Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f3381fe2-caf7-3c04-836e-c630076da29a.roa
File: f3381fe2-caf7-3c04-836e-c630076da29a.roa (raw, json)
Hash identifier: y/CksvbsEPjJ3k59JF2i5Z3Hv44OoSPefHDD0RsCgKU=
Subject key identifier: D7:0D:DB:C8:3F:EB:94:F3:E7:A7:05:D9:93:2C:8F:7C:F4:C8:2C:E2
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E806D1DC042935122BAC0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f3381fe2-caf7-3c04-836e-c630076da29a.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 128.109.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:80:6d:1d:c0:42:93:51:22:ba:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=ecd5357c-9bb1-452f-aba7-8bfb2c1bb3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:13:c4:87:97:ec:25:8f:99:80:e0:23:c7:4c:
0a:3e:32:a6:f3:be:3b:1c:6f:57:f3:ee:79:0c:10:
76:1c:f3:48:c3:97:51:dd:cc:d9:fc:41:dd:d9:75:
13:f1:e5:a5:33:32:95:60:b9:57:48:fc:b1:29:60:
d2:4f:94:68:bf:52:c6:18:25:f2:42:c4:26:2f:ed:
34:92:27:4e:99:a4:8c:53:70:3a:54:e6:e2:77:18:
2c:76:b5:b4:23:3b:c4:01:d5:e3:ab:54:b6:cd:c7:
0f:57:7a:b9:9d:f5:7b:c9:3b:26:fb:6f:c1:fb:ad:
cc:45:11:d3:5d:ee:1b:fe:3b:74:7a:91:b3:bc:2a:
53:e3:a3:04:69:d1:b1:b5:c6:6d:f7:91:d8:a9:65:
9f:c1:94:c1:91:04:7e:58:93:65:21:da:3d:c8:ba:
fa:91:59:11:df:86:98:3a:19:95:99:5a:cc:c7:4b:
cf:15:fa:4f:67:ca:ef:59:e4:d6:b4:0a:b5:0b:f4:
a3:7f:10:83:bd:5f:62:35:e6:b1:3e:35:a1:f2:a8:
24:36:29:97:6c:fc:f5:c2:9d:78:50:db:95:f6:67:
0f:0a:32:ca:5a:13:e0:4d:87:e8:a0:15:1c:32:df:
7d:06:03:30:e7:19:f5:c1:83:a4:bd:fc:69:bb:17:
36:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0D:DB:C8:3F:EB:94:F3:E7:A7:05:D9:93:2C:8F:7C:F4:C8:2C:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f3381fe2-caf7-3c04-836e-c630076da29a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
128.109.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:3f:83:a4:37:9e:0a:58:ec:c0:14:15:26:68:be:7a:b9:0f:
1d:0a:c3:26:ac:ad:eb:7b:d4:59:80:ad:e9:66:64:04:f4:6c:
c2:e1:4a:69:9f:e6:f6:0f:ee:e0:4b:d9:25:f3:fd:f8:4f:92:
ee:07:3f:cc:ac:25:2a:a0:76:6b:05:0a:d2:cd:1f:2e:ac:5a:
50:26:b3:99:4f:d9:3e:eb:21:70:31:67:69:7b:09:59:5b:f7:
11:a1:a5:e6:c1:d7:d5:44:49:29:16:71:d3:f0:c6:35:c9:65:
2d:07:c9:c7:28:0d:1c:73:63:40:f1:c0:34:53:81:b7:15:0f:
87:73:38:c3:3a:4e:05:cd:1a:2a:d3:a8:51:1f:c6:94:c0:35:
d9:70:9f:86:6e:77:86:c7:43:66:0f:60:d0:09:11:44:97:48:
5f:9a:c5:48:93:9b:2f:3f:07:cf:d6:61:a7:61:1b:1d:2a:c3:
4b:5d:6a:ab:ed:a2:d6:96:28:5a:8e:a2:f6:ed:8b:9e:1b:89:
e4:3e:9a:19:19:02:e1:21:b2:3d:0d:a6:a4:8f:27:93:d9:3f:
bf:35:1e:b1:dc:a5:30:fe:3d:2c:4d:c3:7c:ba:d4:7a:58:20:
b3:47:1e:47:90:d8:8f:48:72:50:b2:4b:c1:77:83:c9:87:f6:
e6:54:66:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:40:30 2025 by rpki-client