Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bc0be9f9-b43d-35c9-9231-6d938307300b.roa
File: bc0be9f9-b43d-35c9-9231-6d938307300b.roa (raw, json)
Hash identifier: eiuqZAV4EVVswM433IEaiWjkPtQ+UI9GrhjM8CJ21d4=
Subject key identifier: A2:57:23:BF:98:FF:23:A7:0D:CF:80:A1:BD:46:8D:1A:53:3F:AC:70
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848F1DB8EB49000EFA9ED392500
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bc0be9f9-b43d-35c9-9231-6d938307300b.roa
Signing time: Thu 20 Feb 2025 11:19:05 +0000
ROA not before: Thu 20 Feb 2025 11:19:05 +0000
ROA not after: Wed 21 May 2025 10:19:05 +0000
asID: 30036
IP address blocks: 97.64.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f1:db:8e:b4:90:00:ef:a9:ed:39:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 20 11:19:05 2025 GMT
Not After : May 21 10:19:05 2025 GMT
Subject: CN=0f4b1237-f945-446f-a23e-22d043db1ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dc:c4:57:a5:54:a0:da:1b:23:90:bb:9d:2b:
0c:f8:21:4b:5c:ca:1b:97:83:64:7c:b5:71:ed:37:
a5:a8:5c:bf:24:99:0c:fb:fb:71:9d:b7:ed:a7:1c:
4f:9e:d4:1f:49:98:41:81:b3:f0:bf:54:5d:de:ac:
54:e6:9f:fd:1c:b8:cb:68:de:4a:6a:45:cb:9b:f1:
0f:73:63:0c:69:f9:73:7c:0a:46:1e:e9:d2:95:25:
92:ba:16:10:2c:5a:71:7a:ea:7d:88:91:74:b0:94:
50:c7:8d:dc:68:06:8d:b1:a2:7b:5a:5d:0b:91:3a:
07:0a:e3:68:2c:97:de:ea:51:af:94:19:4d:73:9c:
7b:f7:01:7a:ce:70:1c:07:47:ce:dc:e6:11:ca:18:
57:8f:06:84:99:c6:ce:a1:53:8b:4a:d1:d7:7e:09:
2d:c7:e1:65:48:58:2f:5d:ce:bc:f6:82:79:a9:9f:
6f:8d:f6:bd:ca:24:bb:74:cd:ee:37:8d:34:7a:a5:
7e:48:5e:c0:73:2a:78:c8:38:6c:21:2a:e0:ee:53:
9f:13:9a:12:5e:fb:65:81:4f:0e:99:02:2d:f7:ae:
eb:07:9b:df:11:ac:e0:93:67:35:66:92:45:13:83:
f5:87:e8:76:19:aa:5a:13:ee:4f:bd:70:88:a4:81:
fc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:57:23:BF:98:FF:23:A7:0D:CF:80:A1:BD:46:8D:1A:53:3F:AC:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bc0be9f9-b43d-35c9-9231-6d938307300b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
97.64.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:b6:21:f2:99:a8:ec:3b:a2:d2:af:d3:c5:29:b1:e8:82:ce:
00:8c:88:17:79:55:9a:4d:89:0e:fd:44:1d:13:cd:1a:1b:96:
5c:fe:3d:1c:31:47:00:23:24:99:89:a0:c6:4f:e2:83:de:68:
c4:00:27:cb:07:17:5e:ff:7b:66:a5:73:f5:ae:2e:8f:5e:3b:
e9:57:ae:f6:27:91:6e:21:96:e5:dd:f8:4d:b8:6b:2a:93:70:
27:f6:4e:49:d7:0d:90:ff:2e:86:ea:96:72:1d:1d:0d:98:29:
35:bf:1f:ef:f7:96:05:99:f0:81:b4:5e:d8:f3:78:51:6a:6d:
21:1d:7c:97:a1:63:ee:dd:f6:e6:96:20:e7:c2:a5:51:57:44:
39:6b:4d:61:ee:d3:de:ce:c1:02:a3:f5:0d:6c:34:d1:99:e1:
49:88:ae:83:c8:3c:b0:90:d1:5c:9b:90:c6:81:5f:25:27:a2:
a9:19:ef:29:ca:40:52:00:0c:57:8b:dc:2e:a2:d7:0f:cd:f2:
ad:6c:13:d1:b8:05:0f:bc:e2:a0:62:fb:5b:04:ef:8c:71:f0:
c9:06:6d:33:f0:86:00:27:a4:f1:64:a0:03:1d:b8:c8:0d:29:
ff:66:c3:65:1c:3d:a9:c7:fd:38:6c:98:38:3d:aa:ed:7d:dd:
9f:f4:fe:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:21:25 2025 by rpki-client