Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/296474ca-9a2b-35f1-a900-62276c4b824d.roa
File: 296474ca-9a2b-35f1-a900-62276c4b824d.roa (raw, json)
Hash identifier: e8468S5EsvvutSLJ7ZkRP+Csy6w7ILuAGbdDAW79KNY=
Subject key identifier: C5:96:5B:58:00:B6:7D:9B:83:B6:49:26:56:4E:1B:9D:17:28:F8:0D
Certificate issuer: /CN=89e3cde1-8ab2-4343-a597-24e6db5c8fe5
Certificate serial: 010D0C9F43285848A13610814BD0EA64978C0080
Authority key identifier: 0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/296474ca-9a2b-35f1-a900-62276c4b824d.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 16509
IP address blocks: 64.207.222.0/24 maxlen: 24
64.207.223.0/24 maxlen: 24
67.222.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:10:81:4b:d0:ea:64:97:8c:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e3cde1-8ab2-4343-a597-24e6db5c8fe5
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=8265a046-74aa-4aa1-9b9c-24f78b0d3f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:26:08:91:86:a5:1e:ae:31:c2:92:5b:4b:cf:
bc:5e:af:6c:9d:27:3e:90:9a:75:10:e1:cf:3a:07:
50:32:f0:92:d3:c3:f6:57:ad:ad:63:ef:5d:f6:68:
46:5e:5f:98:f0:ca:06:93:d5:3f:b1:7a:66:5a:ba:
20:f5:94:ec:ca:a1:fc:67:93:9e:69:c3:14:a0:06:
59:15:3f:ae:61:81:a0:c1:bf:cd:74:32:75:5b:69:
6a:37:35:6c:a8:24:fb:b3:41:1b:f5:10:48:51:66:
c2:90:b7:43:be:31:2e:5b:1d:9f:f4:8d:76:80:be:
ff:07:81:c6:2a:75:07:97:c5:32:f7:3c:48:05:6c:
cf:da:f2:0b:d1:52:ab:fe:24:96:7b:95:41:a6:0e:
0b:62:1c:29:ac:9c:88:84:89:5f:87:c8:c0:f9:6e:
49:a0:14:80:ec:cc:80:a2:2b:7b:52:d5:e2:c4:51:
92:8e:16:7e:1d:9c:bf:3f:fd:95:40:a8:67:6f:f8:
58:6f:94:e9:17:4f:c6:e2:b7:58:68:a1:6c:d7:15:
9d:bd:28:e5:77:9d:3e:93:b7:ad:fa:6f:3f:24:f2:
3d:31:d1:97:85:cd:f4:57:a9:57:2e:9d:db:1d:3a:
a5:be:c4:de:3a:c7:e8:60:db:82:e1:d1:db:a8:c3:
b5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:96:5B:58:00:B6:7D:9B:83:B6:49:26:56:4E:1B:9D:17:28:F8:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/296474ca-9a2b-35f1-a900-62276c4b824d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.crl
X509v3 Authority Key Identifier:
keyid:0B:77:6B:21:6C:DB:32:5C:21:B1:48:8B:E4:55:4B:89:77:0C:1B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89e3cde1-8ab2-4343-a597-24e6db5c8fe5.cer
sbgp-ipAddrBlock: critical
IPv4:
64.207.222.0/23
67.222.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:6a:0f:fe:cf:ad:86:dd:2d:9a:a1:96:09:c5:73:f3:42:6b:
80:b6:d9:0d:24:44:1b:ce:4c:45:55:57:16:72:c4:57:b5:ea:
3d:68:f5:e4:b5:57:b8:ad:59:dc:81:bc:0f:87:82:f1:39:3f:
2a:2b:b7:6f:40:ed:4c:ca:14:2e:b4:4c:64:b6:0c:8f:15:55:
9a:ff:18:f2:ac:b9:2e:59:71:b3:db:68:41:e0:bd:06:e6:30:
dd:55:76:db:0d:90:2c:30:c9:d2:53:1a:fb:81:95:0e:26:2c:
4c:d9:68:0a:ab:e1:ca:22:b4:89:57:08:8c:24:96:6d:a1:7c:
02:a5:59:e1:78:6b:36:19:54:7d:4c:e3:7c:17:62:9b:a1:fe:
cd:25:58:84:cb:41:38:d8:24:3e:a4:ab:7e:74:5c:a4:9b:b6:
0a:b3:5a:b4:fd:c3:ea:f1:ce:ca:ce:e6:1a:8d:a5:c0:ef:b3:
7f:ee:27:82:6e:0e:d1:fa:f1:48:9b:c7:0c:84:77:ba:21:bd:
a4:50:8e:0e:07:45:f4:ef:67:8a:2e:0e:da:25:63:f8:aa:7b:
06:08:5d:a0:c5:b3:cf:7f:b0:8b:08:19:74:d9:2f:77:ed:96:
c9:fa:2b:39:3c:90:8e:76:2e:bc:e2:c8:f1:3d:8f:03:96:86:
97:a2:e3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:37 2025 by rpki-client