Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/d202e1b9-425c-3591-be56-210e12fe5eb0.roa
File: d202e1b9-425c-3591-be56-210e12fe5eb0.roa (raw, json)
Hash identifier: UaZoBbOrw5ctT5lONwQdUzQZd+NQ0CVAJu968BykG4c=
Subject key identifier: DD:8E:9E:B0:9B:B5:E4:86:1E:FF:93:53:D9:5D:85:1F:1A:55:86:EA
Certificate issuer: /CN=6f379fb1-acf0-497e-800b-5b1eca6ab7a6
Certificate serial: 010D0C9F43285848AF2B7B1DB836196998D29580
Authority key identifier: E3:78:64:D0:0E:B0:5D:74:BD:47:AA:73:48:0B:50:40:27:54:12:D3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/d202e1b9-425c-3591-be56-210e12fe5eb0.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 26337
IP address blocks: 129.121.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:7b:1d:b8:36:19:69:98:d2:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f379fb1-acf0-497e-800b-5b1eca6ab7a6
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=6655a3b9-c788-4dfb-b032-7dec1ecb5175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:be:8b:bf:71:46:e8:17:d6:3f:84:8a:dd:93:
a8:20:94:50:3b:b2:49:45:71:b3:eb:ad:00:47:37:
95:8b:4f:f5:db:81:20:c5:f0:8b:e9:cb:c1:18:01:
9f:d4:bc:7b:29:0f:46:1a:b0:92:21:58:7e:a1:2c:
82:c2:a3:f2:33:65:e6:18:c7:08:ca:8f:6f:de:3c:
f9:2f:73:ff:36:8b:8b:c6:9e:23:3f:b4:37:c5:be:
50:c0:35:56:9c:c2:76:75:73:cf:88:f5:0d:e2:05:
7b:d9:9c:ed:0b:1b:fb:da:84:87:59:00:30:0f:eb:
44:e4:3b:41:ba:3a:c1:36:af:43:9f:51:65:39:b4:
39:cc:56:86:fa:89:85:51:84:04:ff:28:61:18:2a:
b3:cd:dc:cd:a0:43:73:56:f6:ac:89:90:0d:ff:56:
98:cc:c1:f3:f8:a3:23:9c:41:2b:3d:99:87:88:a5:
42:e0:73:d8:b4:29:7b:58:bf:e8:c4:80:28:27:42:
29:3f:57:2c:68:a5:d4:d5:a7:88:84:30:f2:19:f9:
7f:02:84:36:90:5c:32:f5:2a:9e:f8:cb:6f:19:a5:
26:5f:f5:5f:a7:b4:de:8b:34:2e:5f:fb:24:84:4c:
ae:b7:40:91:fc:9f:25:d7:16:87:9d:cc:eb:52:3a:
5d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8E:9E:B0:9B:B5:E4:86:1E:FF:93:53:D9:5D:85:1F:1A:55:86:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/d202e1b9-425c-3591-be56-210e12fe5eb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.crl
X509v3 Authority Key Identifier:
keyid:E3:78:64:D0:0E:B0:5D:74:BD:47:AA:73:48:0B:50:40:27:54:12:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.cer
sbgp-ipAddrBlock: critical
IPv4:
129.121.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:4b:64:5d:b0:ad:7a:af:0a:7d:45:21:9e:43:47:f5:dc:14:
71:50:4b:76:a1:49:e6:50:38:0e:b5:38:0d:3c:e2:ad:78:1f:
c9:ad:6f:c3:4d:2d:26:cc:6d:1c:d5:c3:62:79:e3:d1:e3:1f:
2b:cb:50:0a:60:cb:79:61:98:d1:86:7a:e4:7f:6c:ec:78:b9:
03:11:0e:d6:d6:2b:30:22:2b:82:14:c7:21:ba:54:db:c8:b9:
f1:1b:8a:54:c2:7f:7d:3b:6c:84:3f:49:24:3c:8a:5e:8c:fe:
1a:79:31:c3:d7:ca:39:34:0f:52:3d:04:de:0f:31:bb:e3:b9:
7a:ab:57:c4:35:70:08:5b:07:1b:39:e8:7d:06:7b:c7:07:13:
d0:d2:3b:08:a0:bc:12:08:12:f6:e9:56:a6:08:f8:8b:b9:62:
66:eb:bf:c3:63:49:84:04:10:cb:d5:07:57:c3:5f:b6:5b:3d:
b8:46:b1:47:09:7f:cc:e1:86:8e:34:03:09:33:5c:1b:e4:b2:
e6:de:ac:35:ed:9e:97:76:83:06:9d:fb:95:58:43:3a:1a:87:
c2:06:31:39:be:3a:a3:ce:c1:10:ce:38:5f:f1:55:d3:34:3c:
28:19:eb:2a:53:3d:e6:73:c5:2f:2c:64:18:73:27:04:e2:89:
30:73:fa:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:50:40 2025 by rpki-client