Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/8d9eaa3c-4cf4-367d-971b-177e4bf750e5.roa
File: 8d9eaa3c-4cf4-367d-971b-177e4bf750e5.roa (raw, json)
Hash identifier: Hyi8V8xBXGIWyWiiby6P0UqTVgYBYw7WGU7YVXqbwBI=
Subject key identifier: 7D:CC:3C:FC:0D:04:C1:72:A5:7D:65:AD:28:72:8F:68:D2:71:2B:AB
Certificate issuer: /CN=db131796-a27d-48da-80e5-76b8e7c0cbd3
Certificate serial: 010D0C9F43285848A830AC5537B0FA90B0277C80
Authority key identifier: B9:ED:CA:DE:A9:07:52:89:55:F6:AB:E0:15:88:9E:F7:73:11:F6:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/8d9eaa3c-4cf4-367d-971b-177e4bf750e5.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 14041
IP address blocks: 129.72.0.0/16 maxlen: 24
192.65.143.0/24 maxlen: 24
192.84.113.0/24 maxlen: 24
192.160.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:ac:55:37:b0:fa:90:b0:27:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db131796-a27d-48da-80e5-76b8e7c0cbd3
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=1da855e2-86a8-494d-a5e7-d7c23592f72d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3e:56:37:5e:75:52:7f:00:a8:33:3f:9a:89:
2e:11:4c:6c:51:d1:22:82:83:d6:38:90:6d:a8:86:
f2:e5:f2:e9:2d:e6:ee:cc:e6:1e:54:11:7b:a3:43:
5f:99:8f:74:d4:32:32:2f:47:90:85:d2:c7:ef:c3:
78:e5:e9:ab:31:35:d6:16:18:4e:a7:67:a0:7b:04:
9c:b0:25:b1:0a:71:56:e9:21:e1:ce:ed:e5:c1:74:
3d:8e:c0:0d:d1:e2:6f:c8:00:3d:d7:a8:9e:a4:42:
cd:9d:cb:c0:8f:f5:81:35:0d:4f:d7:53:77:2a:43:
83:2d:df:22:26:28:03:8a:af:86:d6:6e:49:2f:ca:
c8:39:a1:5e:5b:fa:27:33:69:ed:9e:32:04:22:83:
31:71:87:85:8c:d8:8c:d2:82:f5:42:61:ac:a4:56:
b5:e2:70:af:34:4b:ef:ef:03:94:07:2b:8f:18:17:
78:c4:16:93:a4:59:b6:19:63:ee:fd:46:dd:c3:f9:
ab:74:2b:4a:58:bb:1c:fa:ad:b9:68:a3:3b:c2:a1:
4b:54:e7:f3:5a:96:95:93:9c:f2:9f:85:c2:a6:bb:
88:6a:7d:62:81:a8:82:a5:4e:12:c8:4a:f0:e8:f1:
e0:65:e6:8b:fe:99:a8:3e:68:3d:65:44:c5:5e:3a:
4e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CC:3C:FC:0D:04:C1:72:A5:7D:65:AD:28:72:8F:68:D2:71:2B:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/8d9eaa3c-4cf4-367d-971b-177e4bf750e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/db131796-a27d-48da-80e5-76b8e7c0cbd3.crl
X509v3 Authority Key Identifier:
keyid:B9:ED:CA:DE:A9:07:52:89:55:F6:AB:E0:15:88:9E:F7:73:11:F6:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3.cer
sbgp-ipAddrBlock: critical
IPv4:
129.72.0.0/16
192.65.143.0/24
192.84.113.0/24
192.160.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:89:fd:94:38:db:38:4f:2c:cb:69:c6:68:a3:88:90:05:b3:
80:d3:6e:92:c1:e3:6f:9e:af:30:08:5d:24:68:9b:86:d2:71:
8d:ae:10:84:5f:06:11:8d:e7:96:21:1f:46:79:20:bc:98:ba:
2c:e1:c6:8f:d2:47:71:2f:a6:4e:23:60:98:89:fd:67:02:0e:
b7:2e:0e:2b:e8:dd:b8:49:ce:a5:32:80:72:68:e7:3b:0d:4b:
81:a2:aa:85:0f:24:6a:ad:ef:b4:5a:b4:ba:45:7f:09:e5:27:
e2:ba:dd:8f:4e:6d:68:dc:9a:23:f4:78:82:4d:2c:48:c7:77:
8b:f7:8d:22:20:bb:e0:aa:4b:58:9c:de:c8:c4:7c:a1:49:41:
93:f8:09:ad:42:f5:b1:67:28:1d:df:a2:96:fe:48:4e:26:2f:
a3:1c:ac:17:d8:46:4c:09:39:63:71:cf:6e:18:e6:4f:68:a5:
f9:11:46:d0:d6:ec:4b:e4:ea:96:d9:d1:c2:f6:26:78:eb:5c:
9b:18:3e:87:53:aa:a1:d1:c5:75:f6:9e:78:b2:45:71:e5:ab:
d5:1e:65:ca:98:9d:e7:6b:72:df:28:18:67:75:45:b2:69:3e:
0e:ee:01:9b:3b:1f:67:8e:4a:b2:3c:32:ca:21:fa:36:70:01:
f2:b3:82:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:05:54 2025 by rpki-client