Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/af4868b3-26a2-31d0-9de6-f3b7ef66108f.roa
File: af4868b3-26a2-31d0-9de6-f3b7ef66108f.roa (raw, json)
Hash identifier: O+SVDtSuUV4572e4aeHhpLth/EXD6+wXkvWqow6bkak=
Subject key identifier: EC:EF:F1:7C:6A:42:7E:F2:F5:54:8E:20:88:0E:7F:84:41:5B:03:5F
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858492134275190807B8FBF991340
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/af4868b3-26a2-31d0-9de6-f3b7ef66108f.roa
Signing time: Sun 09 Mar 2025 10:20:35 +0000
ROA not before: Sun 09 Mar 2025 10:20:35 +0000
ROA not after: Sat 07 Jun 2025 10:20:35 +0000
asID: 577
IP address blocks: 64.231.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:27:51:90:80:7b:8f:bf:99:13:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:35 2025 GMT
Not After : Jun 7 10:20:35 2025 GMT
Subject: CN=b4b42fee-4ce4-4fcc-b82f-b2ffd1f06ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4e:d4:77:20:af:e3:af:44:de:1e:e5:07:48:
55:5d:c5:c3:e8:ee:47:79:fc:59:3a:26:b8:e3:ed:
27:e7:93:eb:1e:b6:15:a0:53:c7:72:45:23:ad:40:
e7:7e:0c:3d:75:45:dd:ce:50:4f:65:ec:dd:40:44:
f4:0e:5c:aa:26:cb:93:41:09:bc:58:cf:9d:80:4d:
52:9c:f7:37:29:23:59:43:b6:0a:62:7c:8e:e4:2f:
fc:78:45:3a:63:86:6c:6a:c7:2f:72:f5:f9:e4:87:
4b:f6:4b:72:23:d0:fd:f2:ad:6e:ff:77:39:9e:77:
be:9e:93:03:5b:af:e4:06:b5:d7:0a:8f:7d:e3:46:
a1:b4:1d:41:cf:dc:1b:e5:3e:82:4c:b3:38:56:1f:
39:b2:58:1b:b9:d8:4b:89:c8:b2:2e:8c:b5:27:d0:
9f:a8:cc:2e:29:15:f2:8e:82:ad:55:16:4c:a9:ee:
19:38:bf:61:af:24:e0:65:53:aa:b0:04:cd:2a:04:
28:82:65:cb:ce:dd:67:e7:e2:9b:48:9d:11:21:a7:
53:14:7e:88:9b:17:b9:0c:98:60:a2:65:22:e9:8e:
ea:df:ac:88:e9:e0:44:ff:3d:6e:59:c7:27:89:e4:
58:22:9a:70:9d:3b:4c:14:68:a0:fa:61:3a:50:a2:
32:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EF:F1:7C:6A:42:7E:F2:F5:54:8E:20:88:0E:7F:84:41:5B:03:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/af4868b3-26a2-31d0-9de6-f3b7ef66108f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
64.231.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:fb:0d:6a:37:08:43:8b:bc:2f:41:00:86:c4:63:a7:fd:89:
63:c0:41:8d:97:9f:10:cf:a4:c5:08:6e:ec:1c:8b:14:25:31:
b0:59:7b:55:c1:41:f6:6e:c3:76:36:3f:10:70:ac:e1:01:b1:
33:8c:07:75:e2:dc:0f:50:ed:2e:c5:86:94:07:e4:da:49:74:
09:b8:bf:83:da:06:c0:76:83:8a:6e:85:8f:eb:3f:f4:17:7a:
e4:94:33:04:5e:ff:1d:b9:aa:4d:08:de:f0:fd:e9:4f:5c:f6:
1c:c2:2e:3f:23:42:cc:3c:66:2d:9f:41:b1:e3:b3:0f:4d:a4:
7f:68:55:98:f0:3a:2f:c6:2c:b9:84:bb:68:f0:dd:3d:2c:9f:
fe:01:92:32:45:17:2a:49:b3:00:8d:43:59:89:c7:fc:33:84:
05:3b:5a:cd:c5:3b:e5:e2:31:68:0c:d4:04:7b:f2:a4:eb:27:
c8:d4:31:59:38:0c:67:8c:ac:fc:e7:28:8c:ae:4d:45:8d:eb:
a7:97:bc:70:0c:28:68:f0:dd:0a:1d:0d:e3:10:d9:94:c9:22:
ab:ed:a9:7c:ce:80:02:f2:8d:32:6a:46:b0:2f:35:69:01:be:
a4:db:a0:78:58:a4:9b:90:a0:46:86:0a:b5:91:b5:5d:44:02:
85:22:95:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:49 2025 by rpki-client