Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/2ddd424e-b220-3461-a805-5aa7ad17482d.roa
File: 2ddd424e-b220-3461-a805-5aa7ad17482d.roa (raw, json)
Hash identifier: FoLogW4KiMA0F8voTg0OQZWB3zurr7LWXM/uYmNc1S4=
Subject key identifier: 03:99:68:B0:84:0A:F7:86:92:3A:BF:D3:8E:1C:A0:75:60:77:05:76
Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial: 010D0C9F43285848E9CBF267D70FDDF509868800
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/2ddd424e-b220-3461-a805-5aa7ad17482d.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 5511
IP address blocks: 64.79.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:f2:67:d7:0f:dd:f5:09:86:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=a354c6ac-7a03-488d-8292-5e81af297f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:23:2a:d2:29:73:41:6f:d7:6e:d9:18:ca:30:
67:42:41:e4:36:cd:b4:7a:60:4f:e3:08:5b:02:68:
55:5f:5c:e0:50:d7:fd:bf:fa:b8:83:96:42:bc:08:
18:a2:62:82:8b:aa:5e:f9:3f:4e:9c:4b:22:91:2e:
24:72:b3:20:47:83:d3:96:04:54:95:87:97:3c:0f:
ad:67:f3:b1:a3:0f:e1:c0:e4:68:5a:22:37:7e:cd:
26:ad:43:66:37:4c:2f:94:31:31:07:ca:bb:b9:96:
7e:0a:b2:f6:06:ad:e7:bb:92:35:6d:a7:2d:60:a5:
2d:da:11:3a:08:8b:db:88:bf:77:79:65:4a:e7:95:
5a:33:b4:43:bd:93:2f:88:01:09:eb:ce:36:ad:9f:
3d:ed:e3:48:ac:0c:b8:3b:d3:67:b9:43:d0:ba:1d:
8b:b9:b8:02:2b:d7:0d:26:c0:96:d1:82:ac:81:9d:
c3:77:74:ea:23:dd:d9:9d:d0:45:5f:0d:a9:d5:d8:
35:a8:33:ca:a8:95:d8:f1:32:59:4e:35:d1:e2:31:
fc:67:a2:05:e8:9e:34:ae:77:3d:9a:48:9c:bb:5b:
d5:77:54:d0:9b:cd:c2:67:7b:4d:b0:fc:46:e1:bc:
35:66:fe:b0:96:8b:54:dd:34:cc:2d:b2:4a:93:61:
de:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:99:68:B0:84:0A:F7:86:92:3A:BF:D3:8E:1C:A0:75:60:77:05:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/2ddd424e-b220-3461-a805-5aa7ad17482d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
X509v3 Authority Key Identifier:
keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
sbgp-ipAddrBlock: critical
IPv4:
64.79.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:c2:ca:e0:f7:4b:ab:c2:3c:ba:d9:2e:70:1b:c7:9e:bc:0a:
bd:2b:65:22:f5:aa:f2:ee:65:4a:56:00:b4:b9:e7:d7:80:bd:
fc:f6:16:02:ad:90:d1:87:ac:1d:56:36:99:dc:cf:ee:f0:e7:
dd:83:c3:1f:c0:a8:60:25:74:11:af:cd:7e:aa:6d:2b:32:83:
ae:68:0b:2c:5c:01:74:a4:10:c4:23:34:73:0d:ae:2e:21:93:
8e:de:0f:d9:90:f6:57:d3:73:66:03:6e:2b:f8:c1:28:7f:24:
f1:17:d0:92:3c:c7:de:86:6c:51:46:5f:e9:8e:43:8b:df:57:
de:81:fe:eb:f6:5b:35:d9:cd:5b:51:b3:bc:f1:05:56:0f:f8:
f9:d0:1b:19:72:bd:f3:f9:04:ba:44:37:8c:a7:ca:fc:df:51:
31:fc:d4:7a:b3:31:43:43:63:49:34:5c:44:d8:56:43:d9:90:
f0:34:89:58:35:a5:73:1b:26:c9:46:b7:6b:5f:ac:32:a1:c3:
9c:d2:b1:b3:dc:db:7f:a9:df:c5:d3:38:2d:c1:66:72:c6:fd:
d7:cd:8d:f7:9f:cb:2e:04:0e:30:ce:22:07:2d:01:6a:68:9f:
18:77:8c:83:41:bc:ff:34:7c:5d:47:c1:df:45:21:aa:24:d6:
2c:29:9c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:37:59 2025 by rpki-client