Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7d5e385a-2e24-3deb-ad85-ed9ad58a023c.roa
File: 7d5e385a-2e24-3deb-ad85-ed9ad58a023c.roa (raw, json)
Hash identifier: zg5xrahFT4/oPEU/FQ4RjqObQbXvFOqR9CYlVbKWP60=
Subject key identifier: 66:40:25:8F:46:29:F9:E1:5E:B4:A5:A9:8F:A6:67:A2:87:61:07:4A
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F432858488AE0A8682F9E3D6FFF522480
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7d5e385a-2e24-3deb-ad85-ed9ad58a023c.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 21
IP address blocks: 128.1.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:a8:68:2f:9e:3d:6f:ff:52:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=194c187d-43c1-4e2e-9d52-7d0461ab526d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4c:50:c9:87:6a:79:d9:9d:5d:5d:5c:87:78:
f2:9e:68:c4:92:44:7b:b3:b5:67:74:5d:fa:ea:9c:
d5:4e:55:db:b2:1c:db:82:41:d7:33:b8:77:79:c8:
96:df:87:9a:be:d5:2f:db:7a:62:95:81:33:20:96:
87:52:82:e0:a2:7c:ff:ce:61:ef:ff:00:d9:b3:a3:
3f:4c:cd:6e:73:0e:82:f5:35:fe:12:f3:68:5f:26:
ba:d5:87:57:ed:06:4b:71:44:ec:a8:0d:92:44:27:
09:93:a2:15:10:96:01:99:b0:92:41:31:71:80:fc:
6f:8c:c5:45:4d:f1:89:f3:76:ec:ce:f0:5b:80:92:
74:40:f0:a6:30:19:4a:11:37:46:ec:53:75:89:78:
5f:52:4d:c2:ae:d2:4f:b5:0f:98:6b:42:a7:cb:72:
1b:28:c5:46:79:58:dd:63:bf:58:f2:c2:5e:87:5a:
4e:f0:04:3d:35:07:1b:ca:ef:7e:4f:f9:c6:22:44:
c4:2c:30:4f:90:88:75:e7:f0:f7:28:10:bb:43:33:
b2:b3:60:95:72:b2:60:46:9d:c3:eb:5a:42:d5:36:
35:6d:fb:76:c2:85:46:be:09:86:59:3f:c2:9b:15:
e5:3e:d7:37:94:80:21:a4:af:ae:c4:3d:38:2b:f4:
5f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:40:25:8F:46:29:F9:E1:5E:B4:A5:A9:8F:A6:67:A2:87:61:07:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7d5e385a-2e24-3deb-ad85-ed9ad58a023c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
128.1.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:2f:04:5f:a3:75:d2:76:15:62:72:2d:a4:c0:60:d3:1f:44:
81:e5:a5:8e:10:1c:b9:00:6b:23:b9:45:1c:9f:d1:61:ef:d3:
8a:3c:c8:9a:d9:1c:c5:fb:e1:f2:99:75:3b:af:a4:de:60:fe:
71:3e:3e:18:1a:9f:16:14:cb:f0:95:d1:22:65:a9:b3:35:33:
48:fb:cd:93:69:11:51:51:a0:12:9e:4a:0b:02:e9:05:7b:ae:
7e:ad:1c:95:74:09:79:ad:cc:22:af:8c:18:7c:9f:79:c3:de:
00:77:a7:bf:1e:4c:98:85:39:43:33:6f:58:58:51:5a:e5:d2:
29:e0:d9:05:fb:29:67:04:5e:e6:4f:02:d3:e4:33:b0:48:87:
69:2b:44:26:0b:f0:d2:9b:1e:3a:94:e1:7e:1e:79:96:4d:f6:
ed:2b:50:75:cd:fa:6a:2a:3b:a6:c4:60:97:61:71:a8:af:63:
20:71:a6:49:4b:6f:7f:c8:38:b1:57:d7:d3:ec:97:0f:ac:7f:
21:7e:d3:d7:d3:b3:99:8a:12:6c:b7:02:95:c3:43:c6:6e:3f:
92:fb:c2:d3:91:24:60:23:2c:e3:af:8d:42:c6:89:94:c5:b3:
6f:00:df:57:40:6d:9f:df:62:a8:c2:5c:c5:2d:a8:38:87:24:
aa:55:d6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:57 2025 by rpki-client