Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/29a11b2c-a288-3fc3-b5f2-2445cdaafbf7.roa
File: 29a11b2c-a288-3fc3-b5f2-2445cdaafbf7.roa (raw, json)
Hash identifier: 8jppMmStMDfcuuxD0Wk8i4HHSetTLKXloJJoOo5bhbs=
Subject key identifier: 9E:46:20:72:F6:7C:64:A2:A7:E0:F0:04:C4:E5:ED:4F:4C:7D:A0:9A
Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial: 010D0C9F43285848C150CE5D38F9475E0F109300
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/29a11b2c-a288-3fc3-b5f2-2445cdaafbf7.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 931
IP address blocks: 64.112.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:ce:5d:38:f9:47:5e:0f:10:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=5c94701b-446f-4acd-baf0-0e6674ee7337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f8:6b:e5:10:3c:5d:08:88:a5:cf:de:d1:dd:
c3:e4:4a:57:cc:57:c5:f0:d9:60:74:bd:2f:dc:60:
e9:9a:67:28:89:5c:67:f7:70:6e:81:1c:4e:f5:25:
31:c5:46:b0:f9:14:d3:8a:90:89:bc:64:79:be:f2:
01:d2:35:ab:d2:f8:76:f1:c1:ba:8b:b9:f8:c3:40:
59:90:55:55:e1:4d:77:76:a2:3b:58:77:51:41:0e:
e4:e3:f5:aa:3e:57:66:60:cd:0b:5e:91:7c:56:91:
bd:e8:ef:dd:9a:d8:12:49:a3:a8:38:10:29:ac:31:
2b:a5:7d:02:58:53:53:af:05:23:bb:32:a8:48:c4:
9e:a9:0e:31:af:f6:b9:1c:1d:cd:4d:63:0f:7b:d8:
9a:6b:1f:68:1c:35:a7:e6:cf:78:13:9d:6c:46:f7:
df:d7:83:08:f2:b7:7f:63:98:13:37:68:a8:03:5f:
e8:b6:92:a4:e0:11:a2:e1:21:4d:20:0f:b1:27:6e:
b6:35:ae:da:d7:ad:a2:86:f6:4e:2c:32:92:f6:76:
f6:59:44:4f:e5:0c:f9:e2:98:51:c3:63:39:96:25:
b3:a3:33:6b:98:72:cf:46:44:2a:03:60:be:31:b3:
05:8a:ab:16:dd:3d:f3:ac:0a:8f:12:63:97:53:1f:
4a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:46:20:72:F6:7C:64:A2:A7:E0:F0:04:C4:E5:ED:4F:4C:7D:A0:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/29a11b2c-a288-3fc3-b5f2-2445cdaafbf7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
X509v3 Authority Key Identifier:
keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
sbgp-ipAddrBlock: critical
IPv4:
64.112.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:07:fd:d6:e4:0e:d2:6b:56:0e:9a:9c:d0:b6:84:a6:45:ef:
51:db:25:3d:35:57:59:96:63:8b:cb:61:be:23:b7:3b:c1:16:
ff:b8:94:94:fa:37:d7:f7:15:57:71:30:f4:30:43:a2:9d:05:
d6:bb:4f:53:3d:c5:60:52:3d:5f:91:36:c0:0e:98:c2:d8:08:
28:cf:13:98:b3:3a:bb:ed:d5:63:9e:5c:69:3b:22:a4:e9:b8:
30:b7:f8:d4:e4:31:99:e5:52:8c:3e:67:d1:2d:d3:d1:49:d9:
d4:97:5f:09:e7:ce:5f:90:4c:57:f2:6d:fb:51:69:c5:b6:5b:
cd:4e:4f:66:33:48:c6:bc:81:2f:fe:f7:b3:41:10:db:c0:c7:
ca:4b:4a:18:07:00:fe:24:f4:03:74:4c:68:bf:af:b3:43:a7:
00:38:73:ea:ae:9d:2d:f3:12:b8:3a:f3:73:ab:5e:09:42:49:
4f:bf:2b:d9:36:6a:f4:69:76:5a:df:e2:e5:7b:21:41:bc:7a:
b0:0d:e8:2a:c4:57:85:32:bf:b8:8d:44:44:14:0c:5d:1b:de:
bf:50:40:21:ed:5a:56:ed:57:72:d0:b7:53:bd:ac:0d:a4:14:
13:f6:af:7a:fb:f6:7b:f9:9f:7a:89:9c:6f:dc:71:e0:df:27:
1a:41:50:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:38:28 2025 by rpki-client