Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/86604c1e-e526-334e-ab61-1fb3393fb181.roa
File: 86604c1e-e526-334e-ab61-1fb3393fb181.roa (raw, json)
Hash identifier: h0XMltHIXPHqSjg9a7g0D3dW2ItoAg6u/2GunbtJmAA=
Subject key identifier: 45:88:36:B8:F7:A9:40:72:BB:71:36:F3:E9:1F:04:41:B2:19:FB:A7
Certificate issuer: /CN=7894adcb-3be5-42b8-a76f-913809582611
Certificate serial: 010D0C9F4328584908816F8C7FDA8F332B6F0580
Authority key identifier: 5A:F7:62:9E:BF:84:43:86:83:3B:C5:BE:60:36:59:D6:76:BB:63:CA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/86604c1e-e526-334e-ab61-1fb3393fb181.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 12980
IP address blocks: 129.35.160.0/20 maxlen: 20
170.225.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:6f:8c:7f:da:8f:33:2b:6f:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7894adcb-3be5-42b8-a76f-913809582611
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=65c71448-1ebd-4555-be77-44eebc98f7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fa:c6:77:1c:13:90:84:92:73:f5:53:91:d3:
b3:da:cf:79:f3:66:23:d4:d6:6a:38:27:83:46:ee:
22:cb:6f:61:b8:de:30:78:20:18:1c:3b:e6:77:c3:
3b:45:d9:44:e2:b2:64:0b:75:8f:01:63:a2:77:c2:
c1:fb:dd:e3:b3:23:3e:92:bd:be:14:4f:0f:f1:1f:
0f:e9:ed:2b:90:b2:ca:5b:fc:a1:46:eb:33:1c:13:
4f:2e:98:d3:87:e5:8f:ed:10:88:0d:fd:b6:62:83:
f1:33:b5:6c:f9:35:15:79:43:37:90:11:04:d8:55:
46:cc:c3:9c:b7:ac:df:7e:1a:17:13:24:5f:07:8b:
8c:f7:04:c8:1d:4b:01:e8:b0:2c:67:f2:c2:16:65:
2c:0c:9b:60:cc:9b:3d:78:5a:cc:52:d7:b2:71:e7:
f6:f7:45:13:c9:ac:8f:77:13:20:5e:15:8e:88:41:
b1:22:a4:20:a7:32:05:62:54:7c:35:8f:0d:38:67:
d3:9a:50:c2:77:5a:4a:c4:f1:70:fb:5e:85:80:47:
98:f9:36:43:cf:56:2b:50:24:98:9d:65:9c:e9:67:
b7:9e:22:b3:68:ad:46:72:8d:f7:39:87:76:79:74:
b8:14:f6:46:ee:76:78:0c:9c:24:da:2e:7d:2c:86:
a0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:88:36:B8:F7:A9:40:72:BB:71:36:F3:E9:1F:04:41:B2:19:FB:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/86604c1e-e526-334e-ab61-1fb3393fb181.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.crl
X509v3 Authority Key Identifier:
keyid:5A:F7:62:9E:BF:84:43:86:83:3B:C5:BE:60:36:59:D6:76:BB:63:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer
sbgp-ipAddrBlock: critical
IPv4:
129.35.160.0/20
170.225.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:2b:99:ce:f9:6c:8f:d7:f9:05:10:e8:51:7d:27:c7:0b:3e:
f4:8b:03:ec:63:bb:f1:ab:39:8c:72:cd:fa:98:00:76:4a:f3:
87:64:63:a2:08:35:51:dd:b8:c2:dc:c4:79:94:34:74:fd:d7:
16:fc:91:02:2f:34:7c:b1:32:55:51:7a:8b:bb:10:56:a1:af:
1a:ce:b7:ef:9f:2c:f0:e9:c6:71:ae:4c:86:c0:a5:34:1a:7c:
91:37:0b:ec:75:53:cf:36:31:19:f8:8c:ef:98:f2:1d:cd:a4:
b3:83:27:b6:8e:ae:bb:d8:b0:46:2a:b5:7e:47:43:15:16:c5:
84:00:b7:72:31:90:6f:22:2c:75:41:15:a3:e3:6f:07:1e:58:
18:80:fd:24:74:5d:8b:18:3d:f2:49:77:26:bf:85:6f:3f:8f:
14:94:55:6a:82:67:e1:37:3b:91:30:41:79:47:65:96:ae:b7:
e5:72:29:7a:96:62:72:dd:9f:be:5d:77:87:c7:a8:c2:7f:fc:
eb:a6:79:66:09:71:a7:22:3d:a4:d4:d6:4a:4d:ea:5a:9d:a9:
ea:97:ac:37:9a:4c:15:a4:02:d0:6f:cb:e3:3a:09:e9:00:32:
23:3e:74:31:93:4f:7c:09:f4:98:55:f1:4b:fc:77:f5:aa:7f:
75:31:0c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:41 2025 by rpki-client