Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b60835ed-6b01-3cd4-b79e-f4658563eb9f.roa
File: b60835ed-6b01-3cd4-b79e-f4658563eb9f.roa (raw, json)
Hash identifier: UGnFt0tmuXt5d3/RHn8aOnXeeQcJnh/mX2ko1KMRdbw=
Subject key identifier: 17:97:CE:B2:C1:A8:1A:07:F1:A1:B5:80:D2:F1:45:34:8F:92:67:48
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584944694165F37C545C55944FB0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b60835ed-6b01-3cd4-b79e-f4658563eb9f.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 64267
IP address blocks: 130.254.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:41:65:f3:7c:54:5c:55:94:4f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=f344bb71-af26-4dd8-8409-0bf0e4e36c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2d:93:72:81:f4:fb:f4:7a:2a:52:de:d6:c3:
1f:bc:59:f9:32:8c:61:0e:b3:f2:08:5e:b1:a4:3c:
59:b2:38:43:bc:53:fe:df:b3:34:e8:4c:a2:28:34:
5c:d8:07:89:40:7d:be:82:cd:71:f9:12:57:63:ba:
9c:d0:a2:14:87:74:57:e7:59:0e:e9:51:2b:1e:28:
b5:28:91:ef:f2:74:c2:50:54:a5:4a:e1:fc:8e:30:
b3:73:39:77:da:3e:96:65:dd:ef:11:bb:00:1f:0b:
f2:2f:a3:97:09:c5:ef:27:a2:4e:a2:79:00:75:bb:
54:ac:5d:5b:06:3f:f6:71:d9:db:a3:d1:86:a9:4a:
6c:37:e6:3b:01:e2:d3:c3:35:ea:c8:49:e7:d9:d7:
0c:e7:87:81:99:47:17:3b:56:9a:99:45:2d:f6:58:
2b:14:2b:b9:55:b4:fb:5e:e9:8d:a1:27:0e:d0:41:
68:5e:e7:b9:98:bb:97:67:63:85:86:0e:49:62:15:
74:8a:52:40:4d:27:d0:bb:25:83:96:d5:9f:fa:4e:
1e:f5:d1:75:79:a0:e4:13:95:cf:f0:43:69:d2:30:
92:b7:3c:40:db:0f:ce:aa:94:d9:06:38:ed:90:ec:
ab:d6:8f:ba:ac:68:51:31:ef:c7:05:2a:ff:d5:a5:
52:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:97:CE:B2:C1:A8:1A:07:F1:A1:B5:80:D2:F1:45:34:8F:92:67:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b60835ed-6b01-3cd4-b79e-f4658563eb9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
130.254.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:b5:58:fe:8f:7a:2a:24:82:d8:74:3e:bd:8d:f7:c4:c7:9e:
88:48:f5:db:4e:17:d1:f1:26:e8:05:f9:6d:1f:7d:5d:cc:a0:
3a:03:81:5e:b6:7f:ed:53:dd:f9:53:a6:9a:b4:59:1b:bc:ea:
03:a3:7a:cd:d7:6a:dc:dd:fe:5e:df:b1:1c:ec:e6:6b:94:7a:
81:98:1f:85:ed:31:7d:a6:48:84:af:e8:5a:2d:a9:ae:47:b2:
d2:f6:82:7b:bc:75:ed:6f:35:7b:58:72:a7:8a:65:3f:79:a6:
71:4a:55:31:fa:03:63:66:f1:e6:a7:52:f5:4f:d6:eb:2c:5d:
35:d8:20:dc:d7:41:d4:ef:ba:e7:f9:98:01:c1:e3:75:57:fb:
90:d3:09:36:05:a5:e3:d4:64:3e:96:5f:17:d4:51:3c:6e:9f:
a5:90:be:50:bc:d7:2b:d7:36:2f:c8:37:d2:8b:82:86:d3:a3:
3c:12:27:f0:45:1b:1e:56:dd:73:db:94:6a:44:67:db:53:92:
37:b8:45:fb:ca:55:cb:8e:35:84:64:bd:64:bf:a4:73:09:32:
71:64:38:ca:66:45:eb:92:e3:e0:e7:c4:bb:47:bc:e4:18:83:
44:14:91:e1:c3:0d:ea:9c:79:d3:e3:71:f7:8c:5c:ca:80:90:
bd:fa:a9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:25:40 2025 by rpki-client