Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/4e647253-2a17-3eb3-b24c-d2c2e3a60867.roa
File: 4e647253-2a17-3eb3-b24c-d2c2e3a60867.roa (raw, json)
Hash identifier: r3nCwc6KO6ZexJHCChipepf1vAhzkgPtgwzIzkVV3t8=
Subject key identifier: AC:F8:31:0E:87:28:EA:0C:0B:7E:7B:4D:D0:44:63:7E:CC:FC:03:EE
Certificate issuer: /CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059
Certificate serial: 010D0C9F432858487A2ECA858F0B1B15ACF8F0B0
Authority key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/4e647253-2a17-3eb3-b24c-d2c2e3a60867.roa
Signing time: Wed 08 Jan 2025 14:29:47 +0000
ROA not before: Wed 08 Jan 2025 14:29:47 +0000
ROA not after: Tue 08 Apr 2025 13:29:47 +0000
asID: 40788
IP address blocks: 142.90.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:2e:ca:85:8f:0b:1b:15:ac:f8:f0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059
Validity
Not Before: Jan 8 14:29:47 2025 GMT
Not After : Apr 8 13:29:47 2025 GMT
Subject: CN=81e015a0-6116-4588-9a1f-04c133bb9b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b2:93:fe:59:4f:6b:0a:23:8e:7b:66:ad:46:
c4:a4:ac:0a:7c:61:93:ac:11:07:e5:6c:3e:8e:7b:
db:2f:fb:e7:ed:fa:93:a8:11:78:88:f9:30:28:04:
60:ce:c8:2e:bd:6c:09:b1:8a:5b:e1:60:c7:63:10:
d8:6d:06:7e:ed:2a:66:5f:21:de:ef:43:59:b5:f6:
4d:cd:c8:9b:2e:bc:08:d2:73:88:49:ec:bb:7a:67:
5f:54:af:59:08:ca:06:db:a5:64:1d:be:a2:84:f6:
3d:64:77:19:1e:9e:c7:75:ee:1e:6b:34:a8:23:83:
90:3f:ea:c1:29:67:5f:80:5f:83:fb:e1:3c:62:14:
89:d7:5f:18:60:ad:b6:98:63:e3:a5:fd:d5:7a:3b:
82:51:59:ad:e5:4c:00:fe:fb:b4:e5:52:9e:2a:6c:
2d:d3:21:85:28:7d:ae:e9:39:85:ad:fa:a6:4b:de:
c4:e5:6c:c1:5b:29:1f:cf:87:32:30:09:4a:e7:04:
05:3d:4c:67:aa:13:aa:74:72:32:1a:a0:58:d5:e8:
52:8a:8d:70:2d:fc:22:e5:4c:c3:46:01:ac:47:d5:
51:07:c3:95:9c:70:20:3a:fe:d8:14:93:a8:97:9e:
e2:fc:15:87:d2:fc:38:5a:3d:c3:f4:f9:18:79:18:
be:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F8:31:0E:87:28:EA:0C:0B:7E:7B:4D:D0:44:63:7E:CC:FC:03:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/4e647253-2a17-3eb3-b24c-d2c2e3a60867.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl
X509v3 Authority Key Identifier:
keyid:B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer
sbgp-ipAddrBlock: critical
IPv4:
142.90.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:3b:c2:6f:61:54:e0:4a:ab:3c:86:a7:60:85:74:50:67:46:
04:74:b4:1a:1d:bc:3e:c7:b1:a0:90:4e:9d:aa:99:88:0e:6d:
08:3f:26:26:e8:bf:58:c0:dc:01:bb:46:f2:6a:10:c5:2c:d3:
14:08:b0:74:7f:77:f2:56:f5:3d:6d:b6:1e:84:d2:42:f1:83:
81:ce:46:11:ce:99:6c:9a:6c:1f:95:8f:94:d5:a6:77:99:cd:
1f:8b:7d:50:c5:4f:02:01:0a:72:10:f3:2c:dc:02:fe:ec:89:
b8:73:e6:fd:8c:e4:d4:0f:7d:02:53:41:e6:49:92:b1:12:f4:
d8:49:6b:1a:41:6b:80:c0:89:ea:3e:9e:f2:ab:8f:8b:12:68:
30:56:c0:e6:f6:73:17:16:d5:37:82:b4:bf:00:09:1e:5a:fd:
6f:ef:21:7f:7b:1c:d6:4c:38:78:34:c3:d6:1f:78:12:d7:7a:
b1:0f:fb:d6:6d:a9:47:fc:b4:cd:c6:d6:36:c5:0a:63:3c:33:
8a:83:0d:6c:e4:32:05:ef:47:37:99:ec:89:c9:8b:69:f3:90:
e9:55:4b:4f:22:1a:09:a3:39:82:56:94:28:eb:be:14:86:48:
b6:89:95:38:65:32:83:97:e9:07:b3:96:ed:35:55:ac:a4:f1:
68:94:9e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:19:16 2025 by rpki-client