Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/f539cfd1-9503-31e0-a383-2dbe3bacd80e.roa
File: f539cfd1-9503-31e0-a383-2dbe3bacd80e.roa (raw, json)
Hash identifier: 3+Ha+/nSVnumDYSmkHuElkYd7Lnu32ca1fYw6Iqlsuc=
Subject key identifier: 91:81:8B:4C:45:D7:D3:32:B9:F4:DF:EC:B1:A0:51:20:EC:D6:D9:2D
Certificate issuer: /CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
Certificate serial: 010D0C9F432858488DAB43B7BBACBE1DCC09CBE0
Authority key identifier: FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/f539cfd1-9503-31e0-a383-2dbe3bacd80e.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 53768
IP address blocks: 162.134.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:43:b7:bb:ac:be:1d:cc:09:cb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=a9e64248-a427-4787-a574-f43cf0bd6f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7f:8e:db:c8:31:fe:64:04:73:52:1c:40:c6:
3a:fd:c9:f2:68:db:ef:ae:7d:49:d3:96:5e:3f:77:
02:af:da:d6:45:64:e4:c2:c7:7b:77:8d:84:e9:f0:
5a:0b:5f:62:35:65:e6:ef:de:c3:32:b9:c7:70:33:
80:9e:0e:f3:3b:8d:0b:b2:dc:93:9d:4f:8b:80:56:
48:6e:7f:df:65:8a:69:50:a1:07:4c:ae:52:29:40:
3c:3f:a8:33:d2:93:eb:d7:be:63:bc:e8:d5:70:af:
6e:6c:c8:ae:0c:eb:2a:dc:bc:4b:b0:85:18:d5:21:
45:dc:25:7e:e5:cf:5b:92:e1:80:6f:3a:23:71:23:
45:1a:21:03:aa:f0:fb:d8:c4:7f:24:91:73:41:28:
8b:1c:58:bc:51:94:66:8c:28:8c:f4:d9:b0:27:ba:
49:a1:0e:2c:f3:59:e3:c2:64:f5:2e:60:03:d9:de:
58:f6:76:e6:87:50:06:53:58:fa:62:6f:56:c8:b7:
de:be:57:8e:c5:62:78:6f:96:7b:8c:fc:b3:b1:f1:
32:6e:bd:b2:e4:37:03:b3:90:52:66:a5:da:9e:59:
d1:35:ee:05:66:41:be:a0:b5:9e:df:79:a2:38:44:
a2:6e:33:3a:22:6b:47:2b:e7:2d:75:14:9f:06:b2:
3d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:81:8B:4C:45:D7:D3:32:B9:F4:DF:EC:B1:A0:51:20:EC:D6:D9:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/f539cfd1-9503-31e0-a383-2dbe3bacd80e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl
X509v3 Authority Key Identifier:
keyid:FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer
sbgp-ipAddrBlock: critical
IPv4:
162.134.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:98:75:0c:9a:6d:7e:26:dc:d7:eb:d7:97:e9:83:58:4c:1a:
18:33:50:c8:04:9d:63:9b:8f:e3:0e:dc:04:9d:3a:64:c1:05:
8e:b8:a4:38:cf:a1:a7:f5:48:86:9e:90:78:00:2c:c8:0b:af:
6b:77:5e:a9:9e:f9:b8:44:53:cc:1c:be:fa:87:60:7e:65:bb:
24:1f:d7:d3:71:31:cc:a9:67:05:36:39:28:bf:dc:58:cb:24:
27:0a:95:48:f1:91:b3:ad:03:b0:21:62:01:1a:ba:f8:e2:c9:
9e:ce:c1:a3:d5:b5:61:e3:89:c0:4d:00:09:3d:3d:f8:ed:9a:
20:c0:e1:f2:2e:36:8f:ff:ee:54:f8:b9:6f:1a:3b:8a:ee:c3:
cf:10:38:36:7d:6e:8d:58:1e:4f:14:db:2f:ce:62:a3:ec:ee:
fd:36:ac:99:35:43:8b:5d:75:e5:0f:52:b2:7e:d5:7c:63:fe:
d0:d6:76:02:73:f2:50:40:81:72:26:93:97:ab:c6:e4:9e:00:
1a:08:59:73:97:37:e1:a5:bf:66:ad:24:a2:a7:15:72:db:99:
e5:42:f3:cb:7f:6c:89:fb:81:48:e7:af:1f:80:ec:03:23:62:
18:b9:75:14:ba:e3:a3:8d:f8:19:64:a1:34:f1:05:d9:5a:23:
88:50:5a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:38:46 2025 by rpki-client