Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4fd1e6af-6cc9-39cd-ad54-bc9e6b884b8d.roa
File: 4fd1e6af-6cc9-39cd-ad54-bc9e6b884b8d.roa (raw, json)
Hash identifier: 56BKulP/nEYy482eCtHYVk0Zwss3UIMVjNWCa3GQ128=
Subject key identifier: CE:AC:54:09:EC:BE:82:89:3B:96:FD:07:7D:64:FF:86:4F:6F:39:68
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F43285848DA70F116819713E176B1CD00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4fd1e6af-6cc9-39cd-ad54-bc9e6b884b8d.roa
Signing time: Wed 12 Feb 2025 02:00:39 +0000
ROA not before: Wed 12 Feb 2025 02:00:39 +0000
ROA not after: Tue 13 May 2025 01:00:39 +0000
asID: 397630
IP address blocks: 130.254.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:da:70:f1:16:81:97:13:e1:76:b1:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Feb 12 02:00:39 2025 GMT
Not After : May 13 01:00:39 2025 GMT
Subject: CN=69e6b68b-1ab6-40c6-99d7-f2f413b24721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:17:e1:38:a6:61:d6:19:14:fb:b4:24:b5:81:
c7:64:84:60:aa:f4:5c:2d:35:20:c6:e3:90:8a:fd:
74:d8:cc:d5:c4:3a:a6:00:b0:c1:b7:da:d7:f7:30:
fc:7d:0e:99:b7:76:09:5e:13:cc:dc:e3:15:c5:2d:
47:dd:53:a1:23:b5:56:89:e7:cb:9c:56:0b:0f:74:
a4:6b:ea:19:04:9b:ea:fa:10:ad:68:8e:46:25:4b:
6b:be:9e:44:e1:7b:81:75:e1:9f:91:74:cf:f9:35:
a4:dd:ee:cf:9a:e1:cd:ed:71:f2:b1:86:a3:3f:ee:
5e:a7:02:47:1b:36:53:0c:81:b7:99:29:49:05:cc:
b2:30:5b:d7:7c:dd:ae:49:ed:b2:b2:a5:56:8d:fc:
13:a1:48:93:83:fd:22:57:16:8f:d1:0c:4b:2a:21:
90:77:03:75:a2:4d:a7:29:d8:ca:15:af:06:ea:58:
e3:df:11:3c:19:94:99:8a:1d:d3:30:c6:d0:03:9e:
2b:94:41:1c:70:a2:65:98:93:31:22:b1:9d:6e:5f:
5f:e2:a8:28:82:d3:73:34:11:0d:22:ea:76:89:87:
b9:01:ee:1c:6f:8e:a5:6c:d1:4f:d3:5d:84:18:4d:
49:1c:75:64:6c:38:48:aa:d2:70:a4:4f:7d:1b:e9:
0c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AC:54:09:EC:BE:82:89:3B:96:FD:07:7D:64:FF:86:4F:6F:39:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4fd1e6af-6cc9-39cd-ad54-bc9e6b884b8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
130.254.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:21:d3:df:71:f9:20:f6:ce:f6:b4:89:25:5c:12:a6:99:49:
62:46:7d:7f:21:cb:d6:15:d6:a4:66:73:7f:19:77:89:d1:51:
2b:c9:3e:bb:5e:53:79:ae:3a:ad:f9:ef:af:a4:56:b1:2e:41:
d8:43:5a:de:d9:6e:c2:57:9d:45:e7:3b:6e:eb:54:7c:fb:8e:
2b:c4:f8:9e:f9:5f:db:82:56:9b:12:55:81:82:be:5f:fd:95:
3b:f6:ce:fc:d5:7d:b6:2e:e0:7a:34:1c:51:19:2a:54:c1:0b:
15:d5:14:7c:73:04:48:54:a9:98:78:7d:8d:4b:46:c9:9f:2b:
84:9e:1f:64:86:eb:02:01:10:d0:c2:dd:49:d4:9e:40:03:d4:
1a:66:0d:7e:10:4f:89:ba:19:4a:35:a6:69:ee:dc:bd:14:9a:
94:1e:39:54:7d:e7:a8:2a:11:30:17:5f:6a:4d:6f:7c:b7:f5:
58:4f:d0:fa:df:03:9a:1b:88:93:84:4e:51:53:52:c2:3f:4f:
4b:b1:d1:7b:d2:4f:9b:9d:2f:62:e8:ae:47:71:94:27:af:eb:
67:53:0a:7a:56:cc:79:e1:32:9e:20:47:bc:d5:7e:d0:86:7f:
a7:bb:12:28:7e:91:c3:40:db:2e:51:a4:3a:ed:fe:6a:c2:9d:
85:df:fd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:25:27 2025 by rpki-client