Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/9997b274-b375-3427-9687-59875f1e519f.roa
File: 9997b274-b375-3427-9687-59875f1e519f.roa (raw, json)
Hash identifier: Z2DW8+iE9dJjTqBb30EDx/JUaZNvR9QUuAyzdi9S2Kw=
Subject key identifier: B7:56:FA:8C:01:5E:1E:07:A9:02:03:6F:92:A0:DD:63:B2:BE:D2:9C
Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial: 010D0C9F4328584929E3CF7B9B3715322F877BC0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/9997b274-b375-3427-9687-59875f1e519f.roa
Signing time: Wed 12 Mar 2025 13:00:53 +0000
ROA not before: Wed 12 Mar 2025 13:00:53 +0000
ROA not after: Tue 10 Jun 2025 13:00:53 +0000
asID: 20340
IP address blocks: 64.34.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:29:e3:cf:7b:9b:37:15:32:2f:87:7b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Validity
Not Before: Mar 12 13:00:53 2025 GMT
Not After : Jun 10 13:00:53 2025 GMT
Subject: CN=618f089d-b397-409b-90c9-310c987e3c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a4:53:a3:a3:e9:b0:67:4e:9c:2d:c4:dd:75:
ab:da:2d:54:26:74:9c:bb:df:d7:f6:84:f7:8a:29:
03:0a:ec:ae:30:6b:c5:e0:63:e3:2f:b7:de:d0:26:
40:71:e0:03:45:55:cc:af:a8:ca:34:79:66:d5:ef:
6a:37:84:4e:a7:91:aa:91:27:a8:5a:df:41:be:21:
75:ed:2d:a3:17:13:8e:eb:bc:04:71:8f:94:71:a9:
c5:b8:6a:fc:24:67:b2:96:a1:ba:12:86:85:5b:7d:
a6:eb:c0:c9:e5:f8:00:ed:81:e1:32:bb:07:f5:e6:
d2:8e:8a:90:71:4c:ae:53:ad:b9:48:db:1e:73:5c:
9b:93:0b:42:58:4f:1b:d2:2d:4a:39:29:4b:de:82:
9e:01:be:19:2a:d6:a3:8f:ef:b9:35:23:15:da:a4:
d7:12:d0:25:df:d3:dd:76:52:5e:be:03:42:21:63:
3f:3a:15:62:b4:f5:ef:55:77:99:4a:89:c3:aa:80:
56:47:3b:05:52:74:e4:29:e5:f9:85:03:8d:5c:f3:
54:b7:71:be:3c:ea:2d:93:79:4d:51:e2:9e:17:8a:
fe:5f:6f:7e:eb:df:df:bd:d0:d3:1b:b0:42:5d:20:
4f:4d:60:9a:e6:21:66:43:c4:17:5f:05:41:37:28:
a9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:56:FA:8C:01:5E:1E:07:A9:02:03:6F:92:A0:DD:63:B2:BE:D2:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/9997b274-b375-3427-9687-59875f1e519f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
X509v3 Authority Key Identifier:
keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
sbgp-ipAddrBlock: critical
IPv4:
64.34.45.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:54:ec:b1:52:c2:e8:f0:d0:9b:6a:cb:dc:5e:f4:33:8f:be:
a5:13:9a:11:29:72:86:a0:0c:d1:9a:61:60:cf:2b:43:27:b3:
30:f7:8e:7f:fd:48:22:83:7a:ec:02:10:56:97:a0:dc:eb:62:
13:5b:9f:3f:90:ee:ed:d3:4e:a1:ec:2e:59:4b:51:9f:00:f3:
b4:33:a5:ea:65:b3:a4:cd:d8:0d:a9:cb:80:74:70:a3:56:4a:
2c:ed:5e:21:c5:3a:77:5c:cb:af:d0:76:59:fb:26:78:3f:c9:
ed:8d:d2:16:84:4d:07:61:d3:5e:34:bc:88:8a:21:54:8e:2f:
c9:5d:90:67:48:84:e4:cd:0c:53:4a:5f:fc:da:0e:96:18:28:
17:91:6e:b6:19:51:18:18:63:e5:65:41:43:91:a0:ac:2e:4f:
bf:26:36:9a:05:96:67:e5:36:34:be:9d:29:a7:23:1c:86:f5:
d0:e1:ef:86:57:a4:95:73:39:34:7f:cf:49:bb:08:7a:31:6f:
31:24:cd:0d:e2:b4:ea:14:9a:8d:83:a3:e7:30:69:31:a1:90:
f6:ca:fd:2e:26:d3:45:43:8a:6c:f5:3c:8c:7e:2d:db:c3:23:
9a:b8:5f:ed:98:fa:e3:f7:5a:5b:27:54:42:6e:5b:94:2a:27:
d9:56:ca:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:25:01 2025 by rpki-client