Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/8edc1a27-c324-3d26-be3c-15679ecee128.roa
File: 8edc1a27-c324-3d26-be3c-15679ecee128.roa (raw, json)
Hash identifier: 0IRJTglQmr9aSse/fJTK+CvUnKZ2O7N0ejGk/V3ERm0=
Subject key identifier: 33:D7:AC:04:72:1F:74:FA:87:67:FC:55:D6:23:44:66:53:37:8E:23
Certificate issuer: /CN=d3de683a-04b1-4e1c-94c5-cb45e983323d
Certificate serial: 010D0C9F43285848A400C3CFF4C8E1A2B6966700
Authority key identifier: 21:FD:2B:08:1D:A1:60:76:A3:D5:90:95:8B:98:5D:3E:E0:9B:F1:A4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/8edc1a27-c324-3d26-be3c-15679ecee128.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 398888
IP address blocks: 128.254.220.0/24 maxlen: 24
163.123.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:c3:cf:f4:c8:e1:a2:b6:96:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3de683a-04b1-4e1c-94c5-cb45e983323d
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=4f1c369f-5cbc-444a-91f6-3bd8797c2c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2f:30:79:2a:4c:4b:40:94:a4:8c:22:a5:38:
16:f8:15:9c:41:75:96:0d:8d:23:cd:23:32:0c:ed:
a5:82:d6:1b:4a:8f:b6:e1:47:ab:51:bf:94:e1:2b:
ee:53:6f:38:bb:35:5c:c5:15:18:55:3c:cd:55:c3:
90:da:b6:2e:1e:d9:13:6c:97:b3:b5:47:ae:c5:33:
3e:3d:55:f2:7e:16:17:5b:6d:5d:eb:1f:bb:e2:0c:
38:11:04:4b:aa:3c:a0:26:3c:fe:32:18:c6:c8:e2:
bb:08:ef:3c:e9:44:d6:a3:0c:c5:55:a0:8e:bb:74:
08:c4:f2:92:ab:0b:7d:aa:30:1d:45:46:ed:08:ef:
c0:8f:f9:e2:9f:43:4d:a5:a1:fc:26:89:75:34:ba:
1e:23:c2:bd:78:c7:98:e1:37:38:89:e1:7f:e4:bb:
87:90:31:bc:4e:38:26:72:48:57:71:f0:28:a4:dd:
a9:28:0a:2e:cc:da:d8:50:6a:8d:62:44:d5:8c:af:
99:35:09:40:88:ad:b8:92:ca:0b:60:e3:6d:7f:53:
e7:1e:0b:9a:98:16:77:64:7c:b3:a0:15:3d:87:68:
98:37:ef:1f:0d:ca:4f:2c:a5:1f:99:c6:ab:c7:69:
59:b0:d1:2b:93:88:e1:a9:54:36:36:9e:e0:23:52:
50:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D7:AC:04:72:1F:74:FA:87:67:FC:55:D6:23:44:66:53:37:8E:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/8edc1a27-c324-3d26-be3c-15679ecee128.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d/d3de683a-04b1-4e1c-94c5-cb45e983323d.crl
X509v3 Authority Key Identifier:
keyid:21:FD:2B:08:1D:A1:60:76:A3:D5:90:95:8B:98:5D:3E:E0:9B:F1:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3de683a-04b1-4e1c-94c5-cb45e983323d.cer
sbgp-ipAddrBlock: critical
IPv4:
128.254.220.0/24
163.123.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:f8:a5:96:85:4a:95:eb:80:d0:fa:0f:2d:72:89:c4:8b:64:
b3:4b:1a:81:fc:74:5c:e0:6a:ab:c5:85:b3:eb:9c:35:0c:9a:
37:fc:d4:47:1d:7f:ec:56:ed:ef:46:f1:a2:d1:07:c6:88:ca:
78:18:c7:56:7a:af:33:51:86:a6:68:0a:e6:dc:d2:9b:37:70:
b7:c0:fc:95:da:57:5a:7c:08:ed:a7:10:43:4c:ce:b0:bf:00:
35:cd:46:ad:8a:5c:32:31:98:34:bc:60:57:8b:a2:d8:f5:8c:
bf:74:d7:cb:0b:9d:df:39:7c:f2:10:4f:38:06:13:ad:a8:00:
ec:84:d6:6a:00:c4:dc:a7:bc:bb:0d:84:80:36:09:5d:19:91:
ac:5e:ea:a0:d1:be:9c:fa:81:b5:8b:2b:4f:86:0e:fb:04:26:
1a:af:1e:d7:c5:b1:cb:6a:ae:31:01:72:34:82:d5:66:9c:39:
a3:2d:11:04:11:99:4d:ca:fb:b1:3c:bc:3d:02:47:f3:07:0a:
d0:56:bf:c5:d2:1b:d2:22:c9:91:53:62:56:05:db:e4:8b:6c:
0f:8a:94:d9:fb:e2:cd:8e:d7:87:fb:69:d1:a1:14:15:91:0b:
29:69:8e:40:7d:9b:66:f5:f6:50:bc:23:82:b5:5c:a9:d3:3c:
fc:1d:c8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:35:31 2025 by rpki-client