Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e62157d9-5954-48d0-b141-a5cfd44f68b8/2a2f44a7-be14-3ed8-8d78-7ad5acf3efe8.roa
File: 2a2f44a7-be14-3ed8-8d78-7ad5acf3efe8.roa (raw, json)
Hash identifier: Ux1izNG+Q3idebLbYroVIytMAJuNnYgj0tCJ/mclQ5g=
Subject key identifier: F0:6B:5A:4C:CF:0D:11:D9:90:6A:97:F1:42:86:88:37:04:BC:2D:48
Certificate issuer: /CN=e62157d9-5954-48d0-b141-a5cfd44f68b8
Certificate serial: 010D0C9F4328584913AC181FF4318AE3C666F340
Authority key identifier: B4:A1:C4:B6:CD:4C:2E:1C:4A:00:BF:39:37:6E:CF:F2:31:D0:62:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e62157d9-5954-48d0-b141-a5cfd44f68b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e62157d9-5954-48d0-b141-a5cfd44f68b8/2a2f44a7-be14-3ed8-8d78-7ad5acf3efe8.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 396320
IP address blocks: 97.64.78.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:18:1f:f4:31:8a:e3:c6:66:f3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e62157d9-5954-48d0-b141-a5cfd44f68b8
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=bcc3d567-6c2d-4730-88fa-a496a64a6844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c0:37:b7:a9:4b:6b:c9:99:1c:2b:02:0d:9a:
56:bf:99:15:f4:3e:25:bf:e8:a3:cf:0b:07:93:ef:
5f:67:ee:28:65:af:bc:6e:6f:68:5d:46:09:59:af:
f2:02:e6:2a:d5:5a:08:f1:79:7b:07:65:3c:5a:44:
6c:9b:a6:75:4b:25:3a:6b:9c:b1:51:7d:0b:b9:4f:
a9:26:12:47:19:6d:c4:67:b7:1b:96:d4:a7:b7:e3:
f2:71:e4:db:06:25:7c:de:b2:be:75:06:10:c6:32:
54:23:6d:f0:c0:c2:98:a1:a7:30:be:63:3e:6b:4f:
ad:6d:89:2a:14:c0:d9:50:89:54:30:00:c1:98:a5:
4b:05:e8:cd:fe:ee:2b:45:3f:e6:35:02:2e:e3:2a:
7a:a8:87:6f:6f:65:09:44:48:3c:e8:02:81:9b:8a:
ec:68:b8:8c:a0:d8:c5:14:90:ce:67:21:ff:78:f8:
c3:e9:c4:a0:42:ee:55:09:26:99:09:5c:46:98:b9:
bd:90:3f:2d:ef:ff:79:42:5f:c5:dd:f1:e5:d1:cd:
9c:c7:42:af:0c:47:90:10:a4:55:cc:b4:e0:71:fa:
d7:a3:16:57:a8:16:f9:01:e2:2b:8f:d4:b5:6d:bc:
5b:77:3e:8e:11:a4:4e:68:42:23:a6:05:73:57:4c:
c4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6B:5A:4C:CF:0D:11:D9:90:6A:97:F1:42:86:88:37:04:BC:2D:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e62157d9-5954-48d0-b141-a5cfd44f68b8/2a2f44a7-be14-3ed8-8d78-7ad5acf3efe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e62157d9-5954-48d0-b141-a5cfd44f68b8/e62157d9-5954-48d0-b141-a5cfd44f68b8.crl
X509v3 Authority Key Identifier:
keyid:B4:A1:C4:B6:CD:4C:2E:1C:4A:00:BF:39:37:6E:CF:F2:31:D0:62:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e62157d9-5954-48d0-b141-a5cfd44f68b8.cer
sbgp-ipAddrBlock: critical
IPv4:
97.64.78.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:20:b1:7d:a5:4b:2b:96:95:38:70:7a:4f:6c:69:89:71:f5:
29:33:33:ff:e8:e8:60:22:f8:82:f2:55:b2:7c:20:46:a0:93:
e7:5a:bc:b0:77:74:9e:69:b1:39:b7:03:14:49:d3:c4:93:05:
16:f9:62:1c:8d:b8:1c:a5:a5:b1:87:5d:6f:f5:b2:5c:75:59:
fe:ff:25:c9:61:b9:f3:6e:51:c9:75:d0:88:c7:20:fe:87:6d:
0c:5e:3d:22:d9:fc:47:d6:be:c3:5f:58:05:00:cf:a7:ea:6d:
ee:a5:62:62:f4:1e:9f:18:c5:dc:2c:d7:02:a5:1e:a8:c9:14:
62:09:64:16:16:cb:e8:86:93:71:0d:ba:da:c1:2c:1e:19:58:
52:3a:2b:1a:0b:ae:a9:1e:85:cf:29:9e:eb:74:de:94:15:bf:
bf:35:e7:1c:a5:7f:f0:35:ce:ec:9a:1f:15:ab:4d:39:af:80:
07:b2:71:d0:b7:ae:0f:64:d9:02:6d:1b:6d:76:12:97:6c:b0:
b1:32:01:13:aa:25:20:23:23:67:64:08:cf:af:50:0d:64:2d:
09:97:d7:15:85:f0:ee:18:b7:1a:f0:72:13:44:16:e0:83:46:
d1:28:16:31:34:e9:ed:c9:6f:39:d6:59:5a:b4:59:6d:5d:98:
99:67:9a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:04:16 2025 by rpki-client