Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a774701f-f622-36c1-9dd3-e162dab05b31.roa
File: a774701f-f622-36c1-9dd3-e162dab05b31.roa (raw, json)
Hash identifier: gG58hUTLMH4kXSVT4FMhhWbkbXxCK3mrY48Osncbj50=
Subject key identifier: 9E:A6:6D:71:95:FD:5E:95:66:DD:1B:82:10:23:BC:49:7D:9A:46:38
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848F1D3FD048D8324C5FCEC9146
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a774701f-f622-36c1-9dd3-e162dab05b31.roa
Signing time: Thu 20 Feb 2025 11:03:50 +0000
ROA not before: Thu 20 Feb 2025 11:03:50 +0000
ROA not after: Wed 21 May 2025 10:03:50 +0000
asID: 30036
IP address blocks: 97.64.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f1:d3:fd:04:8d:83:24:c5:fc:ec:91:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 20 11:03:50 2025 GMT
Not After : May 21 10:03:50 2025 GMT
Subject: CN=b8e1e613-33cc-4989-9274-5489a22fb7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5a:6e:73:9c:46:04:2b:30:e1:75:1a:26:9c:
87:71:d8:52:43:81:92:9c:5b:12:4f:36:b8:97:72:
5b:f9:90:ca:7b:5c:38:9d:c6:e8:48:99:15:3b:cc:
2a:65:00:84:23:79:0d:30:e2:14:48:59:e4:3c:46:
7f:ea:4d:4f:65:09:08:a1:3d:b3:af:34:6b:86:09:
85:90:32:4c:0c:13:5c:a7:0d:b1:6e:86:57:47:e6:
15:9c:0a:2a:90:a9:25:eb:24:56:86:f4:b4:dc:9b:
5a:68:0a:43:af:49:60:83:3f:0b:35:8a:11:a0:40:
3c:7e:e7:d0:02:f5:17:0c:f5:4d:1b:aa:ca:25:09:
7f:8e:44:55:ff:fd:d2:22:50:97:15:18:01:45:cb:
b7:ef:3b:3f:1c:42:e9:1d:6c:63:3b:bf:07:70:28:
d9:a5:8c:ee:7f:48:13:ec:42:34:fc:e4:70:10:6f:
41:78:de:13:9b:91:7a:23:c4:f7:b7:65:19:eb:35:
55:6c:0e:e0:e9:7e:f2:08:33:5d:08:7a:73:27:4c:
ca:40:9e:aa:47:69:b6:47:c4:be:c6:2b:a8:60:01:
fe:f7:63:56:c9:5c:cc:5b:9b:79:59:5c:7e:db:a9:
84:73:b0:81:fc:ce:b1:8a:aa:75:fa:c9:e0:83:28:
55:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A6:6D:71:95:FD:5E:95:66:DD:1B:82:10:23:BC:49:7D:9A:46:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a774701f-f622-36c1-9dd3-e162dab05b31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
97.64.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:cf:d7:6e:c8:09:6c:0d:c7:27:c9:f2:cd:ac:03:58:cc:22:
6b:d4:4b:cc:a4:e1:2f:bd:aa:7f:64:e5:9b:ce:36:47:52:d6:
5e:e0:81:29:0a:81:d3:cc:1f:fa:74:53:4d:7f:89:fe:c2:dd:
e9:7d:b9:63:34:26:ef:59:b5:5e:7e:c7:21:3a:54:57:ae:93:
40:78:02:4a:e7:86:cb:93:88:11:2b:a5:38:7f:02:3f:78:15:
e8:2d:d2:ca:7e:bb:8d:03:05:b9:a4:ae:5e:2c:c3:74:fa:bf:
c6:4d:a5:b8:a0:d0:3a:a4:5f:77:17:52:6a:c8:df:a1:68:0d:
c2:a0:07:d4:30:ca:c4:34:b7:5a:43:3f:fd:94:6a:06:c5:ec:
ed:80:6c:59:d7:2c:ea:f2:08:87:18:1f:26:da:b1:92:5b:c5:
62:8d:d0:59:a3:d1:0b:7d:29:59:de:54:1f:e4:94:e6:a3:06:
de:a9:1b:31:c9:c2:1f:b6:3f:d8:6b:6d:41:e6:cf:b8:f9:21:
0b:24:1b:dc:21:f8:45:70:32:5a:45:6c:77:4b:8b:ef:e8:df:
84:b3:ec:91:78:2a:07:44:1f:ff:b9:24:9c:b4:1c:21:7c:b3:
6b:a8:ea:17:9f:39:63:94:13:65:3e:fe:ae:fa:67:4a:6c:7d:
d3:e3:29:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:12:15 2025 by rpki-client