Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4aa84822-23ef-3686-a338-9bb44ad3ee5d.roa
File: 4aa84822-23ef-3686-a338-9bb44ad3ee5d.roa (raw, json)
Hash identifier: R8bhfbBfpzJ78nKq3vrNI1h+9lnkJewkIqYAjjn/4FE=
Subject key identifier: EF:FB:06:43:77:60:65:DE:B6:82:F0:9C:E3:A7:E7:B6:72:51:A0:06
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848BFEBA962E9632E429C7C3B80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4aa84822-23ef-3686-a338-9bb44ad3ee5d.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 396982
IP address blocks: 130.211.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:a9:62:e9:63:2e:42:9c:7c:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=1f8fd84b-7dea-45ee-beba-70dd47168cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0c:8d:57:6b:bb:23:da:66:80:b7:bc:e7:be:
50:fe:15:d2:e3:7d:d3:9c:6d:62:7e:e9:65:ca:1f:
e3:6b:05:8a:c4:a4:e9:ce:32:d5:15:6c:ab:cd:75:
57:6c:6f:31:8e:54:30:5e:0c:ea:cc:69:76:cb:33:
0b:fa:56:3d:68:91:6a:f7:33:13:7a:90:20:93:30:
e2:81:8e:e4:8a:63:cb:ad:82:c1:83:9f:d8:ef:58:
fe:a7:ef:b0:50:ab:f9:52:02:14:c7:43:01:53:6d:
a1:04:d1:4c:32:25:3a:88:86:ed:f2:49:00:68:cd:
ed:7c:98:23:b0:53:6c:63:2a:1d:bf:9a:b4:4a:9b:
eb:45:77:3f:9f:01:8d:f5:cf:00:e8:96:b0:4b:eb:
32:20:36:79:15:51:57:2e:00:68:84:f9:b4:38:01:
4a:b3:28:22:c9:ba:33:5e:cb:e1:4d:f5:13:b6:b9:
8f:73:f4:d1:a2:6e:c6:d8:1e:e3:a8:7f:fd:fa:a6:
db:6e:79:72:f8:0c:0a:fb:52:1b:a5:5f:8f:de:da:
4b:22:78:e4:82:66:ba:53:51:ea:60:19:2a:ec:69:
5a:8a:67:f0:4b:95:85:ba:d9:4e:88:f4:02:b7:15:
62:24:30:84:41:59:f6:f6:e3:b9:01:64:12:06:f3:
96:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FB:06:43:77:60:65:DE:B6:82:F0:9C:E3:A7:E7:B6:72:51:A0:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4aa84822-23ef-3686-a338-9bb44ad3ee5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
130.211.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:f5:56:69:6d:3e:8c:82:d6:f1:6b:df:5c:31:16:04:ce:bc:
3c:df:3f:a5:41:d4:bf:5f:8c:fb:53:5a:3b:9d:7b:a3:b2:ec:
b4:13:b5:f5:67:72:ae:ef:26:b9:b1:06:32:2f:0e:11:e3:4b:
e8:ec:68:6d:17:75:f2:de:a8:5e:8b:fa:33:46:6d:d5:1c:37:
65:e0:14:0b:88:02:fe:01:16:07:3b:c6:1c:a8:22:dd:1d:be:
6b:9d:3b:4a:af:15:c0:ec:f7:d9:da:4d:80:fe:b6:25:dd:84:
e9:1f:1e:51:9c:9c:90:43:6f:32:73:5f:2d:7b:d1:86:33:5a:
96:5e:2d:8f:4a:27:cd:57:6e:b3:fd:b4:fb:77:bc:05:bc:5a:
6a:31:c5:94:76:10:ff:84:b2:4b:d7:16:29:a9:e5:b2:31:7c:
de:8a:5f:c9:2e:a7:da:3d:26:e0:02:34:63:35:d1:19:48:d5:
af:4c:56:88:1f:d5:1b:34:03:d8:2e:42:60:4a:73:6f:59:85:
b4:19:e3:54:31:c9:1f:a6:d4:ab:ac:93:d8:84:18:da:54:8e:
49:d7:db:13:f6:a3:9b:8e:5e:5f:59:dd:d7:2d:ea:8d:77:17:
63:8d:11:4f:5d:35:e7:b2:83:2b:70:a4:7c:ac:13:69:fd:88:
df:e5:33:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:47:51 2025 by rpki-client