Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/40d0a79b-e036-39cb-b622-1328c46312ca.roa
File: 40d0a79b-e036-39cb-b622-1328c46312ca.roa (raw, json)
Hash identifier: ZcVbsBnzxIEYIVRgem5HOPkcvXmGkhcWVnvHggO8ME8=
Subject key identifier: 87:07:D8:5D:11:0C:4A:D9:E4:5F:53:A9:46:98:C6:5A:1E:29:23:B5
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E80B6DB0F5B7AE19BFF00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/40d0a79b-e036-39cb-b622-1328c46312ca.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 128.109.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:80:b6:db:0f:5b:7a:e1:9b:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=eafe0270-453c-4721-bc77-e7b89f3d8f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:41:4f:23:c8:63:39:5a:03:03:ae:d7:bd:aa:
ff:ae:74:82:a6:25:31:da:91:83:2d:ba:a5:ef:1f:
72:87:5d:c7:39:4e:30:2c:9d:85:f1:86:86:72:de:
59:b0:98:a6:13:64:56:00:a1:36:b4:9e:f7:fb:1a:
2a:67:a7:fa:78:fd:ab:52:03:d7:74:b1:c8:f4:36:
fc:c7:0c:7a:59:b7:c0:a3:3f:b8:4a:40:3e:b6:68:
a5:39:97:02:53:f2:c0:f4:6f:62:be:91:8e:23:40:
9c:b7:43:fc:03:d4:bc:29:bf:4d:60:d1:10:27:6f:
1b:ff:12:20:0d:75:80:6c:b9:02:66:c6:0f:97:64:
7f:85:5e:4b:b4:69:e7:7d:29:46:20:5b:7e:8c:ba:
af:b3:45:7c:ba:f1:a8:36:6c:e6:dd:66:37:41:61:
d9:b3:3b:43:bd:8c:4c:bb:19:5b:ae:13:c1:7c:49:
9c:4b:c9:c9:30:48:cc:df:e0:bf:12:c5:30:38:97:
7b:af:3a:84:8c:de:43:df:f1:94:4d:53:de:65:3a:
9f:4a:ac:c5:e1:df:f6:f2:c2:a9:f9:a4:43:69:36:
5f:d5:3e:4f:b6:52:15:a7:26:85:ea:5e:ea:ba:2d:
9f:73:a2:0d:82:63:71:89:b8:37:55:f1:57:c1:74:
00:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:07:D8:5D:11:0C:4A:D9:E4:5F:53:A9:46:98:C6:5A:1E:29:23:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/40d0a79b-e036-39cb-b622-1328c46312ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
128.109.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:ef:8b:18:31:24:8d:fb:1c:da:74:3d:0e:86:00:d6:90:3d:
dc:1e:40:cb:6e:44:84:59:cf:c7:e8:f2:60:c0:73:06:9d:c1:
ed:5b:0a:0a:5f:8e:5a:0a:3d:d3:02:a1:09:0c:55:a1:09:ee:
a2:8b:09:f5:56:76:0e:cd:a0:07:53:8a:4b:ca:0b:42:cb:b4:
32:2d:e7:d8:88:6f:35:19:f8:ea:99:8f:d5:2b:68:75:1e:38:
9c:07:6b:90:0c:93:09:1b:da:03:5f:71:f2:d0:ac:69:a3:fd:
e2:4c:84:26:47:1d:8c:9a:78:2c:aa:aa:e2:19:1e:c2:63:8b:
6f:39:93:87:1c:5b:53:d2:26:36:9a:50:9f:fb:03:3c:f7:1a:
6d:6e:39:fa:4a:a1:a1:56:0d:45:6b:c4:dc:f2:a1:df:37:53:
63:ab:91:cc:4e:a7:6f:77:04:b9:31:ac:cc:ef:05:1b:f5:50:
71:f5:c0:de:63:f6:33:ba:96:bd:43:90:cd:b8:fe:7f:f5:38:
86:ef:db:bb:96:e6:b1:79:a8:ea:d6:64:24:5f:53:6c:a4:1e:
ff:ea:62:33:9e:1e:d9:be:7f:58:39:42:28:3c:ec:0f:4c:82:
e2:c1:af:99:80:1b:ff:f3:ac:74:e9:72:cb:2f:f2:99:9d:1e:
07:ed:fa:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:05:52 2025 by rpki-client