Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/b97c2b78-25ff-3d05-b10d-49f3b260b7a0.roa
File: b97c2b78-25ff-3d05-b10d-49f3b260b7a0.roa (raw, json)
Hash identifier: dKhrVThumhwTe0+gh3KDoS/+ibrSJ3oTtqCZE64T1Zo=
Subject key identifier: 48:02:F6:86:73:BA:82:7B:C1:39:90:20:E8:66:D7:8C:3E:87:FC:CD
Certificate issuer: /CN=69f720b0-43fb-4ad6-91ba-aa11cf6b2362
Certificate serial: 010D0C9F43285848A13614156D0F85EAB7543C00
Authority key identifier: 4B:EA:44:54:40:B7:14:EB:83:E3:CF:CD:DB:25:22:D6:27:75:28:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/b97c2b78-25ff-3d05-b10d-49f3b260b7a0.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 10886
IP address blocks: 130.85.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:14:15:6d:0f:85:ea:b7:54:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f720b0-43fb-4ad6-91ba-aa11cf6b2362
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=6f61d459-120e-4e98-b376-b8ce2312d21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3f:de:0a:ba:e4:41:88:a9:84:c2:35:e2:72:
fb:27:31:a6:d3:69:0c:8d:2a:ad:d3:ad:0e:c5:f5:
58:7b:7d:d4:28:6d:82:1a:80:5f:cf:7e:aa:15:b2:
ba:55:fd:17:40:76:19:f2:d0:25:51:31:7d:38:3e:
ea:30:97:5c:40:dd:05:37:39:69:4b:4b:f2:ce:de:
15:b4:56:54:ff:9e:b5:2a:6b:c5:44:72:56:54:f9:
ec:b0:51:47:07:28:f9:34:17:56:46:79:d0:0d:64:
bf:00:45:77:35:28:25:b0:75:c2:7c:1e:f7:58:80:
90:76:65:6a:ba:93:87:04:76:00:05:4b:50:85:c2:
44:fb:44:5e:fb:ec:04:f4:b9:5f:d1:00:03:9e:19:
61:21:b2:75:e7:9d:1a:3a:c5:56:0f:2d:53:b5:e5:
06:67:f4:7d:c1:42:4d:27:2c:6c:c2:ab:85:f3:63:
5f:58:a5:22:6e:55:92:15:96:0f:2d:39:9b:f7:b9:
50:b5:39:62:2c:43:a8:70:01:dd:3d:91:c8:9b:ee:
9f:8f:1c:37:b4:22:5d:57:ef:54:20:15:45:e4:19:
0f:46:d3:d9:45:63:b7:4a:fd:31:21:31:34:9d:19:
27:86:73:5d:6c:cc:a2:5b:a1:67:2d:27:b3:e8:2d:
f4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:02:F6:86:73:BA:82:7B:C1:39:90:20:E8:66:D7:8C:3E:87:FC:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/b97c2b78-25ff-3d05-b10d-49f3b260b7a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.crl
X509v3 Authority Key Identifier:
keyid:4B:EA:44:54:40:B7:14:EB:83:E3:CF:CD:DB:25:22:D6:27:75:28:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer
sbgp-ipAddrBlock: critical
IPv4:
130.85.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:a0:b1:2b:d7:78:36:9d:9c:17:3b:88:e5:0f:60:01:0e:b7:
05:18:39:b4:7e:11:93:c0:0f:ec:59:7c:ca:8d:2c:93:43:eb:
af:b0:03:f5:6e:b4:39:26:73:36:40:7b:76:6b:42:13:2d:a4:
89:f6:d2:26:6e:67:a4:f0:d9:54:27:49:2b:91:2d:c3:b8:1d:
a5:99:fe:20:56:cb:1d:44:b0:d3:4b:58:32:c5:23:37:9b:41:
a1:7d:8c:49:50:df:bb:40:43:0a:4f:66:af:f1:98:27:c3:b1:
fd:4d:83:77:83:c1:2f:12:42:4a:05:93:a8:f8:be:5a:56:19:
44:5f:cb:fb:2a:bb:0f:f9:ca:6a:6c:6c:df:67:c4:c4:3a:5f:
f1:17:d4:ad:8c:55:34:b6:02:18:9d:bf:ba:21:07:a9:29:c1:
c4:da:a6:97:d3:1d:f4:e7:45:5c:fa:5f:00:c9:de:dd:f2:44:
cd:17:d3:5b:0e:e8:9d:c6:c5:d7:b3:4c:27:d6:84:bc:03:74:
ab:4b:ba:80:e2:c0:81:85:14:78:1d:96:a2:ee:f2:00:38:d8:
c9:a7:c3:8a:71:5c:8d:e4:f1:66:96:8c:68:9e:70:98:c0:6e:
b4:ed:9b:56:8a:d1:f3:56:8f:2c:38:aa:a3:ff:7a:18:06:0f:
7a:bb:be:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:55:55 2025 by rpki-client