Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5954475b-f6ad-37fb-b987-bbbe07a3d6e9.roa
File: 5954475b-f6ad-37fb-b987-bbbe07a3d6e9.roa (raw, json)
Hash identifier: JHgz+353uh6UJ4thES09U4vW2g1LMLzqWb/xAVYjSEE=
Subject key identifier: E7:B5:D2:3B:B5:F2:DB:20:05:67:37:ED:DB:0D:3A:F9:44:93:DA:D3
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F4328584957F3FB000F6EE1739F49A6C0
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5954475b-f6ad-37fb-b987-bbbe07a3d6e9.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 22898
IP address blocks: 64.193.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f3:fb:00:0f:6e:e1:73:9f:49:a6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=0b342569-9acd-41f5-b769-4045162e8d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:db:e9:b9:e8:bd:57:df:4e:28:e6:d8:fd:03:
ed:b9:3b:47:60:ac:88:c8:da:80:94:3c:4e:f0:c2:
ba:28:2f:69:3a:64:1f:09:3a:0e:a4:2c:b5:a5:49:
80:01:44:e5:47:0d:9c:c5:4b:c1:8a:54:d6:c1:3d:
49:2c:bc:b1:ae:92:c1:4c:f7:9f:7c:68:32:4e:cf:
15:75:19:47:79:03:cb:49:d3:85:d6:af:5a:71:0a:
65:d9:7c:80:08:e4:0e:e8:70:84:f8:e8:0e:0f:8c:
7a:34:f5:69:f6:0d:f3:c3:2c:70:64:ef:70:5e:78:
38:eb:5d:e5:d2:a7:d8:8a:15:7c:34:f1:28:29:7e:
9a:fe:5f:ad:c5:b5:a8:5a:5b:85:ed:9f:58:2c:24:
22:73:8d:21:21:be:95:99:b5:11:98:29:86:36:83:
07:d0:44:4b:a3:81:48:0c:96:6e:de:e7:c1:15:df:
c1:90:ec:14:25:e4:13:ee:6d:15:1c:ee:fe:a5:32:
d2:9f:ee:19:5b:d3:10:fc:c9:c6:63:7e:4b:9c:af:
51:92:81:d3:62:09:f1:41:3f:c8:c7:69:be:62:d4:
5d:33:35:09:90:3a:16:a7:57:b7:fa:39:a2:e2:d7:
d5:a6:6c:42:2c:53:28:6b:34:af:76:23:ba:30:73:
52:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B5:D2:3B:B5:F2:DB:20:05:67:37:ED:DB:0D:3A:F9:44:93:DA:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5954475b-f6ad-37fb-b987-bbbe07a3d6e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
64.193.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:ac:fe:00:0e:79:7e:70:3d:1a:10:50:0e:41:8c:d9:dd:f4:
fd:af:38:ce:c7:9b:84:2a:33:e3:e3:2e:15:b9:1e:51:9c:21:
e1:6c:82:b5:73:9b:38:e3:98:08:a4:74:04:42:da:cd:fc:84:
c8:c1:27:b8:71:70:a9:5e:21:3d:e5:1e:60:ca:68:31:d0:02:
25:9e:c3:20:fa:f0:21:17:30:c6:47:df:d2:b3:eb:0f:95:05:
96:48:7d:ec:c3:46:e5:02:38:90:37:46:12:23:2b:6f:26:d9:
54:2a:90:e7:b7:6d:3a:5c:45:12:79:03:16:a6:5d:dd:f4:0c:
4a:10:80:de:d2:31:01:49:d5:82:85:5e:38:58:ce:ee:ea:13:
dd:e1:03:ee:12:c9:74:14:6d:86:24:54:fe:67:b2:e0:9a:3b:
99:7c:b2:7e:55:74:e5:78:47:11:f4:aa:ed:19:75:67:51:06:
07:c0:ab:54:20:82:9d:af:bf:ab:f7:58:18:32:24:0b:05:07:
63:3d:ab:92:88:b8:16:95:db:e5:7c:5c:e1:0e:b9:87:4d:30:
e1:e7:35:ea:bf:dd:61:69:8e:bd:a9:67:10:53:89:33:1e:c3:
5a:e8:a7:af:ca:8e:83:43:a0:da:e7:45:a1:dc:57:b3:c2:90:
43:a1:00:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:57:31 2025 by rpki-client