Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d34582ce-bd6d-3e7c-a42c-968be6f19f8c.roa
File: d34582ce-bd6d-3e7c-a42c-968be6f19f8c.roa (raw, json)
Hash identifier: ibuHa41cLVXo4Ow2YyrAZqiE6qiUB3oJM87P5J0Kt+M=
Subject key identifier: 2F:B0:93:F8:E7:DF:D7:BE:01:F7:DC:59:14:DD:56:71:08:A0:7F:64
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F43285848CC7B950765BD0ABF37DC2280
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d34582ce-bd6d-3e7c-a42c-968be6f19f8c.roa
Signing time: Fri 07 Feb 2025 02:00:39 +0000
ROA not before: Fri 07 Feb 2025 02:00:39 +0000
ROA not after: Thu 08 May 2025 01:00:39 +0000
asID: 11090
IP address blocks: 64.4.234.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cc:7b:95:07:65:bd:0a:bf:37:dc:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Feb 7 02:00:39 2025 GMT
Not After : May 8 01:00:39 2025 GMT
Subject: CN=46e2fca4-37fd-4e6b-8dd7-9791bddd25ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8a:9d:ad:67:75:78:5e:c2:d4:d8:d2:e7:b2:
74:fd:27:d4:ca:e2:d2:01:11:76:5c:f3:ad:9b:43:
ee:f1:26:92:93:97:07:6a:1a:52:50:63:bb:be:42:
b7:eb:bb:08:bb:9e:d7:70:cc:f9:b5:40:38:31:0d:
30:db:12:61:cc:f0:5f:93:7a:83:e0:62:83:2e:ff:
42:d5:d1:69:f8:78:c3:f0:75:27:cd:9e:ba:57:38:
dd:a1:d1:d3:67:fc:09:ea:da:93:e9:ba:34:6a:d3:
bc:2b:7c:e3:a4:92:38:1e:1f:85:4b:90:80:cb:87:
50:b6:fc:b1:c0:01:34:14:44:4f:ea:2d:6c:d2:0e:
9b:0b:27:06:77:81:02:09:9c:cd:21:e0:a7:59:a4:
c5:b3:cb:8b:9a:47:c9:42:7f:a3:10:3e:2f:95:d4:
c1:7f:03:c9:5a:d2:f5:cc:0b:8d:91:e2:1a:a7:6c:
13:40:66:76:87:f8:23:bd:ae:5d:67:71:26:98:a9:
77:43:83:86:90:2d:05:e0:77:bb:7b:4a:50:c6:d6:
90:80:8c:5d:b1:ae:34:bd:5a:70:1b:42:36:a0:be:
81:f5:b8:ac:5d:4c:77:8a:cd:94:84:c3:3f:7b:42:
4f:cf:ea:4c:18:15:c0:36:68:90:90:05:2b:8a:8c:
b4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B0:93:F8:E7:DF:D7:BE:01:F7:DC:59:14:DD:56:71:08:A0:7F:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d34582ce-bd6d-3e7c-a42c-968be6f19f8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
64.4.234.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:d9:3b:66:90:f8:94:64:27:a1:36:ad:99:d0:2e:43:b2:de:
36:4e:88:47:22:a5:93:25:4e:1a:fd:ef:01:bd:81:bb:fc:69:
4d:c6:6d:3d:71:93:74:89:bf:0e:41:e0:25:b0:e8:eb:f1:71:
7a:66:6b:11:d1:8c:50:33:6c:56:ac:d9:ee:51:d5:61:a9:eb:
f3:85:2f:6b:38:99:91:69:47:81:64:4f:77:1d:3c:3f:25:5c:
6f:e8:9e:3a:ba:88:d3:8f:71:e9:ea:7d:cd:0d:c9:bc:63:14:
27:88:67:11:57:18:ff:76:f5:9a:3a:b7:8b:73:7a:8a:dc:da:
86:df:30:7f:d6:72:41:64:83:c3:05:e6:7a:b9:86:c6:97:60:
ce:52:24:ac:f4:fc:52:b3:6b:31:d7:24:8d:b1:8b:a7:74:24:
4a:84:b2:3b:1a:63:e4:91:41:0d:2e:50:8e:e7:a2:e4:58:4f:
f2:55:b4:83:3d:78:fb:20:9a:d4:fd:ee:5c:50:0f:4d:46:6a:
00:60:98:53:ef:8d:d5:ce:10:6a:19:cc:e2:95:e6:e1:27:77:
d5:c6:9f:14:0c:69:02:21:94:36:c3:31:99:e2:93:93:02:b3:
2c:2f:a7:fe:ba:99:32:97:07:b0:ab:09:6a:1c:b3:f0:7a:2e:
0f:a0:5d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:31:00 2025 by rpki-client