Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/8484361b-712c-3a89-ad3e-849ce795eb08.roa
File: 8484361b-712c-3a89-ad3e-849ce795eb08.roa (raw, json)
Hash identifier: RBwH1J1mdzz9ComFOh1rOpYgqTo8aSRLwfruKNQezgQ=
Subject key identifier: 51:4C:D1:67:21:0D:AC:90:A7:61:6B:BD:A6:8E:E5:90:D2:9B:71:2C
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F43285848A13616B7C8166EF0324407A0
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/8484361b-712c-3a89-ad3e-849ce795eb08.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 12055
IP address blocks: 64.25.213.0/24 maxlen: 24
64.25.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:16:b7:c8:16:6e:f0:32:44:07:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=662cf76f-bdd5-4fcf-9d60-a38aa89de537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:21:fe:ce:8b:ab:a5:9f:35:bb:1a:22:61:9f:
2b:e0:a6:19:3b:21:0a:62:1e:aa:65:3b:87:06:76:
30:d4:31:27:84:6e:75:06:03:be:fe:96:73:28:9e:
0a:6c:c3:27:d0:45:3b:91:79:c0:fe:c6:75:1e:51:
e4:cc:22:8b:5e:d5:ac:cb:d4:bc:62:07:a9:ae:51:
88:73:c6:b9:af:32:fa:84:62:d6:d3:64:d3:34:c0:
7d:6f:61:37:93:61:33:48:f9:c6:d7:55:8e:30:ca:
7c:e1:9e:c7:7f:2f:95:81:24:d1:9d:d2:de:22:dd:
dd:af:eb:41:a3:bf:80:1f:68:11:41:08:6f:e4:0b:
8a:f7:50:ae:73:86:8c:63:bd:27:93:d1:e6:39:8e:
c7:34:3e:55:82:fd:ed:de:ed:cd:0d:5c:cc:57:c1:
9f:a2:08:42:78:75:57:2a:ee:25:c4:76:0f:93:08:
af:a7:b3:4e:63:76:e1:46:1d:97:3f:bf:f9:6c:d7:
8a:76:82:b7:6b:50:e1:ce:5e:56:25:df:b9:4f:a0:
32:5b:24:88:95:45:f6:b4:a6:c5:c5:af:9c:2f:1a:
45:57:8d:2d:e3:79:9f:3b:eb:b6:b6:04:f0:dc:ca:
0f:47:89:9f:1d:f2:e8:91:aa:27:0e:de:d4:eb:87:
88:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4C:D1:67:21:0D:AC:90:A7:61:6B:BD:A6:8E:E5:90:D2:9B:71:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/8484361b-712c-3a89-ad3e-849ce795eb08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
64.25.213.0-64.25.214.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:7e:3b:46:8d:56:cf:92:83:7b:ed:c0:9b:3d:f4:17:b6:52:
16:53:2c:fd:f8:65:da:ae:59:70:dc:4e:22:55:3c:6b:f1:9f:
6e:d9:30:fb:3f:f1:56:45:9b:bc:0e:22:e0:da:7c:f9:98:5e:
63:ed:bb:c3:ad:ea:82:4b:30:73:2b:6d:33:29:66:f2:5e:f2:
82:46:47:4e:a7:1e:02:f5:ac:2c:7d:f5:85:2b:70:03:73:6c:
fe:ba:f9:7b:ea:23:f0:44:7e:77:27:98:79:99:68:64:06:f8:
df:22:ae:36:d2:d4:95:7e:4d:fe:85:d4:7f:ab:42:65:5c:d3:
25:a0:78:40:44:79:03:34:49:f4:31:40:6e:ad:d5:a7:42:49:
4f:4a:08:6f:54:a0:7c:99:8a:9b:ec:b2:83:fd:0b:0b:70:8b:
0c:82:1d:ee:05:11:d6:b9:ab:9c:1f:8b:99:91:35:8c:8b:ce:
55:9a:45:c7:24:64:ae:bf:b6:83:68:e8:4a:7f:03:b3:f9:58:
42:07:08:93:d0:34:12:1f:4f:83:53:85:3b:46:88:bd:06:e3:
98:54:f9:b3:8a:88:0f:2e:2a:cc:48:0e:48:33:6e:33:b1:46:
e9:bd:38:02:13:11:25:e0:a6:f5:4f:c0:43:c2:f8:88:a3:fc:
17:f6:a8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:16 2025 by rpki-client