Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/85bfc13b-5ca6-3582-84ef-09bdb9bfc4c1.roa
File: 85bfc13b-5ca6-3582-84ef-09bdb9bfc4c1.roa (raw, json)
Hash identifier: hfqmxK1NMnX4yj6USstS/e8yz/OF4QHj1DgwkzrsjV4=
Subject key identifier: 39:28:34:F4:E3:F3:C1:51:89:03:AD:F7:0D:59:C6:AF:B4:E3:D1:20
Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial: 010D0C9F43285848C150D087399826AA21BB7240
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/85bfc13b-5ca6-3582-84ef-09bdb9bfc4c1.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 213122
IP address blocks: 64.112.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:d0:87:39:98:26:aa:21:bb:72:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=25edf4e7-bbb9-48e9-81af-da881761359a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:5e:b8:4c:e3:26:83:31:0d:af:41:f0:bb:
7f:fc:c9:fb:bd:fb:14:2f:e2:54:ad:09:f1:8d:66:
2c:c1:49:ec:cb:ed:45:44:9c:5d:7c:94:f7:5c:13:
1e:db:99:05:62:d8:38:aa:61:c2:65:a2:fd:00:85:
d5:95:fb:88:e5:ae:23:14:93:03:02:76:ad:fa:81:
f7:64:6d:25:fb:37:54:f7:88:54:37:c4:f7:f0:1f:
e9:05:4b:58:88:55:b4:52:75:85:b1:4a:e6:34:64:
df:5f:21:35:1b:02:3c:49:99:38:ce:57:aa:bb:f4:
5a:49:fb:34:60:aa:8e:22:75:96:61:22:35:3e:25:
ee:dc:78:2a:45:58:61:e2:95:21:fd:0c:16:fd:e8:
df:4b:7c:50:8e:ee:fa:bb:e9:cb:39:12:5e:06:9a:
4e:a5:7c:fb:ed:ac:df:30:4c:e2:bb:37:8e:60:f3:
8e:e5:f8:8d:64:95:9f:3d:4b:34:54:c3:9b:57:01:
c8:8f:13:73:5c:83:df:a1:6a:c1:24:26:b0:a2:63:
4a:83:13:ec:13:2c:eb:8d:f6:a3:ba:00:b8:45:c8:
cd:06:81:96:ee:3f:71:d3:2f:81:2b:61:fc:43:0e:
6f:74:cb:a2:d4:c9:40:59:6d:4c:4f:5a:69:c3:21:
65:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:28:34:F4:E3:F3:C1:51:89:03:AD:F7:0D:59:C6:AF:B4:E3:D1:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/85bfc13b-5ca6-3582-84ef-09bdb9bfc4c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
X509v3 Authority Key Identifier:
keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
sbgp-ipAddrBlock: critical
IPv4:
64.112.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:b0:10:33:83:23:57:0c:c1:44:c3:85:95:ef:5c:8c:97:79:
9d:c7:f4:e6:81:5c:33:b2:c8:78:bd:48:35:13:90:3e:1c:a8:
7d:0f:ec:77:4b:e7:7b:82:40:5a:87:07:d3:b6:f5:10:fe:5d:
d1:94:32:54:91:4c:93:c5:2a:ea:c4:7d:2b:f7:59:15:02:7d:
17:e8:a0:28:6d:26:84:41:11:21:9b:b7:6e:c1:8f:61:48:42:
59:09:8a:70:6d:14:9e:b4:42:94:79:02:93:45:02:94:c5:b0:
43:87:b3:d7:53:76:62:8e:76:fd:87:8c:9f:c2:ea:22:b3:6c:
1d:b5:02:c6:17:82:03:b2:33:da:42:d1:67:2e:a4:69:35:38:
aa:d9:91:b1:f3:f9:f1:a3:9c:ea:14:30:c7:b9:75:6c:86:63:
69:d6:48:52:2c:d6:e6:bd:9e:f0:c4:83:e5:57:3a:59:ea:5a:
d2:5c:9c:dd:e5:c5:6e:ba:ce:76:69:8a:1e:12:2c:ab:ac:dd:
4d:fe:d5:43:cb:dd:88:c4:f3:15:e0:b7:8e:77:59:cd:8f:42:
47:2c:26:7e:4e:b8:d5:3c:bd:9b:7c:eb:6c:8d:41:c0:33:f9:
2f:8a:64:ee:b7:79:6e:ac:7e:24:71:ac:0c:54:25:1e:1d:0c:
b9:d6:e3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:50:54 2025 by rpki-client