60:
c0:8d:98:56:02:7a:46:ff:7e:a1:c9:2e:99:f8:a4:10:a0:ab:
51:e2:e4:bb:a4:79:af:00:d8:be:84:22:b7:d9:4d:9d:99:af:
0b:f6:12:15:91:e5:7f:0b:28:92:dd:5d:59:8e:33:e3:8f:51:
73:02:5c:d4:b2:9c:b8:78:4f:78:1d:ae:67:c8:5f:b0:6d:99:
ed:41:37:30:52:cf:78:33:68:ee:f0:bc:93:26:e1:e8:85:f2:
37:fb:b4:4d:d4:89:18:62:27:75:d8:2e:ae:1a:59:d2:7c:a2:
a8:71:3c:46:df:03:84:c2:91:61:58:55:7e:4a:ee:bc:1b:8f:
24:94:72:93:ed:0e:c0:a6:aa:f4:a6:2d:cb:8f:5c:11:a8:58:
09:28:05:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:01:46 2025 by rpki-client