Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/d6824e42-8b91-3659-bef4-c3f464d9bb15.roa
File: d6824e42-8b91-3659-bef4-c3f464d9bb15.roa (raw, json)
Hash identifier: zBig9Ws8GcqCoZjb/tUL9yniBbYA8vMKEVZTcuCbrRg=
Subject key identifier: 41:5A:AF:B5:63:99:9B:C8:40:4E:4E:1F:E0:4E:3E:BD:C0:06:B4:A2
Certificate issuer: /CN=de848e16-b429-4505-9234-f6d889fd1438
Certificate serial: 010D0C9F4328584911B4B15272E25BF4C8162980
Authority key identifier: 1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/d6824e42-8b91-3659-bef4-c3f464d9bb15.roa
Signing time: Mon 03 Mar 2025 21:06:38 +0000
ROA not before: Mon 03 Mar 2025 21:06:38 +0000
ROA not after: Sun 01 Jun 2025 20:06:38 +0000
asID: 399820
IP address blocks: 64.49.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:11:b4:b1:52:72:e2:5b:f4:c8:16:29:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de848e16-b429-4505-9234-f6d889fd1438
Validity
Not Before: Mar 3 21:06:38 2025 GMT
Not After : Jun 1 20:06:38 2025 GMT
Subject: CN=3a4dcba0-6faf-4bfe-ab3b-99e38f40efef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:44:df:b9:be:80:e4:9b:29:56:7a:bb:46:fc:
a7:18:bb:d1:d1:4c:79:21:ae:a8:5e:6f:af:d4:16:
86:70:d8:cf:df:18:c9:d2:dd:b4:87:4f:74:fa:84:
ce:f4:26:0c:83:58:ce:1e:ef:8a:a8:5d:db:8b:f5:
f7:1a:7a:d5:d9:3f:3e:bc:cb:63:82:7f:0b:15:df:
87:88:6b:c8:43:ac:dd:ac:64:5a:92:85:60:36:8d:
7d:e0:c9:01:45:9e:82:96:af:bd:30:ec:10:98:e6:
b9:a4:86:9e:9a:74:28:25:a5:45:2a:47:16:a2:10:
2f:c4:86:54:0d:aa:46:0f:43:56:c6:88:6a:5b:19:
85:bf:6b:f1:f2:1a:1a:41:06:d4:57:62:65:9c:03:
4a:dc:67:e5:8e:07:d1:de:fc:d4:f8:f6:b6:35:ad:
da:38:cb:d4:c9:a3:1e:6d:d6:71:e5:fc:34:bf:de:
be:0d:7d:15:7c:d5:e6:0e:0c:66:d1:80:1c:e1:0f:
0e:ab:85:b2:72:26:66:67:52:f2:a7:85:c4:b5:f0:
9c:64:01:e6:7c:7f:02:37:9d:0b:5f:3a:08:b3:fc:
66:3e:97:c8:72:58:d5:bf:d2:5f:80:a0:af:9a:5e:
fa:51:a5:aa:6d:86:1b:e8:20:cc:d2:7a:cb:b2:9f:
60:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5A:AF:B5:63:99:9B:C8:40:4E:4E:1F:E0:4E:3E:BD:C0:06:B4:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/d6824e42-8b91-3659-bef4-c3f464d9bb15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.crl
X509v3 Authority Key Identifier:
keyid:1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer
sbgp-ipAddrBlock: critical
IPv4:
64.49.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:da:2c:08:f6:77:34:e3:21:c2:ed:94:15:f1:d0:81:e6:6e:
e1:04:54:77:db:35:70:6f:f7:25:ce:c6:6e:9b:64:c4:1d:24:
37:05:9d:5a:55:47:67:d4:91:80:b0:a6:91:b6:07:c2:5c:05:
da:e0:fc:b2:6e:2a:71:2b:a5:f4:b5:0b:29:6a:35:fa:cd:20:
bf:09:98:dc:fa:1a:bd:74:13:a1:7b:b9:73:df:09:c6:66:29:
da:ac:57:84:00:fe:ce:99:9a:24:be:db:b1:5c:9d:4d:95:70:
7e:a0:d1:a5:03:2b:5c:b7:cd:42:6b:85:b1:1a:92:fb:ce:d5:
81:7d:d3:90:28:19:c2:c3:0c:7f:3d:c3:e7:59:af:ad:d2:5f:
02:8b:c5:27:e4:ff:e0:6b:1b:43:15:89:4d:c2:42:e0:e5:03:
3f:59:1a:8f:fb:82:a8:8d:07:65:fa:18:17:3b:6f:55:ec:9c:
08:4c:6e:b3:06:8c:29:08:e1:f1:40:bf:30:ba:b8:4b:a2:6f:
ff:be:33:fc:56:a8:fe:ff:7e:89:37:b1:9a:84:dc:80:8e:2b:
d8:d9:31:a7:a1:fc:6b:47:a2:98:c9:84:50:52:ff:05:b0:dd:
d5:53:f6:ee:2b:6d:6b:72:5f:d6:0d:0c:6c:06:3d:4f:43:c6:
62:96:35:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:54:17 2025 by rpki-client