Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3cf41fcb-a985-3473-9e69-d92e3e7ac8c5.roa
File: 3cf41fcb-a985-3473-9e69-d92e3e7ac8c5.roa (raw, json)
Hash identifier: VD6H6F5OiPERCSPP7Jb4wxl5TGWtw7bUlRvaIAf2/FE=
Subject key identifier: 9E:EE:7E:54:32:A3:4D:7C:9A:9E:7E:C5:73:6C:A9:D3:C9:3A:C3:32
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F43285848CC7B9590820383E7D3856370
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3cf41fcb-a985-3473-9e69-d92e3e7ac8c5.roa
Signing time: Fri 07 Feb 2025 02:00:39 +0000
ROA not before: Fri 07 Feb 2025 02:00:39 +0000
ROA not after: Thu 08 May 2025 01:00:39 +0000
asID: 11090
IP address blocks: 64.4.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cc:7b:95:90:82:03:83:e7:d3:85:63:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Feb 7 02:00:39 2025 GMT
Not After : May 8 01:00:39 2025 GMT
Subject: CN=528b9036-e476-438a-bc94-1cef97450ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d5:3c:8c:f0:99:3d:00:43:c7:e4:b7:cd:31:
5a:49:02:76:dd:2f:70:f5:33:a1:30:eb:7b:5f:a3:
0a:a4:b4:4e:fb:a9:94:a6:80:a0:8a:56:ad:da:12:
3a:cb:d5:15:b5:80:ba:bb:a3:56:24:15:29:8f:5b:
e1:ae:bc:e6:a4:22:26:cf:f0:06:f5:63:ce:ea:da:
12:6c:94:45:d1:28:4a:d7:22:de:27:7b:42:01:b7:
db:3c:47:46:cf:b2:ac:d9:70:b1:e7:17:1e:ff:e1:
77:28:bf:43:83:2a:19:f8:e0:29:9a:1c:7e:fc:8a:
f8:31:2e:5e:98:1f:f3:73:ec:97:5c:00:d4:7c:1a:
c5:0e:6f:02:63:f1:25:84:b9:13:29:9f:6a:6f:03:
a6:16:96:16:54:87:71:fb:e7:d5:31:f7:7d:04:e8:
3c:a5:72:5c:74:dc:c2:5c:62:cf:31:f7:85:f0:ae:
c2:19:7d:5c:e9:eb:9a:61:0b:87:e9:9b:85:b6:81:
c9:05:4b:75:e2:0d:7a:d7:6c:9d:29:57:fc:a4:15:
6d:3c:95:0e:d3:57:70:4c:03:64:26:f1:61:2a:13:
52:95:fe:47:ed:46:27:85:27:ab:b6:27:9d:0a:d6:
59:9d:98:37:7d:b2:cf:d8:c9:d4:ec:4b:1f:64:fc:
0a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EE:7E:54:32:A3:4D:7C:9A:9E:7E:C5:73:6C:A9:D3:C9:3A:C3:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3cf41fcb-a985-3473-9e69-d92e3e7ac8c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
64.4.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:55:ae:b6:e0:f2:97:d9:c3:68:98:98:57:62:72:de:6a:0c:
69:e2:d3:40:0a:b1:bc:26:f0:ac:84:2b:57:11:2b:a6:72:ac:
69:5f:80:f3:96:35:c1:6b:15:a2:c3:3d:e2:87:96:1d:91:6c:
74:f2:32:50:7c:e3:da:20:8c:97:65:b1:55:f7:cf:f1:51:7d:
72:b9:55:e1:18:20:8a:1f:5d:88:1f:c9:55:77:d3:f0:01:52:
f5:ae:9b:a4:2b:bc:1b:61:85:03:54:89:db:dc:e3:1f:1d:7a:
48:85:b7:2e:3b:8c:f6:ac:f3:4a:c7:fa:58:09:80:f8:a9:83:
21:1e:ee:f6:f9:f3:bb:32:08:56:8a:45:53:65:25:a2:2b:59:
f2:a5:55:27:14:2a:40:85:c4:5d:2b:e8:f0:86:7d:e8:8a:3f:
85:ce:9e:09:6e:f2:61:f6:c8:41:78:70:5c:d0:f5:d3:39:67:
a9:48:9f:25:11:ea:f1:f4:cf:00:86:09:18:30:f1:c8:5c:3e:
78:e5:d2:e0:3a:0d:9b:af:8d:04:39:9f:66:20:3a:5f:f2:f7:
23:46:67:84:4f:67:a4:06:c4:c9:53:36:5e:ed:c2:94:70:a8:
72:05:d2:9e:09:fb:b2:8c:10:17:b0:e7:27:de:a6:74:a2:98:
35:de:73:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:00:34 2025 by rpki-client