Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/a29feace-471c-3bbd-813c-81620749951b.roa
File: a29feace-471c-3bbd-813c-81620749951b.roa (raw, json)
Hash identifier: keIJ60encbe4dBWXGwVtiwC82hkr9e7ix4JmEkgpN/Y=
Subject key identifier: DD:4D:5D:7C:5C:CC:4C:F7:DD:F5:B1:5D:B4:37:C0:0F:69:22:B3:03
Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial: 010D0C9F43285848B4C0CFC1B34C95E2115D8480
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/a29feace-471c-3bbd-813c-81620749951b.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 4213
IP address blocks: 97.64.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:cf:c1:b3:4c:95:e2:11:5d:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=c8b9b34b-572e-4d7a-b986-bd933b0dbfc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2b:ca:6b:15:5a:ea:af:53:a0:63:5e:f7:85:
5d:94:bb:90:96:54:46:32:a8:d9:dc:34:a1:74:9f:
33:b5:d2:4c:44:87:70:0a:08:d5:6c:28:ee:ef:28:
db:86:0f:b0:73:cf:d6:59:ab:5c:ba:ce:cb:73:5e:
70:3d:86:36:6e:00:6a:24:c7:bb:54:e9:5b:d3:91:
72:b6:e0:f7:db:8f:18:ba:a5:3f:05:80:32:7c:04:
bc:a7:83:08:cc:47:c7:a4:fd:3e:b6:7b:ce:71:2e:
46:57:04:e2:b8:09:22:3f:51:97:8d:05:4a:54:70:
db:12:f1:ba:c4:af:08:1c:5f:5e:53:d2:79:c0:56:
04:1a:43:d2:27:40:5a:e6:8c:7f:51:28:db:e7:16:
ef:36:33:b5:de:a4:b7:4e:a4:9e:a0:6f:b4:5d:56:
69:af:9b:91:7d:d1:60:1f:20:da:69:37:8c:63:ff:
da:16:5a:b7:92:8b:e6:4f:dd:67:f2:ed:92:ce:13:
3c:b7:b7:57:a7:37:6b:f9:06:80:00:67:df:d7:17:
cc:7b:bd:b6:e9:d0:2a:94:98:23:31:2a:db:44:c6:
c5:d1:77:c3:8e:4b:2f:bb:df:7b:c7:ec:53:cc:4e:
bb:49:bc:de:93:9b:9f:bb:b2:d4:e0:8a:00:0c:72:
28:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4D:5D:7C:5C:CC:4C:F7:DD:F5:B1:5D:B4:37:C0:0F:69:22:B3:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/a29feace-471c-3bbd-813c-81620749951b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
X509v3 Authority Key Identifier:
keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
sbgp-ipAddrBlock: critical
IPv4:
97.64.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:b6:0f:3e:24:29:0d:de:82:e1:f0:1e:58:6d:1f:b7:d1:17:
02:df:45:f9:d4:18:62:6e:4c:72:c7:f5:5e:32:21:24:a5:2d:
5c:cc:00:b4:56:85:87:8e:59:66:25:c5:28:6d:cc:c8:da:ac:
63:0b:05:73:f8:5e:c4:33:8a:df:5c:f7:3a:a9:b0:f0:24:f4:
3f:c2:a9:a6:bb:a2:b5:d7:8e:14:67:62:64:f3:1e:47:6d:4b:
37:12:30:aa:1b:c7:f5:15:34:b9:44:cc:3a:85:92:09:23:a6:
ce:23:33:c6:d4:14:78:59:18:b5:21:a6:34:cc:be:b8:98:61:
7f:2a:c9:fe:fa:d0:69:99:6f:36:fa:ce:70:be:5b:2c:d0:5e:
ef:01:60:cf:4d:f2:59:e4:06:0c:05:71:63:48:8b:7d:39:43:
e1:e8:a8:aa:5a:94:c7:1b:3e:eb:5e:80:14:9b:2f:2b:b3:ce:
75:68:c6:69:87:a0:21:b2:ff:18:c7:5f:fe:b1:f8:96:86:8c:
96:ea:6b:6f:ae:ad:d6:26:61:9e:19:ee:6c:7c:c4:58:26:13:
1c:97:f7:1b:2f:e6:91:57:83:0c:fc:71:50:5e:c6:89:11:9e:
e7:d6:3e:7e:ce:de:a3:e1:76:d0:c3:77:b9:a1:e0:ac:07:e7:
86:bb:1c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:05:39 2025 by rpki-client