Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/2996a758-826f-39cd-9a08-8fff3bdfd6cf.roa
File: 2996a758-826f-39cd-9a08-8fff3bdfd6cf.roa (raw, json)
Hash identifier: p7FvB68zVOMVAGq2UGDmPg+3fAOKJevOZtkYQ7zHu64=
Subject key identifier: 25:4D:7E:52:50:5C:BB:A1:7C:99:69:1D:5E:C2:72:E8:EF:B5:B2:6F
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F4328584949FE88A75A9C36509671CE00
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/2996a758-826f-39cd-9a08-8fff3bdfd6cf.roa
Signing time: Mon 24 Mar 2025 01:00:38 +0000
ROA not before: Mon 24 Mar 2025 01:00:38 +0000
ROA not after: Sun 22 Jun 2025 01:00:38 +0000
asID: 13414
IP address blocks: 64.63.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:49:fe:88:a7:5a:9c:36:50:96:71:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Mar 24 01:00:38 2025 GMT
Not After : Jun 22 01:00:38 2025 GMT
Subject: CN=8b5bd932-dde3-4adb-a797-cac7f71202ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7e:83:f8:69:82:20:60:a2:a3:5b:7b:2e:0c:
3b:ef:b7:c8:d7:e1:da:53:83:5c:6b:8a:a2:26:14:
89:c2:29:77:ce:9b:74:d0:22:7c:d1:4f:3b:3a:6e:
b8:05:b4:81:d5:1c:c2:d8:ff:9d:e1:13:52:7b:a9:
b7:6c:51:4a:ea:34:1b:ec:47:26:85:45:a1:6d:4b:
e9:c9:bb:ed:2c:32:b3:2c:08:50:8b:83:28:2c:b6:
ca:7e:3f:14:ac:98:c2:78:a1:8f:11:78:c0:ba:38:
b7:8f:8b:c1:94:23:2f:30:6d:0a:b9:3d:ac:47:a9:
98:21:23:ab:e7:20:1c:7d:b5:c5:fd:f4:93:59:cc:
8d:f3:4a:59:0a:86:96:14:58:3b:60:6e:65:97:7e:
40:00:5a:6c:8a:02:18:5d:22:0a:a4:6f:98:a9:de:
5d:9a:ad:3a:0d:27:23:5a:02:d0:56:ce:24:b5:74:
e6:03:b7:b7:3e:64:a9:1f:27:ec:1c:b7:6f:c5:cf:
bf:59:e2:0b:a6:24:72:4b:27:50:a2:12:52:30:e6:
8b:6f:34:6e:08:f6:f4:11:7b:fc:80:d3:64:0c:60:
f7:32:e7:cf:7a:ad:65:20:90:3b:e6:23:b1:7f:f0:
b6:4b:af:77:d5:cf:bd:4f:f4:01:55:bd:4b:69:2d:
a6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4D:7E:52:50:5C:BB:A1:7C:99:69:1D:5E:C2:72:E8:EF:B5:B2:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/2996a758-826f-39cd-9a08-8fff3bdfd6cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
64.63.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:ef:aa:f1:a6:ac:7a:00:1f:cb:c7:9c:30:da:1b:96:61:bf:
1b:c8:e6:fa:81:df:6b:41:5b:ac:69:04:29:69:f2:ac:41:e0:
7d:f9:76:ca:34:41:d7:22:0d:31:bb:98:04:70:ca:90:29:24:
55:88:a7:8c:2e:05:a0:45:ba:c6:2a:91:4f:e7:f3:1d:de:eb:
00:c8:7a:5e:8f:69:bb:f9:c8:28:1f:04:be:4b:da:52:2c:b2:
d9:1a:2c:bd:0b:59:db:d5:5f:ae:cf:cc:4f:95:4e:03:91:e7:
45:5f:cd:76:5f:78:14:ba:d2:7e:91:1e:2d:fb:91:89:6f:2d:
6d:33:e4:6a:de:9d:14:d0:ad:e6:06:5f:0e:f9:32:0f:b6:d1:
fc:71:1d:2f:08:a6:cf:53:22:1b:a3:74:f8:66:9d:29:70:46:
02:b9:8b:73:3c:0e:cc:ca:3d:e5:a0:80:06:6f:84:cc:32:8b:
6f:fc:f2:df:c1:de:dd:b8:02:3f:fe:2b:7d:32:c5:8e:67:75:
43:0a:4b:e7:d8:4e:c2:9e:e5:89:76:ac:d1:d4:aa:9a:7e:09:
39:00:79:ee:be:f5:d5:40:30:68:fe:0e:85:1e:39:df:e4:a2:
f8:92:ff:74:77:f3:da:77:74:05:ca:01:b4:df:aa:e1:78:d1:
5c:9e:7b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 16:44:35 2025 by rpki-client