Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/905a33b2-a747-3537-9cda-de429490b8f0.roa
File: 905a33b2-a747-3537-9cda-de429490b8f0.roa (raw, json)
Hash identifier: nUzgLKEALGkRab5Qtzdm3PIboxLE5cOw0BF6J+UFqVY=
Subject key identifier: 01:95:F8:B7:D4:A8:4D:F1:43:76:5F:A6:7F:C4:BE:2A:80:3D:5D:17
Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial: 010D0C9F43285848C150CE748C713DCBDCD2EC00
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/905a33b2-a747-3537-9cda-de429490b8f0.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 931
IP address blocks: 64.112.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:ce:74:8c:71:3d:cb:dc:d2:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=1880839e-e9cc-460e-ad35-660eac4e49df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:39:6c:4c:3d:40:e2:1a:9d:33:1e:9d:90:03:
f5:2c:e3:d1:68:49:dd:33:be:a3:4a:76:f4:08:ea:
ea:af:96:06:ec:ed:89:78:c9:d0:7f:ab:87:85:02:
8e:b6:83:59:38:b9:59:4f:fd:c0:d9:2a:be:9e:2c:
20:f3:e1:c8:10:ea:4e:06:93:15:21:21:d3:c3:46:
52:19:52:bf:dd:1f:b0:be:06:74:6e:8b:5b:6d:c5:
94:c6:07:b2:f5:20:a4:da:81:21:82:21:31:2b:0b:
d9:22:f4:34:30:e8:39:88:41:e9:73:34:e4:a2:c2:
6e:6b:66:f6:3a:ea:2e:a9:a2:00:e1:57:b9:b3:fc:
0b:28:06:02:94:1e:12:b3:37:bc:30:44:ff:2c:09:
f1:88:c9:59:8a:2b:97:7c:23:20:0f:56:6a:0c:2e:
c9:b9:7b:fc:94:29:87:61:8d:8d:8b:6a:0c:47:c9:
c0:f4:56:ac:52:27:8a:d2:3d:a1:ea:26:bd:24:9e:
1e:85:38:1a:fa:bf:a6:c9:02:18:38:25:18:98:79:
3a:76:47:17:4a:4b:56:e5:83:30:f1:52:27:b5:93:
65:ce:01:4f:e6:da:05:78:bf:ee:8c:54:71:66:a4:
16:28:b3:68:5d:ad:7e:8e:e8:52:82:6d:7c:3c:fc:
b2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:95:F8:B7:D4:A8:4D:F1:43:76:5F:A6:7F:C4:BE:2A:80:3D:5D:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/905a33b2-a747-3537-9cda-de429490b8f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
X509v3 Authority Key Identifier:
keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
sbgp-ipAddrBlock: critical
IPv4:
64.112.85.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:e1:78:d7:4d:05:e4:21:6b:d5:44:a9:71:3f:9f:e5:37:95:
09:81:f7:31:76:7b:d0:7b:d8:8c:d3:ac:38:1a:15:68:31:4e:
f5:ed:55:9a:9e:85:98:87:92:2f:ad:93:fa:f7:20:b1:5b:d2:
a5:33:e6:5a:09:fc:03:ce:cb:65:ac:86:eb:16:68:95:ba:d6:
56:ef:29:01:dd:e1:ae:29:81:1c:ff:e7:fa:f8:6d:ae:e5:c2:
71:ae:ed:5b:44:ab:44:ea:03:a3:7f:c8:ae:51:28:bb:4c:89:
c3:58:df:fe:a8:86:6d:96:36:d1:85:b2:3c:a4:72:97:0a:99:
41:6a:9c:5d:a4:1f:19:f3:af:3c:21:b4:20:a6:e7:a8:b9:b8:
4e:22:89:7c:4a:27:8b:6e:0a:da:96:31:cb:f5:99:7f:c2:f6:
af:8a:5a:dc:e2:bd:f3:6f:db:f9:ea:da:09:0f:1e:8a:11:9f:
06:ce:23:80:c9:f4:a8:05:f0:ac:34:42:57:06:fa:1b:bc:78:
7f:e0:06:f1:6d:20:d8:1e:cd:a4:da:9d:a6:c2:ac:2e:d9:f7:
6b:bf:4b:88:94:5a:25:7e:2b:22:bf:a4:c5:4f:f3:d8:5a:bd:
1b:9d:3e:8d:66:30:12:91:cc:eb:68:71:21:c9:a5:89:c4:20:
ce:d2:4b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:55:52 2025 by rpki-client