Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2fb8b598-8f2c-35b8-81f1-2336d0f05373.roa
File: 2fb8b598-8f2c-35b8-81f1-2336d0f05373.roa (raw, json)
Hash identifier: ij9PZDHbAc8hfV4K/PIesjCuLiKfIW3yEtgNfROWCIM=
Subject key identifier: 6A:DC:6A:C9:77:1B:63:E4:12:3E:32:0D:90:EB:7A:7A:E9:55:E5:6D
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848F4A635F2E2CE726D56A0AF00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2fb8b598-8f2c-35b8-81f1-2336d0f05373.roa
Signing time: Fri 21 Feb 2025 11:19:01 +0000
ROA not before: Fri 21 Feb 2025 11:19:01 +0000
ROA not after: Thu 22 May 2025 10:19:01 +0000
asID: 30036
IP address blocks: 97.64.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:a6:35:f2:e2:ce:72:6d:56:a0:af:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 21 11:19:01 2025 GMT
Not After : May 22 10:19:01 2025 GMT
Subject: CN=c3d5f692-7ef6-4783-933d-ddacea0b6425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f1:35:ad:bf:1d:12:8c:a2:96:51:10:1c:14:
ee:38:3f:de:bb:85:13:95:0b:5e:a3:64:97:2f:95:
c2:90:ab:c7:06:02:21:a6:d4:ac:1d:3c:cb:bd:65:
84:a7:7b:a0:45:ea:8c:01:c0:37:a5:8b:08:6d:dd:
f2:3c:1b:74:db:72:04:a8:17:86:3f:4d:02:14:cc:
c6:c4:9a:8e:6d:be:c4:2d:65:96:5a:5e:ad:b4:b3:
8c:19:7c:de:7b:51:aa:18:80:a2:aa:de:d9:1f:c9:
8d:21:82:53:20:2a:07:d5:8a:d4:dd:c6:e6:de:9e:
4c:3d:70:cf:0d:f1:09:2e:49:d4:cf:b1:eb:b4:29:
ef:67:2c:30:2b:26:73:ba:2b:37:16:d2:15:fc:47:
f2:76:70:6f:3d:12:02:49:b8:13:7e:45:64:e0:00:
c9:89:3d:62:07:a5:c3:26:4c:9d:22:72:72:fe:06:
d9:f0:2b:8c:0b:48:bd:24:77:6b:2e:67:6c:7e:c0:
91:92:01:2e:fa:99:ec:2c:b8:df:95:ac:45:0d:53:
72:43:af:72:d9:9d:c4:3f:4d:2e:62:ff:2f:a6:34:
57:27:cf:3b:76:33:8c:f7:dc:e1:34:30:b1:fd:50:
b9:c4:47:df:b5:9c:cd:7a:29:b4:2a:1d:00:d4:33:
04:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DC:6A:C9:77:1B:63:E4:12:3E:32:0D:90:EB:7A:7A:E9:55:E5:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2fb8b598-8f2c-35b8-81f1-2336d0f05373.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
97.64.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:f9:39:0c:25:45:f7:0e:95:ae:cd:4a:1e:2c:e1:66:70:74:
15:e9:b8:ac:31:25:fa:54:3f:d7:4a:7c:68:40:44:6f:b9:19:
a0:41:63:6e:5d:e3:8d:35:21:fc:8b:4b:28:c5:76:85:fa:fb:
74:41:0e:00:ba:08:58:b5:38:28:bd:f6:78:23:b9:a7:af:4a:
9c:2f:eb:67:a8:4c:bb:c9:d7:15:c9:b7:f6:22:fa:1c:8b:da:
14:59:1c:4f:96:e9:1e:9c:9f:27:ab:2c:23:b6:05:ab:cd:f5:
30:fa:13:d7:d3:c1:9c:2b:36:d1:78:5d:1e:29:cd:4c:ff:13:
d9:97:cf:bf:c0:22:03:a4:04:68:a0:50:44:b5:30:8f:c4:36:
df:e9:68:76:92:61:13:19:82:65:76:ff:08:33:0f:0a:df:e5:
6f:1c:6e:ec:f6:d9:8a:55:61:2c:ee:28:1c:37:c9:62:37:22:
e6:e7:b5:10:03:9e:0d:c4:20:96:60:0d:b1:b2:0b:0b:41:d7:
ff:7c:98:1f:1c:df:ba:f8:d4:f3:b3:47:c4:ca:ae:2d:f8:67:
e1:d1:0c:b8:c5:0e:c9:7d:ab:d0:94:0b:cc:fc:31:8a:07:1d:
90:a0:c1:f0:1c:ea:6a:4d:6c:98:c6:ba:a0:08:c8:28:e4:56:
7a:06:c9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:56:25 2025 by rpki-client