Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b/b5a50cd5-cd84-3688-aa95-558c12a7c337.roa
File: b5a50cd5-cd84-3688-aa95-558c12a7c337.roa (raw, json)
Hash identifier: MZaT1JOXTwN6DXIpODxNX4gxNqKvjhDhEV0zdEwciYM=
Subject key identifier: 02:CA:B0:73:0C:3A:FB:52:93:19:C7:65:B5:59:92:DE:78:B5:50:78
Certificate issuer: /CN=7d5cac87-cf05-44e8-9103-c269cf67c04b
Certificate serial: 010D0C9F43285848F3911931CEBF3FEC58F6C780
Authority key identifier: 4E:95:DA:3C:A9:E8:B1:80:D7:E5:FD:92:9E:40:7E:64:CE:10:FE:AD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b/b5a50cd5-cd84-3688-aa95-558c12a7c337.roa
Signing time: Fri 21 Feb 2025 02:00:39 +0000
ROA not before: Fri 21 Feb 2025 02:00:39 +0000
ROA not after: Thu 22 May 2025 01:00:39 +0000
asID: 22594
IP address blocks: 134.161.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f3:91:19:31:ce:bf:3f:ec:58:f6:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d5cac87-cf05-44e8-9103-c269cf67c04b
Validity
Not Before: Feb 21 02:00:39 2025 GMT
Not After : May 22 01:00:39 2025 GMT
Subject: CN=caf50722-13d9-436a-87c0-4d3e33165633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d7:39:89:22:d4:77:08:21:11:b8:d1:09:3f:
5b:f2:08:b8:af:26:19:70:ab:ef:33:f4:f6:c6:fd:
ba:71:ce:5f:c7:a7:e1:f6:56:7e:bb:e3:cc:b3:2f:
2b:e0:c7:10:b7:92:d3:57:8b:b2:3c:35:fd:74:09:
0c:68:0e:f6:4e:43:0e:94:13:f1:e0:ad:9f:32:7c:
a5:a1:f0:96:77:1d:a8:05:3a:1f:29:94:e7:2e:3f:
dd:76:a6:ea:4b:4c:c8:a1:9c:c8:51:48:a6:3a:0d:
b0:83:33:8d:63:8a:c8:7e:da:23:59:03:4a:dc:9e:
47:be:44:97:ca:7b:43:c3:28:24:61:cd:d5:c5:43:
07:df:4b:d1:24:5b:18:cf:b3:73:19:29:4b:6f:20:
91:e4:41:c3:a2:af:1d:d9:78:c2:be:3b:f2:11:5a:
dd:c5:1a:28:5e:65:00:88:b3:57:9e:06:fb:dd:9b:
4e:ac:94:73:23:bc:3a:c1:89:44:06:6d:1f:1c:17:
e1:2e:4f:8a:70:a5:81:f6:df:ea:3d:e6:15:a7:3a:
fe:4c:30:2c:67:30:bb:26:c9:70:ad:ef:c2:41:43:
58:0b:d9:44:18:46:67:8b:9b:a0:2b:86:43:34:fc:
71:a9:1b:d5:66:d3:27:4f:6a:51:b1:86:50:3b:c6:
1e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CA:B0:73:0C:3A:FB:52:93:19:C7:65:B5:59:92:DE:78:B5:50:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b/b5a50cd5-cd84-3688-aa95-558c12a7c337.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b/7d5cac87-cf05-44e8-9103-c269cf67c04b.crl
X509v3 Authority Key Identifier:
keyid:4E:95:DA:3C:A9:E8:B1:80:D7:E5:FD:92:9E:40:7E:64:CE:10:FE:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7d5cac87-cf05-44e8-9103-c269cf67c04b.cer
sbgp-ipAddrBlock: critical
IPv4:
134.161.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:aa:94:c9:cf:8f:0a:eb:84:f7:ba:04:8c:39:fa:33:3a:b5:
57:f9:0c:6e:54:8f:c0:79:49:a8:91:5e:c2:1b:32:d0:77:d1:
40:6a:37:90:79:fe:ec:90:6b:9a:39:89:82:2c:05:f3:e6:67:
0d:76:43:21:c2:7c:69:5f:c7:a8:5c:5f:89:9a:c5:da:db:a0:
29:61:7c:68:ca:92:33:d2:e9:27:51:02:27:fb:d0:44:aa:8a:
e8:d5:32:20:c4:f1:d3:ef:4a:d3:44:bc:60:d9:d1:bc:1a:96:
42:73:3e:0c:db:66:7c:fe:3c:45:bf:29:33:cb:b5:a7:be:3b:
c3:b1:42:7c:d3:94:9b:5e:60:68:5e:0e:80:82:dc:cb:de:77:
e3:23:e4:a9:1a:4f:f9:a6:22:e6:b4:27:1e:02:e1:8d:ae:c7:
b3:61:cc:be:b3:79:7c:c9:0f:2e:a6:7d:ad:86:37:bf:34:e4:
e7:00:0a:fe:32:e1:d5:de:4d:4a:e9:20:0f:6f:bf:9a:46:be:
4c:9e:46:ba:f7:b4:17:67:a1:93:ef:e2:65:0e:74:3f:54:42:
a4:65:a7:ff:2d:3d:d1:c8:dd:cf:fc:08:14:8d:cb:b3:e8:47:
d6:9c:da:31:6e:6d:12:97:e3:f6:57:95:d3:0e:d9:c0:06:17:
3c:ad:9c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:20:38 2025 by rpki-client