Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/a4f4778c-5c5d-386d-8bb8-0d0b52371159.roa
File: a4f4778c-5c5d-386d-8bb8-0d0b52371159.roa (raw, json)
Hash identifier: 2k7omj1rUiVgc1j1i/lN2X7wH4lFQGXIxo3Dc08nqB0=
Subject key identifier: 1D:72:77:4A:1F:17:C5:07:F4:5F:FF:82:A7:1D:16:9B:6C:E3:2A:1F
Certificate issuer: /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial: 010D0C9F43285848FBF129F5BD4002F359019DE0
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/a4f4778c-5c5d-386d-8bb8-0d0b52371159.roa
Signing time: Mon 24 Feb 2025 02:00:38 +0000
ROA not before: Mon 24 Feb 2025 02:00:38 +0000
ROA not after: Sun 25 May 2025 01:00:38 +0000
asID: 54004
IP address blocks: 134.202.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fb:f1:29:f5:bd:40:02:f3:59:01:9d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
Validity
Not Before: Feb 24 02:00:38 2025 GMT
Not After : May 25 01:00:38 2025 GMT
Subject: CN=ca18e402-f128-44f1-b08f-ed4f0f6d0153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:22:e6:b3:ab:9b:79:82:74:5c:d9:6d:b3:a3:
ee:54:ae:b0:3a:ce:e5:3c:27:5f:1e:b4:ef:bc:cb:
a5:f8:83:29:a1:a8:72:f5:8f:88:4b:55:2b:e0:e7:
90:7d:e4:3e:78:29:bb:15:73:4d:ad:fc:98:43:d5:
54:30:64:b1:ea:5f:62:db:df:c8:be:20:16:b6:c6:
e7:0d:a4:e6:39:cc:2e:d5:b2:98:33:b6:f8:fc:ec:
62:aa:90:8f:5a:a1:f4:c1:78:a9:86:41:bf:ce:af:
e9:08:b0:d4:83:d5:49:fd:3b:f1:c4:e8:a3:f8:90:
9f:56:0a:3a:af:38:45:78:ba:38:91:b9:78:2d:50:
4a:5d:df:b4:80:e8:18:7c:c9:46:3b:34:f0:2c:01:
7b:63:e0:16:ac:47:fc:cb:80:27:fa:dc:5f:4c:bb:
66:ab:b0:ff:a5:b0:7e:95:ef:39:43:98:38:8a:1a:
1a:7c:e3:7b:78:5d:ce:24:8f:28:17:6d:83:81:eb:
e2:3a:e4:20:15:9f:b8:4d:4f:22:69:2c:f6:4d:ae:
6d:84:a3:d9:e6:dc:ec:a4:2b:16:5a:b2:f6:a1:bb:
e0:16:03:63:04:18:78:e0:7f:90:cd:34:85:a4:3b:
c2:93:fb:f6:79:ab:5f:b1:b0:73:ad:86:ca:d0:4c:
7a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:72:77:4A:1F:17:C5:07:F4:5F:FF:82:A7:1D:16:9B:6C:E3:2A:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/a4f4778c-5c5d-386d-8bb8-0d0b52371159.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
X509v3 Authority Key Identifier:
keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
sbgp-ipAddrBlock: critical
IPv4:
134.202.30.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:ab:b6:5f:b0:d9:2d:34:8c:75:4d:d1:06:ef:22:db:46:ba:
ae:99:7f:d3:23:78:61:e6:51:e8:50:2b:99:18:28:d1:7a:23:
27:a2:7a:38:a7:92:10:aa:4e:87:15:e1:09:e2:23:5e:b2:44:
22:99:20:f9:ec:4b:d7:9f:1c:a1:b6:9b:03:73:d0:4b:84:86:
ef:ce:dd:dd:30:2d:2a:87:9f:7f:fe:a4:de:14:37:5d:7b:85:
3b:1f:1d:b6:0a:b5:7b:1b:42:98:2d:54:a7:e4:04:60:98:8e:
34:0b:2d:79:e8:83:a2:7a:53:ce:56:87:ee:88:72:65:36:2e:
2e:ef:11:82:d4:2a:db:f1:13:3b:6f:d8:80:36:21:69:16:71:
7e:6f:ea:30:b1:bf:7a:42:f1:34:45:b5:08:22:f0:e0:ee:d1:
a9:bc:11:6f:4a:08:f5:86:28:1e:58:5d:c9:d5:8c:e8:2f:0a:
94:9c:a8:6d:1e:6e:37:4a:fe:4e:be:5c:30:99:84:28:a4:77:
55:d8:a8:27:ae:2c:b0:c5:43:99:a4:7a:2d:86:4b:dc:93:3e:
50:74:84:9a:73:fc:a2:54:79:d9:da:e3:bd:6c:dd:b1:c7:1d:
e2:46:24:27:9a:ea:e5:03:c6:f7:2d:8a:7a:f4:5b:10:22:b3:
db:38:f2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:30:44 2025 by rpki-client