Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a5bf3ded-14db-36b1-939a-11cea42f1831.roa
File: a5bf3ded-14db-36b1-939a-11cea42f1831.roa (raw, json)
Hash identifier: hF2/w3zZpXKZUdrbRTZOxqMVrD1pq5tajWRw8vzbWuU=
Subject key identifier: A3:8A:BC:22:3F:9E:7E:73:F9:6B:A9:4A:63:C7:F0:B7:0A:3D:39:61
Certificate issuer: /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial: 010D0C9F432858488F107BA29FFDC581B77C7C00
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a5bf3ded-14db-36b1-939a-11cea42f1831.roa
Signing time: Thu 16 Jan 2025 02:00:39 +0000
ROA not before: Thu 16 Jan 2025 02:00:39 +0000
ROA not after: Wed 16 Apr 2025 01:00:39 +0000
asID: 12145
IP address blocks: 129.82.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8f:10:7b:a2:9f:fd:c5:81:b7:7c:7c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Validity
Not Before: Jan 16 02:00:39 2025 GMT
Not After : Apr 16 01:00:39 2025 GMT
Subject: CN=c904b036-11ab-4052-af2c-80b917eca238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8f:97:40:d2:19:22:bd:aa:37:bd:d5:3b:66:
b7:d6:fd:29:a3:13:9a:c1:c1:9b:c7:6f:b1:b4:af:
ba:bf:8f:ce:53:35:7a:bc:6a:a7:3c:12:2c:17:2a:
e5:cf:aa:ca:f5:99:9b:be:58:f2:6e:b5:ad:a5:7a:
f2:e1:4a:80:d1:4c:1b:ff:ac:5d:a8:85:44:83:bc:
85:c5:93:f6:41:b3:69:3b:ac:e3:13:4e:e5:70:07:
8b:c4:f7:4d:8f:15:1b:d7:6a:45:ca:fa:8d:8c:5a:
01:20:43:49:29:c5:d7:d3:46:30:6b:bb:8a:dc:ee:
f9:95:9b:bf:3a:d1:a9:f7:15:f3:1e:17:05:87:fa:
2f:b0:a2:39:95:94:ba:d1:d3:14:8e:90:47:31:fc:
b4:0e:f6:fe:8b:e1:32:db:ba:64:39:e1:b8:85:e6:
6d:e7:7c:25:8a:38:e9:96:7c:74:27:08:a8:70:15:
be:8b:76:49:16:bc:83:e4:80:7f:47:51:b3:57:65:
1a:b3:a4:4a:f4:8c:bf:84:f3:e9:90:1a:c6:a0:33:
a0:3b:67:d8:98:ed:1d:f1:a2:3e:60:31:5e:9d:a9:
50:9e:8d:2a:f3:27:3d:ec:80:78:0b:bb:30:f6:9a:
ef:1f:34:83:2d:78:b9:9a:58:a5:5a:9b:e2:31:6b:
e0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8A:BC:22:3F:9E:7E:73:F9:6B:A9:4A:63:C7:F0:B7:0A:3D:39:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a5bf3ded-14db-36b1-939a-11cea42f1831.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl
X509v3 Authority Key Identifier:
keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
sbgp-ipAddrBlock: critical
IPv4:
129.82.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:47:3b:e5:34:1a:3c:d4:bb:e3:35:db:1f:7f:a9:04:65:a6:
d9:0e:f2:cb:b9:c9:09:49:15:7e:a4:5b:7e:a4:14:a7:0b:0d:
8b:ba:b0:ad:b6:92:43:7f:56:dd:16:0e:bc:c9:54:c7:ce:d2:
c5:f7:04:4f:de:dd:9a:ad:bb:d8:6a:1a:c8:19:dc:7b:25:fe:
d0:a0:f7:07:f2:9d:41:29:71:1a:9a:15:64:15:32:98:b6:b4:
b0:4c:e7:d2:ee:9d:86:1f:69:a8:6a:cc:9a:42:6f:0b:31:58:
a4:14:a6:23:62:7a:9c:13:67:c4:3d:de:e6:a5:98:8e:90:20:
27:70:3f:94:ed:b8:6f:89:a9:85:f8:6d:ba:85:82:1d:2e:f0:
05:2a:e7:7e:ac:38:d9:bd:f7:b2:9a:5c:21:4e:da:d7:b1:6a:
b0:38:90:d9:ae:2c:bd:ae:4b:f8:14:f7:e0:e1:4c:78:88:54:
25:1a:9b:47:5b:27:2d:ab:0c:f7:a5:5c:13:77:d3:40:a4:59:
7d:d8:2c:db:f8:32:74:91:47:38:fa:19:32:f2:77:2b:2d:ca:
de:9f:35:4b:2d:92:80:82:bc:8a:4a:4f:1e:df:2d:bd:d5:a1:
14:a5:61:c0:8f:4d:99:f3:a2:81:c8:7f:95:3a:be:73:b7:3d:
a2:18:bd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:43 2025 by rpki-client