Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/88c7f6db-ff78-33c2-9a65-7ca3502e82be.roa
File: 88c7f6db-ff78-33c2-9a65-7ca3502e82be.roa (raw, json)
Hash identifier: VRM8Mx59b7Sn6bX1OvYwhpRYI6swq60OwERxho+o5ao=
Subject key identifier: F5:A8:8D:13:51:12:0D:45:D9:4F:E1:18:45:61:32:52:67:F5:9C:83
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F43285848CB165703D60EC873314AFB00
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/88c7f6db-ff78-33c2-9a65-7ca3502e82be.roa
Signing time: Thu 06 Feb 2025 14:00:52 +0000
ROA not before: Thu 06 Feb 2025 14:00:52 +0000
ROA not after: Wed 07 May 2025 13:00:52 +0000
asID: 13536
IP address blocks: 64.140.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:16:57:03:d6:0e:c8:73:31:4a:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Feb 6 14:00:52 2025 GMT
Not After : May 7 13:00:52 2025 GMT
Subject: CN=d0ea82fa-ed58-4db8-9c52-70dd152c7f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d2:14:e8:70:64:eb:2d:27:23:ee:85:51:99:
29:98:b5:b0:92:09:d8:af:e8:c5:fd:90:1c:c9:2a:
e7:58:00:a8:4a:97:d2:32:1c:39:b5:72:5e:13:d4:
d0:7b:37:a6:5b:76:e1:66:fa:c1:37:0d:33:bb:8a:
54:28:3b:dd:42:ac:73:e7:60:bf:87:e5:0e:21:04:
43:ca:11:90:d6:1f:10:3d:ba:fb:ab:d6:4b:ca:b7:
54:c4:06:b8:96:17:bd:31:c0:a5:48:fe:ef:b1:20:
5b:f9:9d:e7:90:b4:0f:66:85:54:dc:8d:95:f9:17:
23:e1:8c:02:46:7b:2c:37:59:ac:40:30:28:b4:0f:
58:6c:d8:b2:f9:04:83:f7:29:9a:18:20:c0:1f:c0:
13:f3:e8:ff:e7:52:1b:48:2a:71:6a:77:12:36:6c:
15:f1:76:08:52:7e:85:0d:ee:8b:7b:71:b3:ef:79:
16:87:ba:ed:e2:b8:52:20:60:dd:0b:9d:49:73:fd:
b7:a5:91:bb:b3:cf:5e:db:65:95:36:58:73:4d:3c:
81:46:d2:b8:23:bc:af:8f:23:fc:1c:11:27:ab:c0:
54:9d:61:75:95:8c:62:53:fc:29:56:68:b1:c9:d0:
df:47:5f:7c:12:3e:a9:d4:0e:50:db:fd:20:2f:1a:
d0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A8:8D:13:51:12:0D:45:D9:4F:E1:18:45:61:32:52:67:F5:9C:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/88c7f6db-ff78-33c2-9a65-7ca3502e82be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
64.140.229.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:b4:28:01:8c:21:5d:33:2f:b4:a6:7d:e7:22:e2:c9:d6:1c:
49:c6:45:8a:02:35:88:89:a3:f7:d7:9c:e1:73:3b:5d:19:e6:
af:2d:d6:2a:34:3c:20:e5:b3:30:cd:7d:50:ee:b4:97:f5:99:
14:dc:98:5e:76:74:e8:59:93:b0:66:70:75:a4:e3:fa:48:f0:
2a:48:ca:a0:26:e2:3a:1f:e3:54:e9:30:f4:58:3a:46:b6:74:
e4:71:17:45:cd:79:e2:f9:78:44:52:8e:28:3f:43:c4:ba:82:
d6:74:07:ea:63:a8:fa:39:80:e2:c5:08:e8:69:62:fa:db:be:
c9:a2:ec:96:bb:5f:a2:66:ea:23:29:37:4b:77:8e:fd:09:e1:
c9:98:9a:8f:9a:ba:59:d9:43:61:de:0d:36:12:0d:0c:78:02:
1b:1e:b5:5e:28:a5:8a:d2:25:e2:fc:a4:27:75:d5:02:b2:70:
1c:11:37:65:75:54:87:1b:ac:39:dc:fb:d3:b1:a0:d5:88:05:
df:34:4a:12:36:9c:dd:50:61:15:8b:60:e5:18:42:45:34:61:
e4:3c:3d:02:02:7b:05:e1:c1:17:5a:79:f8:0a:b5:ae:67:d5:
11:e7:9b:9a:71:cc:3e:5a:33:ae:18:9a:61:de:a0:fe:c2:da:
0f:58:00:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:18:32 2025 by rpki-client