Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5a972549-41ac-3520-be88-c20f6265afd9.roa
File: 5a972549-41ac-3520-be88-c20f6265afd9.roa (raw, json)
Hash identifier: 4KZgEIZ3mjA1xFWFH5zkADX9StZJv4UDTdydoXHuL0s=
Subject key identifier: 12:C3:44:82:64:E5:C0:35:1E:C5:05:DD:7B:FD:5C:4B:68:C7:40:50
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E7FFA30C00315C75ED100
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5a972549-41ac-3520-be88-c20f6265afd9.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 128.109.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:7f:fa:30:c0:03:15:c7:5e:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=9e0fd987-afd4-4119-b17c-fe0a7bcdf2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b3:8e:17:de:65:c8:26:93:38:f2:85:80:dc:
96:ae:e2:2b:5d:36:3d:0d:47:cb:57:4e:68:b9:c5:
81:0b:50:8a:c0:72:8b:bd:e4:2a:2c:8e:28:e9:c8:
de:7d:bd:43:85:85:87:b0:c2:fa:56:fd:7f:f4:40:
7e:d1:ff:5c:e9:dc:9a:c7:cb:6d:ef:ad:58:72:f1:
12:1a:34:81:b5:6f:76:e2:01:d3:7f:99:cf:cf:d8:
98:8a:d7:a1:38:dc:94:cd:f6:c6:f6:40:80:b3:59:
54:c3:a9:17:90:fe:c7:ab:f8:cd:24:20:09:a2:51:
88:d6:5e:37:f5:2c:38:00:b3:f6:7e:6b:40:33:b1:
fd:ad:22:af:20:68:d7:f1:9c:21:f8:de:2f:f0:df:
11:b5:ed:ef:aa:3a:77:76:a8:04:fd:74:e5:6c:f7:
18:a2:de:95:be:ce:f6:c0:6b:1d:6b:63:c1:ad:55:
b3:31:a7:03:ef:63:0d:63:e1:93:fa:b6:9d:3e:f3:
ee:05:be:98:f2:f4:94:5e:91:00:71:d6:c1:27:56:
2f:ae:cc:17:0d:ba:dd:bb:28:fd:15:7d:cd:6d:d7:
64:88:e1:3c:46:bd:92:68:0d:ff:28:2d:b6:a1:9e:
25:ec:c8:55:bd:a6:de:46:a9:54:0c:d3:b1:34:ac:
10:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C3:44:82:64:E5:C0:35:1E:C5:05:DD:7B:FD:5C:4B:68:C7:40:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5a972549-41ac-3520-be88-c20f6265afd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
128.109.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:06:42:a7:0d:2a:c0:0b:88:0d:d8:1e:e5:05:87:bd:0b:49:
f0:d8:ee:e5:fa:7b:2c:35:22:5b:ba:08:1f:c0:24:93:4b:66:
52:b0:9b:94:74:8f:69:0c:c0:90:81:f1:57:3b:0b:a1:d7:6b:
83:b8:4f:36:3d:4d:05:2c:7a:be:5b:7d:dc:62:67:94:83:27:
94:26:df:92:1c:81:02:b9:7c:ad:eb:41:cb:ca:57:b8:f7:26:
42:d3:37:50:ad:3c:13:c5:cc:39:23:81:fc:f6:4e:fe:49:8a:
0f:79:22:e4:60:0a:9c:bc:e3:26:92:80:27:a1:ad:1e:a0:2e:
8f:11:1e:b1:3f:29:bd:12:08:d0:68:25:cf:b0:ef:ad:d8:0a:
60:de:a3:04:72:84:0b:16:5d:03:6a:27:a4:24:7e:3a:fc:ae:
e2:a8:f0:0a:2f:a6:43:e8:5c:13:43:90:c7:ed:fe:0f:8a:48:
c9:1b:d3:b2:b1:e8:97:ac:10:47:f4:d2:ac:ab:13:f7:af:ec:
21:81:3c:1f:73:18:3c:3c:55:ea:ff:5f:c3:97:7f:1a:9a:b1:
7a:d4:5f:7e:c8:4c:86:98:58:02:cf:75:30:c7:f1:23:cb:af:
74:e1:d3:4a:1c:ab:53:e8:6f:18:c0:75:a0:06:a1:15:9f:fd:
da:ee:40:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:48:48 2025 by rpki-client