Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/cac12f27-e3af-3803-a69c-e1db5cbc4dc6.roa
File: cac12f27-e3af-3803-a69c-e1db5cbc4dc6.roa (raw, json)
Hash identifier: 9WQxMqdAVqjn2GVK/6rZ+OoS2bmj5VptonBoBqq1Zts=
Subject key identifier: 48:CC:30:0C:B2:94:F5:95:DA:E2:DA:DB:41:A6:4D:D8:6F:AF:81:A2
Certificate issuer: /CN=319d5f20-2367-457b-970b-7f1c1a60fcae
Certificate serial: 010D0C9F43285848EC969230DF35529B8D2813C0
Authority key identifier: 9C:51:2B:15:7A:87:63:E4:EE:5C:4E:E6:F3:26:B7:38:67:1C:E2:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/cac12f27-e3af-3803-a69c-e1db5cbc4dc6.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 14630
IP address blocks: 142.148.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:92:30:df:35:52:9b:8d:28:13:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=319d5f20-2367-457b-970b-7f1c1a60fcae
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=0ae680c1-094c-41fb-8d31-95e8a73c49bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f0:a0:6d:82:e4:a0:df:65:49:6c:be:c7:8a:
50:42:17:75:c6:61:59:62:52:64:61:f0:78:c4:20:
80:70:7e:e2:44:49:77:e2:b9:1d:79:b2:a6:8c:62:
eb:97:56:e9:c6:f2:ce:16:be:76:80:e7:91:03:cf:
25:80:4c:b7:5f:03:82:db:50:71:75:f6:fd:c9:3b:
1f:48:79:20:a2:4f:20:c6:e1:cb:d2:fd:ea:39:4f:
3f:23:9e:e4:26:d7:45:53:9d:84:8b:36:30:d3:00:
24:4f:73:f6:9b:6c:a5:80:ea:75:fc:0c:e7:f8:e5:
2b:d4:d5:76:a6:d0:26:68:e3:73:44:ce:ba:80:1e:
61:88:1f:3c:5c:b7:49:43:58:ea:7d:ee:88:41:e0:
ab:8e:22:b2:af:0b:ab:9d:d1:89:21:8e:87:2f:29:
36:3c:2e:c4:53:52:e4:06:95:ac:88:ba:1d:31:d4:
14:90:d2:bf:57:f9:ec:72:88:72:d7:cd:3c:0a:1e:
d5:fe:e7:b3:ce:c0:8b:71:73:d5:46:b8:28:8c:0b:
1e:5c:06:70:f5:b5:86:9f:18:10:42:d5:8d:61:f6:
94:12:92:d8:8d:6b:60:32:66:a8:af:88:bb:7b:37:
7f:ce:e0:e8:a8:29:0d:ec:6e:71:90:0a:90:e0:e3:
85:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CC:30:0C:B2:94:F5:95:DA:E2:DA:DB:41:A6:4D:D8:6F:AF:81:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/cac12f27-e3af-3803-a69c-e1db5cbc4dc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae/319d5f20-2367-457b-970b-7f1c1a60fcae.crl
X509v3 Authority Key Identifier:
keyid:9C:51:2B:15:7A:87:63:E4:EE:5C:4E:E6:F3:26:B7:38:67:1C:E2:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/319d5f20-2367-457b-970b-7f1c1a60fcae.cer
sbgp-ipAddrBlock: critical
IPv4:
142.148.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:57:a9:2b:6d:f5:32:09:b2:bb:05:bb:59:64:75:f5:c5:92:
2a:27:cf:38:d0:56:a3:33:2c:dd:89:f4:f4:2f:75:0b:79:a0:
9e:c2:34:ac:e1:d0:c1:fb:64:19:5a:c9:a4:fe:87:e5:e0:cd:
03:c1:44:8c:d8:d0:52:d9:6a:89:86:aa:af:c3:e0:f8:f7:e3:
a4:c4:6a:65:12:d1:bd:f2:94:d7:f3:4d:0b:4d:54:6c:6a:46:
22:c4:32:1e:55:40:6a:e0:5a:8e:e1:32:30:a2:48:1f:92:71:
c6:cb:57:e2:ad:68:81:21:0b:90:79:1e:e3:c2:e1:b3:33:af:
0e:2f:f3:77:ff:cb:d4:b9:93:a6:de:cb:ce:f6:d1:16:4e:c0:
77:cf:d3:0d:ce:a4:cc:03:07:93:5b:07:58:73:73:58:ac:8f:
10:e5:b1:ee:37:d0:3d:18:12:60:23:aa:fc:ba:33:95:e7:84:
fa:7c:a6:45:83:50:c3:8a:6a:ba:eb:f6:79:96:84:21:b2:c3:
e4:38:df:b3:9f:66:93:d6:a4:17:dd:04:c6:2b:77:ef:83:6f:
0e:3a:c4:83:b4:e6:8d:c1:e4:cd:77:3b:c8:7a:6f:e6:55:96:
89:e3:21:6c:e5:fc:09:8a:1b:3b:4c:a4:a2:6b:ae:f3:a5:67:
f6:9f:49:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:32:36 2025 by rpki-client