Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16ef2847-f477-40df-9a9e-50bd5864acb7/c1fd1ff1-1cd9-3f6e-8bf2-aadb0d5516c3.roa
File: c1fd1ff1-1cd9-3f6e-8bf2-aadb0d5516c3.roa (raw, json)
Hash identifier: mQOmWOvVV7vsfTQgmWEQ7Qnqy742UMD/6sLwki5LVx0=
Subject key identifier: 29:B8:61:E4:F4:82:89:0D:A9:F8:8C:15:D0:F2:3C:22:5F:2B:A1:2A
Certificate issuer: /CN=16ef2847-f477-40df-9a9e-50bd5864acb7
Certificate serial: 010D0C9F43285848854B4EC0820AB0697C1D2100
Authority key identifier: 7E:83:15:D8:9C:3F:F4:DE:0F:35:34:4F:AF:E7:29:43:2B:31:30:36
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16ef2847-f477-40df-9a9e-50bd5864acb7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16ef2847-f477-40df-9a9e-50bd5864acb7/c1fd1ff1-1cd9-3f6e-8bf2-aadb0d5516c3.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 399034
IP address blocks: 134.195.169.0/24 maxlen: 24
172.98.30.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:4e:c0:82:0a:b0:69:7c:1d:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16ef2847-f477-40df-9a9e-50bd5864acb7
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=c587f580-385e-4c89-b158-f39ef64d2ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5c:72:5a:56:54:17:5b:b1:e1:dd:d4:b0:7f:
17:a2:21:f5:70:1b:a8:9b:66:8b:fa:b2:36:36:3b:
8b:e5:fb:58:12:37:35:c4:7a:bf:17:0b:6d:19:ce:
d5:44:db:9b:93:43:e6:20:26:f7:95:df:b0:63:67:
9a:82:d8:5e:b9:5a:da:be:6c:3d:64:12:c0:7b:2b:
65:08:8b:98:2f:3b:94:45:17:2a:6f:26:0c:dc:a2:
8a:00:ec:b8:1e:69:2e:4e:37:c6:f6:fc:e2:5b:41:
93:21:48:71:9e:ef:a6:3a:09:c3:39:54:d5:45:93:
25:75:2f:a7:4d:9f:d1:83:36:08:6b:ad:c0:69:a1:
36:d7:5a:3c:00:74:c8:c6:cf:a2:fc:98:37:6a:e2:
30:d2:9a:eb:bc:8e:f8:44:52:58:a7:2a:1f:ee:dd:
13:2d:c8:a7:1e:56:2c:93:c3:d7:c8:c6:f4:aa:1c:
27:7d:70:80:8e:4b:73:af:dd:2d:84:a7:f9:c2:c7:
0e:11:06:69:0f:78:ea:ba:fd:2a:37:92:c0:9e:5e:
6c:cc:43:96:44:c0:bf:7f:fb:98:17:29:79:9f:39:
de:7b:00:ad:f7:52:96:e4:91:10:73:ca:ca:6b:d0:
cd:54:47:a3:a6:5a:37:96:19:20:8d:7f:51:df:38:
f2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B8:61:E4:F4:82:89:0D:A9:F8:8C:15:D0:F2:3C:22:5F:2B:A1:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16ef2847-f477-40df-9a9e-50bd5864acb7/c1fd1ff1-1cd9-3f6e-8bf2-aadb0d5516c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16ef2847-f477-40df-9a9e-50bd5864acb7/16ef2847-f477-40df-9a9e-50bd5864acb7.crl
X509v3 Authority Key Identifier:
keyid:7E:83:15:D8:9C:3F:F4:DE:0F:35:34:4F:AF:E7:29:43:2B:31:30:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16ef2847-f477-40df-9a9e-50bd5864acb7.cer
sbgp-ipAddrBlock: critical
IPv4:
134.195.169.0/24
172.98.30.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:0e:f6:9c:3a:f0:41:9c:59:a4:f9:29:1e:97:3e:03:3d:6e:
d8:b7:fe:1c:2c:47:17:22:87:be:ac:a9:77:e3:9b:e4:03:22:
f2:3b:82:93:b1:75:5e:3a:95:58:c2:d2:1c:f7:78:93:b5:55:
1e:75:2f:02:42:39:84:94:5a:ae:d4:03:0b:7b:ad:0b:2d:42:
4c:50:86:68:8c:07:f1:08:d7:e0:25:c6:48:00:34:6c:19:33:
bb:17:8e:02:7f:77:88:4e:e2:8b:0b:d7:e5:9b:6c:ad:80:67:
86:54:6c:d0:f5:78:b2:5f:4e:ad:af:32:9d:a2:9a:b4:4e:3f:
61:93:68:1a:6a:f9:fc:12:20:84:22:20:17:a3:aa:7b:6b:64:
79:83:d7:82:e6:a0:a4:8e:c6:53:da:f7:d4:11:9d:68:81:bd:
de:08:d6:e1:27:ca:c8:09:4f:3b:b6:82:48:65:2e:50:2c:47:
d0:bd:b4:b8:a6:f7:1c:fb:ad:94:51:b7:e6:00:b2:51:4a:f5:
60:a6:4d:fd:e9:64:25:c3:dc:b8:15:47:06:11:08:f0:2d:fc:
44:03:12:50:3d:58:82:a2:70:97:83:81:eb:09:b5:54:52:56:
54:97:7b:3f:d0:7f:e2:83:15:0d:dc:0d:5b:9f:2d:e9:2c:bb:
18:59:e1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:45:14 2025 by rpki-client