Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/cfefe9d4-5ad9-3f2c-8692-f8bfdfd07c77.roa
File: cfefe9d4-5ad9-3f2c-8692-f8bfdfd07c77.roa (raw, json)
Hash identifier: Y+VPOLuVl1e3usFKuZKTZu31rnXKSFncXTBQIHMpCcU=
Subject key identifier: 1B:FB:22:EA:7A:7F:96:6C:AA:8D:89:E8:DA:DF:05:14:5C:61:0E:21
Certificate issuer: /CN=adf336cd-e30b-4fd4-a132-8eede3026803
Certificate serial: 010D0C9F432858489BA0B20E4A7D4AA28EA6B580
Authority key identifier: 43:13:C7:FA:51:66:91:DB:FC:9F:FB:6F:E5:C7:17:10:21:4A:56:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/cfefe9d4-5ad9-3f2c-8692-f8bfdfd07c77.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 46
IP address blocks: 128.6.0.0/16 maxlen: 24
130.219.0.0/16 maxlen: 24
165.230.0.0/16 maxlen: 24
192.12.88.0/24 maxlen: 24
198.151.130.0/24 maxlen: 24
2620:0:d60::/46 maxlen: 46
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:b2:0e:4a:7d:4a:a2:8e:a6:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf336cd-e30b-4fd4-a132-8eede3026803
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=d587afa3-00f5-4a23-86e0-593c05c44142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e0:9a:e9:cb:86:39:d7:32:65:b0:c5:e6:4c:
50:ec:bb:ba:f7:b5:5e:93:c7:81:87:30:12:15:4e:
80:df:73:bd:d1:63:fb:94:24:d4:c8:b8:75:78:be:
8d:73:2e:12:ce:68:3b:ca:a6:74:0a:34:8a:ce:79:
6c:f3:f3:fd:37:62:99:97:22:0d:6f:0d:68:29:70:
a2:fb:75:2f:8b:1d:88:bd:79:c5:92:ee:a8:4a:1b:
3c:a0:42:31:a9:f5:f5:11:35:c1:5a:da:db:3b:4b:
c9:6b:9d:51:d7:4f:50:04:a4:7a:51:f6:cc:8c:c3:
b3:e7:c8:84:1c:82:d9:11:04:75:5f:79:44:33:3e:
35:73:aa:b7:43:f9:2a:fa:f5:b5:83:98:da:a8:b8:
b2:92:cd:c7:f5:5c:95:6d:74:3b:b9:2a:a5:3e:8c:
d9:3a:e0:18:0a:18:f9:9a:f6:3e:76:bd:24:87:11:
fd:80:28:3d:87:3d:c6:f1:69:98:a9:c6:fe:13:7d:
b6:fe:36:83:29:07:4a:fb:1b:47:a2:42:3d:e9:ce:
fb:11:cd:cf:87:8f:be:f5:36:0e:48:2b:8b:90:f2:
3b:1d:a6:1c:a3:df:25:0e:45:c0:71:d9:46:30:de:
95:d5:d9:44:2f:6b:b0:bb:4c:fa:d6:a3:6f:62:d8:
7b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FB:22:EA:7A:7F:96:6C:AA:8D:89:E8:DA:DF:05:14:5C:61:0E:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/cfefe9d4-5ad9-3f2c-8692-f8bfdfd07c77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/adf336cd-e30b-4fd4-a132-8eede3026803.crl
X509v3 Authority Key Identifier:
keyid:43:13:C7:FA:51:66:91:DB:FC:9F:FB:6F:E5:C7:17:10:21:4A:56:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803.cer
sbgp-ipAddrBlock: critical
IPv4:
128.6.0.0/16
130.219.0.0/16
165.230.0.0/16
192.12.88.0/24
198.151.130.0/24
IPv6:
2620:0:d60::/46
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:8b:a5:f5:d9:74:43:17:2f:48:7e:49:84:33:2b:10:c8:f6:
9a:f3:8a:7e:82:87:33:dd:79:74:ac:c3:55:12:6c:d8:1e:d1:
73:1c:41:4e:1f:32:43:3c:43:30:05:30:a0:2b:ed:66:f0:5d:
aa:96:d6:e0:b1:29:a5:b6:ef:62:37:01:b4:cb:2a:5a:b0:42:
db:b8:36:4d:36:d5:1b:11:81:80:83:e4:de:43:96:2b:e2:a9:
a3:2f:53:4c:61:88:a9:28:7d:35:44:7f:24:60:c8:cf:96:32:
8c:7d:91:91:01:71:52:a4:a2:be:0f:b2:be:8c:83:22:a5:b9:
b2:77:8a:9c:d7:19:74:28:8d:da:85:61:cf:d4:7b:91:8e:62:
c4:88:d5:29:5e:a6:37:e4:c8:88:e3:09:2f:cb:dc:ed:04:f6:
32:fd:37:f1:f7:ea:e6:5d:28:26:d5:e6:e7:5e:be:19:49:d0:
7d:23:ee:5a:7d:f1:44:b4:d9:19:5a:5d:d6:e9:b7:f1:d6:08:
60:73:5c:66:c7:4b:57:8f:2f:0d:56:9e:98:a0:2e:e1:67:54:
c4:c3:cf:46:f4:c3:34:c8:14:e9:d0:7d:db:0e:65:2e:9d:99:
fc:ca:4d:f5:f5:5f:df:bf:99:5f:89:4d:38:45:0f:47:33:a5:
df:6b:18:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:13:57 2025 by rpki-client