Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bd1174b0-373e-323a-98b4-6e3acea78c49.roa
File: bd1174b0-373e-323a-98b4-6e3acea78c49.roa (raw, json)
Hash identifier: r8uk8a0VLqn8EfDswDJcCbgm1Nteqy41BtZlTDQG204=
Subject key identifier: 63:CA:91:6B:1D:41:A2:AD:F4:54:1C:0A:3B:2F:2D:8C:1A:28:9B:49
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F43285848EF6146785AB0D4E6CE1301F4
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bd1174b0-373e-323a-98b4-6e3acea78c49.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 16696
IP address blocks: 64.255.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:46:78:5a:b0:d4:e6:ce:13:01:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=9b94c11d-39cd-4ac4-bd0f-b3578d5d12ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:77:3e:51:72:a8:53:44:ce:8d:43:13:0f:a1:
fa:fb:4d:c0:5e:d1:b9:df:dc:3f:61:17:1c:a0:37:
64:d0:d0:95:fd:c6:72:f8:97:ed:08:a3:f0:2f:b7:
c9:f8:00:33:ed:69:04:34:93:bd:cc:30:7d:42:06:
b5:f4:9e:c1:2b:76:cc:90:62:25:0c:e1:fa:27:8a:
db:ef:ac:de:bb:aa:2c:74:61:52:82:fe:a9:70:af:
29:b1:6e:6b:e9:0c:e3:68:31:50:a8:87:e5:23:d4:
ef:38:fd:fd:63:af:9f:5d:ff:f2:d7:de:c3:d3:01:
e3:67:90:9b:05:c1:28:c8:08:88:24:15:07:98:0c:
17:68:52:c7:b1:ff:42:89:24:a0:c2:4d:00:e1:c9:
f4:59:f1:05:a5:24:9a:a2:0f:31:36:60:08:dc:56:
0c:81:e5:34:51:4d:52:f3:85:7e:bc:1c:eb:72:60:
d5:20:77:fc:db:51:ee:3c:21:f9:5c:4e:2d:2c:f2:
92:9c:c2:aa:ce:23:92:37:3e:43:cb:25:f6:ee:cc:
7b:2d:5d:e6:f2:89:0f:da:ad:07:2a:38:4c:ee:f4:
d9:e1:a5:20:70:a3:53:58:cd:10:4f:ba:35:cb:04:
f6:f3:93:b7:10:af:d0:fc:b9:52:f5:30:05:ce:e1:
1a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CA:91:6B:1D:41:A2:AD:F4:54:1C:0A:3B:2F:2D:8C:1A:28:9B:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bd1174b0-373e-323a-98b4-6e3acea78c49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
64.255.230.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:9e:41:c5:11:02:bb:dc:16:2d:45:53:41:61:f7:29:f0:e8:
fb:ca:6e:7d:b7:45:36:6b:fe:d9:c9:1f:35:af:32:d6:4c:f0:
89:2d:c5:a6:82:8a:76:a8:9d:bb:55:13:cd:48:43:1c:f1:24:
97:a9:f0:27:5a:93:91:ac:40:be:b5:ba:b7:dd:df:56:07:d4:
23:ee:a7:56:b2:97:10:fc:0f:02:d5:09:66:ec:c0:73:8c:7f:
cc:bd:eb:8b:47:39:f3:34:38:cd:33:95:2d:13:3f:c6:38:24:
a7:fa:d8:1e:94:e2:56:c1:8d:41:ed:14:91:8c:b4:b5:21:9d:
6e:e7:20:8d:16:79:90:3b:2a:ba:dc:30:c0:a4:88:6c:34:9a:
62:42:e6:68:1b:11:4b:c5:37:5b:6e:7f:3b:63:61:9e:20:03:
f6:77:4f:3c:19:e4:8e:94:ba:3c:f2:a9:0b:7b:9c:59:a7:10:
6d:22:f5:d3:fc:70:40:64:b6:c2:94:00:6f:b7:8b:2e:aa:d0:
56:b0:55:2e:c8:fc:e3:4f:89:f9:2a:fc:67:3e:cb:93:4c:8c:
4f:51:52:1b:29:1d:4b:01:67:7d:40:0f:11:06:ee:10:63:64:
20:9d:08:54:6b:84:dd:df:0e:8d:5d:e8:cb:77:de:e1:7a:c5:
b3:d1:32:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:50:41 2025 by rpki-client