Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/80df547e-3210-373e-9547-47603262d123.roa
File: 80df547e-3210-373e-9547-47603262d123.roa (raw, json)
Hash identifier: f3dGnQAdL5bXc8MLfn6vk8OnmkAt9KP4FOXSeQxSOFQ=
Subject key identifier: 0B:52:9F:78:65:64:1B:F2:F1:FD:E5:E2:4E:99:1E:6E:23:57:CA:C5
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F432858492183FD8438FEE300DE180800
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/80df547e-3210-373e-9547-47603262d123.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 21859
IP address blocks: 128.1.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:fd:84:38:fe:e3:00:de:18:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=e65f740c-acf6-4442-90ba-50a55867f8c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:49:67:cd:26:cd:db:a1:f2:18:4d:dc:e0:6b:
ee:04:a8:4a:c7:07:0a:8d:a4:e5:83:98:b2:ad:b1:
8d:55:43:de:c3:2b:41:77:89:06:1c:86:ca:ee:b5:
86:25:1f:d6:87:4b:8b:2d:83:30:4a:d1:32:e8:89:
ef:84:bb:7c:ae:b7:0b:ad:38:28:fb:85:1f:5c:6f:
25:3c:4b:43:2e:b4:28:a9:77:69:9e:35:74:d6:af:
d6:a4:78:49:54:4c:12:10:f3:15:0a:2e:cc:1b:e2:
21:56:03:58:1d:1f:c0:06:2b:8c:91:4a:bf:c2:33:
ae:bd:42:b8:c3:80:6d:d6:5f:8b:bf:7b:09:11:20:
45:48:03:4c:4c:f4:1f:c5:5a:20:a5:ed:3a:f7:32:
71:e5:f2:30:40:e8:29:47:3a:49:5e:99:02:25:27:
d8:44:72:54:db:76:30:e1:2e:55:41:2a:d0:79:33:
32:e7:b0:b6:70:bb:32:8a:c5:27:2b:a6:9a:05:03:
a1:87:f9:f4:02:5c:10:a0:2c:5e:37:f1:26:24:d2:
ca:7b:a1:7a:a9:9c:e6:ef:3a:ad:f7:12:09:dd:71:
7c:68:2a:cb:20:4d:98:32:39:4b:ed:ac:fd:c2:c6:
cc:9e:e3:97:f3:45:35:d7:f5:55:bf:07:7b:13:5f:
ca:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:52:9F:78:65:64:1B:F2:F1:FD:E5:E2:4E:99:1E:6E:23:57:CA:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/80df547e-3210-373e-9547-47603262d123.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
128.1.30.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:c0:a9:cd:d2:b3:be:0b:f5:c8:7a:4b:78:eb:73:fa:ae:cd:
8a:28:d1:b0:0f:0d:df:cc:84:4c:43:e9:27:db:dc:10:64:ce:
8b:82:92:ae:e5:88:7b:3a:6b:ef:42:72:d8:16:a8:06:34:22:
60:dc:d4:c8:4b:a2:a1:9c:b8:fe:28:8b:84:d9:d5:27:03:a2:
cd:66:b4:26:a7:fb:a7:43:7c:5a:bb:32:fb:1d:76:9f:b7:f2:
f2:47:14:54:b8:99:90:78:41:e6:2e:84:2e:c4:82:0a:f2:5e:
b9:77:0b:22:8b:ab:7b:c3:60:57:6d:c8:a5:73:28:db:c0:53:
b9:bd:da:ad:d3:23:04:4c:19:d5:4f:aa:62:ac:94:56:2b:07:
4c:c1:57:76:a0:1b:ed:fc:b3:cf:a3:b4:88:e6:f6:08:d6:53:
1f:cc:a4:ea:99:86:dd:60:d5:30:02:fa:34:2c:3c:fd:f7:e8:
a8:99:38:9b:98:09:c1:5d:36:e9:ee:49:5e:73:cf:89:15:bd:
f2:83:05:97:be:24:ca:e4:0d:e0:34:36:4e:57:98:a5:21:ea:
9a:75:4b:33:16:5b:b1:d5:b1:2a:6e:50:73:75:61:cb:80:f5:
92:e6:63:9a:f7:c4:d5:84:4b:d8:90:2b:65:a1:6f:a0:3a:7e:
64:ac:90:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:02:32 2025 by rpki-client