Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/2c857b4f-8b2e-3dbb-999c-3f4175a50016.roa
File: 2c857b4f-8b2e-3dbb-999c-3f4175a50016.roa (raw, json)
Hash identifier: 6cCLCi/RzSNysJ+HBZlPboxDz8rxg2BiVLSr4tBY1gk=
Subject key identifier: 61:05:43:A0:33:4F:3A:D6:47:E5:43:E9:FB:BE:C1:7A:23:B6:E4:15
Certificate issuer: /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial: 010D0C9F432858491246A40014B2B788F23F4180
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/2c857b4f-8b2e-3dbb-999c-3f4175a50016.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 16509
IP address blocks: 64.69.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:a4:00:14:b2:b7:88:f2:3f:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=5964bd72-6778-4d4d-a047-c896b3f2787e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3b:7d:0e:f8:4e:5c:db:bf:8e:c2:46:d9:ea:
98:82:e5:ea:7b:87:f7:66:2d:7a:fb:08:db:ac:83:
c8:f7:36:66:66:29:21:73:f7:30:83:26:3b:55:61:
ff:46:47:ed:9d:15:99:9b:b6:ea:e6:ba:47:dc:be:
76:ce:42:6e:a7:32:6e:19:66:61:af:9b:fb:63:6f:
54:41:fb:34:99:48:10:28:1b:51:8e:f9:2c:a1:ab:
f1:21:07:f1:e0:ac:0c:53:99:8c:59:47:45:54:0d:
f7:27:2d:cb:71:53:8f:5a:33:d1:c0:86:05:8d:6a:
e5:0c:17:da:93:0f:4f:f4:91:ff:1e:de:34:25:6b:
e4:6c:0b:00:f8:d0:01:49:df:44:2c:f6:bf:88:d5:
ea:5a:3f:c4:f8:a9:65:ab:d2:7a:c3:77:f4:fc:8c:
b5:88:1d:82:a5:51:5d:c2:95:94:8c:82:3c:ba:be:
9e:2b:0a:f4:7b:2d:8d:79:fb:51:4b:28:2a:c0:b9:
3d:dc:04:b1:d3:9c:fb:2c:47:68:64:91:da:2d:05:
09:d8:5f:f5:05:11:07:22:05:f5:16:9b:ff:65:52:
47:74:9e:56:ad:66:ee:21:84:95:c7:25:30:42:32:
c8:c1:6f:a6:93:c1:56:55:8e:ce:f9:2e:50:9a:04:
63:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:05:43:A0:33:4F:3A:D6:47:E5:43:E9:FB:BE:C1:7A:23:B6:E4:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/2c857b4f-8b2e-3dbb-999c-3f4175a50016.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
X509v3 Authority Key Identifier:
keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
sbgp-ipAddrBlock: critical
IPv4:
64.69.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:7e:3c:39:e1:78:83:88:df:a8:b0:fd:66:69:17:2d:dc:c4:
bb:c7:07:7e:ae:87:bd:f7:64:55:66:ad:58:28:b8:bc:0b:04:
c2:6d:24:9a:05:c5:5d:38:fa:31:9d:8e:a4:73:c7:49:a8:3e:
1e:7c:e1:23:52:9e:97:66:dc:92:0d:b4:40:95:e7:4f:31:d4:
54:a6:b2:79:ae:bd:3b:34:c5:b4:56:15:8e:d3:81:2b:37:63:
ef:17:18:04:ef:95:86:2f:99:fd:41:b9:46:6f:61:5b:01:69:
2e:ee:a2:ec:8b:15:ec:9d:48:7b:39:01:0d:32:c9:38:66:2c:
c3:67:80:12:59:c6:db:bf:a1:19:46:67:e5:d3:17:dc:8a:34:
52:ae:0c:0a:28:77:54:38:73:9a:cc:af:f9:a2:50:ab:d2:1c:
5d:ad:06:71:d4:dd:07:92:1c:17:4d:3b:9e:55:e6:9e:b7:92:
cc:07:87:99:e4:f7:07:f1:6e:b3:6c:f4:ee:c4:26:b4:d2:d9:
18:13:8b:8c:7e:e8:0f:af:05:16:f2:e4:cc:ea:20:12:9a:78:
81:92:81:63:e7:9b:49:ca:31:15:0f:1f:9c:09:25:14:5e:c7:
58:ad:2c:bd:1a:c7:90:14:a1:8c:01:cf:cc:85:28:60:18:ed:
5c:89:45:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:55 2025 by rpki-client