Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d64d4a50-728f-3752-ac71-c95ec957ec4f.roa
File: d64d4a50-728f-3752-ac71-c95ec957ec4f.roa (raw, json)
Hash identifier: ZkgoNOKLcX2wa5ug3lnaJVVy7/bv+tN6+Ydv4X6I2GQ=
Subject key identifier: 54:32:96:B9:AC:66:8C:A8:AB:33:25:A8:73:C5:41:85:7C:DD:98:1B
Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial: 010D0C9F43285848FD56A97059E141DD217926C0
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d64d4a50-728f-3752-ac71-c95ec957ec4f.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 16509
IP address blocks: 134.224.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:a9:70:59:e1:41:dd:21:79:26:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=a1de1364-3ccc-44cd-b54c-d7b81f917bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:15:dd:2c:68:83:3e:15:d9:4c:26:d8:8c:ff:
92:23:35:72:01:df:f2:98:7e:a5:98:25:9a:50:cb:
57:b1:65:d5:a0:72:8c:e0:b8:82:82:fd:d8:72:48:
c1:3f:3b:67:90:f2:ab:7b:a0:d3:25:a3:fc:3e:09:
3d:14:f1:4b:8f:ea:7f:b3:4c:49:69:58:f0:16:a6:
d0:5b:bb:ed:64:65:71:64:1e:7f:d6:47:63:06:4f:
76:89:0f:98:14:a7:44:7c:83:08:4e:1a:7a:77:66:
62:89:f1:6a:27:66:10:00:a7:50:69:05:f5:f6:12:
92:3f:57:45:a7:19:00:06:c3:91:ae:e1:cd:cc:2b:
04:44:06:c9:e6:af:01:ac:7f:04:6e:28:43:0e:63:
89:15:8a:29:35:69:d6:e6:67:0b:1d:de:42:3f:b6:
dd:80:a3:c5:b6:c4:24:3e:f2:6d:e9:4c:9a:59:5d:
74:39:fd:f9:63:3a:ec:82:de:bd:59:d3:25:b4:2e:
66:fd:7f:f3:57:d1:f5:30:40:a9:2c:6b:94:51:60:
fe:f4:a9:f0:6c:fd:06:ef:11:05:85:b5:75:3c:de:
37:7a:78:74:b2:75:23:73:ae:1f:be:c4:be:5b:4d:
e4:66:64:90:35:be:3c:df:f8:47:03:1f:35:1e:1b:
c2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:32:96:B9:AC:66:8C:A8:AB:33:25:A8:73:C5:41:85:7C:DD:98:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d64d4a50-728f-3752-ac71-c95ec957ec4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
X509v3 Authority Key Identifier:
keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
sbgp-ipAddrBlock: critical
IPv4:
134.224.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:f4:0a:b6:41:27:38:eb:7e:40:07:5a:db:a6:f9:96:66:8b:
12:bf:b4:26:c1:e4:4c:40:7d:0f:27:e8:b1:64:f9:37:87:8a:
2b:e6:56:cc:fe:12:92:28:ed:b8:ee:fb:bc:ff:be:18:d3:b1:
df:b1:31:2c:64:75:eb:ee:50:6e:cb:c4:98:c1:c7:ac:10:8b:
df:43:ea:89:0b:40:38:3f:a5:e5:86:69:b3:3f:51:c5:cf:0a:
4a:fc:27:89:c0:5d:2f:4c:ac:75:ca:76:e4:03:2d:f3:5a:20:
72:04:ac:c5:f9:d0:56:d5:95:97:db:8d:7e:f9:ae:92:d8:6a:
66:70:1d:b3:a8:08:93:32:b4:3a:16:12:a5:25:36:09:eb:51:
69:c3:5a:02:fb:ca:94:89:97:67:64:fc:b7:6c:38:40:ea:d1:
e2:95:c3:35:bc:64:73:fe:ed:92:37:38:21:d4:a0:98:06:74:
30:0f:2b:8a:35:af:cf:38:57:65:7b:6f:e2:7d:6f:0e:0f:0e:
2c:12:4e:12:51:d9:07:4a:70:fe:32:48:d5:3a:1a:ad:3d:48:
2d:76:f4:a4:aa:4d:fa:a0:7d:ac:1e:8e:16:26:8b:3f:d3:14:
a0:dc:6d:98:e7:d9:82:2b:59:04:55:a2:53:df:c0:c5:f6:aa:
ea:4c:6b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:49 2025 by rpki-client