Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/3a4da0ae-4314-321a-902e-f7b29043b59a.roa
File: 3a4da0ae-4314-321a-902e-f7b29043b59a.roa (raw, json)
Hash identifier: whWQ/nWEc7ipS39K5lPAjp4gvCw5eLm9WJ3Be0EEUvc=
Subject key identifier: 14:07:C1:ED:F3:7A:73:07:6E:19:BC:2A:38:77:8E:29:4F:B6:46:17
Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
Certificate serial: 010D0C9F432858489075FBAA2C139C28FF68BF00
Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/3a4da0ae-4314-321a-902e-f7b29043b59a.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 21743
IP address blocks: 69.5.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:75:fb:aa:2c:13:9c:28:ff:68:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=cdada64d-010d-4006-8bb4-0f4eea70c4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1a:0e:fc:a3:a4:97:fd:be:04:0c:a2:74:7e:
70:08:8d:2a:cf:91:42:94:92:60:15:99:97:04:2a:
74:5b:03:71:fd:12:11:a5:bf:8d:a1:24:2d:f8:3c:
c2:f2:77:de:32:8f:ce:46:b6:86:b8:b6:28:16:92:
63:4f:a9:45:9f:f0:62:c4:13:0b:f1:7e:29:96:c7:
da:8a:24:75:fc:9c:ae:42:d4:dd:f8:f2:e0:a7:0f:
46:df:e8:d9:0e:3a:d8:d2:2f:8c:55:32:f9:73:0f:
f0:b4:59:24:0d:ce:7e:cd:8f:5d:58:42:a8:5c:45:
de:c5:64:42:eb:6f:91:d3:d3:a3:29:4e:b1:b4:2c:
7b:39:64:eb:86:ec:54:d4:25:41:d1:14:31:c5:b3:
2b:5c:64:5d:ce:f5:19:67:11:fa:cb:5d:23:10:73:
8d:97:16:6a:80:24:db:4b:06:b0:d5:3a:69:91:e8:
6d:89:14:bd:a8:ad:45:0e:16:e0:62:68:f7:94:93:
4f:b8:ec:a5:0b:62:b5:41:dc:06:85:4d:55:51:ca:
a5:7b:67:ec:89:c0:a4:4a:6d:f6:cf:7b:52:45:2e:
1c:d1:e1:77:63:01:b0:eb:bf:63:af:c1:d5:1e:5e:
f8:8f:de:a8:68:92:ab:af:59:d3:5b:95:e0:5b:78:
a9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:07:C1:ED:F3:7A:73:07:6E:19:BC:2A:38:77:8E:29:4F:B6:46:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/3a4da0ae-4314-321a-902e-f7b29043b59a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl
X509v3 Authority Key Identifier:
keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
sbgp-ipAddrBlock: critical
IPv4:
69.5.52.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:af:1d:fc:20:e6:b3:0c:5c:ca:60:ad:f9:4f:ac:c6:65:49:
d6:e0:70:fb:83:68:f1:0d:49:94:99:6f:65:23:00:01:d1:76:
03:91:33:1b:cd:f9:0c:c6:53:29:4d:e2:1a:58:58:2f:fb:b0:
60:d2:f8:82:48:c4:ca:94:4e:10:8a:76:6b:a7:3b:55:64:c2:
b3:d4:82:d6:ed:40:78:27:15:7d:4a:d6:c5:0c:f2:21:3f:cb:
b3:9c:10:e9:a4:8a:9a:96:cd:8d:cb:0b:cc:5f:5f:b8:eb:ad:
a6:46:e0:e1:31:2f:d2:0f:71:5b:2b:02:9f:eb:1e:b9:05:98:
d0:1b:d2:3d:8b:95:44:bf:17:a2:69:8d:95:cb:c6:ec:fb:0f:
9b:bb:8b:cb:ca:32:b0:07:3f:c3:4a:6a:6d:74:bc:8c:25:48:
4e:66:c2:58:db:bf:36:a4:45:ab:54:b6:f1:3c:ff:1b:77:93:
a8:8b:3c:a2:b0:26:e2:ca:58:9e:49:77:ef:11:1e:90:93:e8:
b1:39:9b:91:1d:bc:97:de:12:2c:d9:ab:f2:8f:6b:3c:de:c2:
62:5a:ec:59:3e:ab:90:f5:ad:46:42:d6:87:d7:c3:3e:ab:d0:
e8:b0:b9:26:a3:8e:23:e1:46:dc:4c:27:ff:3b:32:21:30:44:
84:63:74:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:14 2025 by rpki-client