Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/c5492a25-61e2-3397-848b-141163ce58ef.roa
File: c5492a25-61e2-3397-848b-141163ce58ef.roa (raw, json)
Hash identifier: c+KYBHHgJ2DhFv9or8XkyL0yB9G+FiMmzN5tBIKV8cg=
Subject key identifier: 33:2B:D6:40:0E:D7:6B:83:50:50:17:51:E8:1F:65:B6:13:3D:76:1F
Certificate issuer: /CN=a07401de-4b0a-4532-ac08-dba8b0588c48
Certificate serial: 010D0C9F432858494B641CDEC1D80A655DC66B80
Authority key identifier: 2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/c5492a25-61e2-3397-848b-141163ce58ef.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 397511
IP address blocks: 128.211.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:1c:de:c1:d8:0a:65:5d:c6:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a07401de-4b0a-4532-ac08-dba8b0588c48
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=95cad59f-a4ef-4af8-b8fd-1e16d34aa6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0f:08:fd:8c:b7:12:11:10:bd:d3:ef:18:56:
0a:fd:4f:0e:a8:89:44:8a:b1:a6:b5:fe:27:2f:6b:
47:bb:83:a0:6d:81:c5:08:5a:18:83:db:22:5a:0a:
cf:5a:42:06:4e:78:94:33:66:b0:49:54:fd:13:2f:
87:af:b0:a0:11:89:62:3b:d3:2c:69:af:75:fd:a7:
d3:6a:80:ad:ea:e8:34:56:41:d2:fd:87:0e:90:f7:
8a:18:29:a5:c8:ec:73:ec:d2:07:67:0d:4f:6d:8a:
2f:5a:a1:7b:f5:63:3e:91:d8:1c:49:99:01:46:3f:
bd:18:6b:1a:b5:12:92:69:03:d8:a3:6d:ea:24:58:
28:ad:9c:68:3e:eb:6b:3d:2b:14:3f:34:af:68:33:
d4:07:11:19:3a:64:c6:e3:b9:08:1e:01:12:de:10:
c7:71:9b:91:ab:e1:69:9c:4b:4e:1d:c4:1e:ad:df:
13:c1:bd:96:c1:5b:2a:59:bf:84:98:7d:6b:91:50:
ce:0b:f7:3a:3d:b7:bc:cb:b0:4e:eb:ca:46:e8:21:
46:d3:c5:fc:26:73:03:e4:5f:25:db:c6:a5:a6:49:
ac:0f:29:4e:57:db:07:e2:b0:63:b2:50:12:14:f1:
9a:fc:ae:c6:35:06:aa:4a:3d:74:25:e8:8f:3c:46:
3d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2B:D6:40:0E:D7:6B:83:50:50:17:51:E8:1F:65:B6:13:3D:76:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/c5492a25-61e2-3397-848b-141163ce58ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.crl
X509v3 Authority Key Identifier:
keyid:2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer
sbgp-ipAddrBlock: critical
IPv4:
128.211.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:d4:05:72:d1:2d:f5:f8:2e:d3:9d:3f:d9:9f:4e:4f:a4:81:
ce:74:a0:00:57:1f:13:1c:85:20:fd:5d:06:fd:f8:41:5c:95:
5d:43:41:d9:88:63:2c:8f:02:1c:1a:db:11:1b:44:c9:99:69:
b8:2f:84:e2:5f:e8:ba:f7:38:1d:22:d5:aa:81:5a:87:78:ec:
51:fd:90:f8:ca:c1:4b:dd:48:d0:43:69:9c:58:02:36:ed:da:
68:70:28:76:1f:c7:0a:4a:a2:75:bc:79:77:a3:28:a8:b5:f5:
c1:fa:47:e8:81:c4:45:8d:4c:e4:4b:5c:5d:d5:51:00:4b:6d:
66:fa:d2:79:02:ed:8e:6a:45:4d:0d:42:b8:11:b3:ba:bc:72:
78:73:50:0d:b6:b1:55:a5:f4:81:0e:e0:b0:aa:fb:b7:ab:ea:
04:57:b8:00:63:10:b6:5d:30:8b:02:6f:48:90:81:2b:c6:1c:
95:e0:83:05:47:23:47:ab:93:dc:5d:ad:86:1e:86:ef:be:74:
6b:bc:76:e2:e0:97:59:8e:52:0b:f5:37:84:2e:3d:c3:ea:82:
55:77:d9:5d:af:f0:d0:98:a9:a7:17:de:01:2e:8d:ed:83:fc:
f2:6a:70:36:26:10:b4:16:ca:94:62:34:40:db:12:08:78:20:
fe:c6:fe:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:04 2025 by rpki-client