Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/7629b882-adcd-377e-86db-fca0a36d2fdd.roa
File: 7629b882-adcd-377e-86db-fca0a36d2fdd.roa (raw, json)
Hash identifier: WwfQBlAcdVM2l9eIj75DI+wH9AV7+B9czFEztp18pAc=
Subject key identifier: 4A:8E:C7:FD:3F:04:91:9D:21:B3:42:08:9D:38:FB:A6:0C:37:1F:84
Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial: 010D0C9F43285848C150CE9D2EF8E2074F17D780
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/7629b882-adcd-377e-86db-fca0a36d2fdd.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 931
IP address blocks: 64.112.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:ce:9d:2e:f8:e2:07:4f:17:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=b3ae88e4-aa3d-48d8-831e-c6d3b89e2b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:07:3c:82:a7:25:14:39:bc:18:1d:4d:2b:f4:
01:61:df:c3:77:dc:e5:2b:85:7a:27:57:0d:ae:fd:
a9:18:bd:9b:78:4b:48:c9:2d:ad:04:30:9f:1c:80:
c1:70:b6:55:c9:77:bd:40:c5:0c:58:41:e5:9e:75:
06:8f:3d:fe:6e:e6:92:e6:55:78:f8:1d:30:2d:42:
8c:f1:16:f1:1a:5b:02:0c:bc:d0:c8:df:de:38:60:
a7:22:11:0d:c2:7f:da:01:2a:e9:6d:c2:e7:4a:0d:
e5:72:b6:59:c1:c8:80:f1:fc:16:32:01:35:71:c1:
b2:d6:1b:41:49:75:12:e6:5b:a8:44:47:e2:8d:bf:
50:81:42:3c:47:ef:bf:99:75:d5:11:8e:e6:4f:91:
2d:3a:6b:3d:52:7d:1e:08:b6:eb:bd:ee:ff:50:8b:
b1:d2:09:a6:ee:91:80:5e:91:fe:e6:63:6f:2e:f8:
fc:65:10:51:d5:1b:68:7d:3c:43:a6:4f:25:99:47:
fa:9a:ac:98:aa:db:b2:70:8e:d3:03:f2:5e:09:d3:
e1:6a:1e:99:16:f9:ae:d5:35:2b:83:a7:04:1a:e5:
ed:26:c1:93:55:64:1d:20:0a:6c:9d:23:24:55:5d:
67:45:13:b1:c2:4c:63:e7:23:aa:86:25:31:5f:76:
e0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8E:C7:FD:3F:04:91:9D:21:B3:42:08:9D:38:FB:A6:0C:37:1F:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/7629b882-adcd-377e-86db-fca0a36d2fdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
X509v3 Authority Key Identifier:
keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
sbgp-ipAddrBlock: critical
IPv4:
64.112.87.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:fc:c0:98:60:c2:cd:4e:33:fe:a0:c8:7a:6d:5f:1a:88:e6:
5a:63:3a:95:75:1b:4b:67:b8:f1:29:f5:39:ef:00:8a:86:a1:
b4:44:6c:5e:81:d5:55:bb:de:59:86:5c:cb:08:30:73:dc:6d:
23:fd:69:1e:fc:cb:e3:ab:b9:8a:ce:6b:90:32:ca:d2:75:f6:
d7:d6:dd:d1:2d:16:e4:d2:30:14:cd:c7:ae:25:01:22:64:85:
79:66:fa:f4:1e:ef:df:37:b3:53:b7:2c:63:0d:8b:31:a7:4a:
c7:6f:75:1f:5b:cc:46:ed:4d:5b:d0:e2:cf:4b:ba:f4:f0:9e:
eb:18:59:fd:29:8f:27:b5:cf:11:7b:10:c5:5f:8a:7a:ed:86:
77:e8:16:16:c3:12:28:fb:3f:a2:b9:00:19:71:fa:48:dd:48:
d5:ae:5d:17:bc:5e:d6:6a:67:7e:25:af:6d:57:cf:6c:c6:ff:
9c:71:73:4f:ca:b1:ba:03:0c:be:ae:ea:db:92:93:39:37:d1:
48:cb:ae:66:cf:c5:24:d3:85:9c:4e:e4:fd:f5:5f:03:01:38:
ec:e9:c6:ef:92:5f:de:3f:64:07:2e:b6:aa:40:ef:60:fa:1f:
d0:17:4c:77:30:db:1b:f0:6a:f0:72:13:ea:5f:9d:55:4b:a7:
38:27:19:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:38:18 2025 by rpki-client