Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/49b4b37f-b599-3ef1-bca8-c4802687016c.roa
File: 49b4b37f-b599-3ef1-bca8-c4802687016c.roa (raw, json)
Hash identifier: SqH5U0kxklHNN68ivF8qWm8Mg82k5MiD56qTKdElNfs=
Subject key identifier: 55:CB:ED:BC:DE:AA:83:2A:9A:21:0B:24:B8:FD:6B:B3:10:08:58:F2
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F43285848EF616BBEFF4F3FD6550B5A00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/49b4b37f-b599-3ef1-bca8-c4802687016c.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 17025
IP address blocks: 64.124.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:6b:be:ff:4f:3f:d6:55:0b:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=67935fbb-6f55-4692-8124-c398e73abb8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cd:39:b1:41:17:e8:11:4b:d9:62:16:e8:9b:
be:52:b3:81:97:fb:98:53:0d:7c:c5:75:fb:4a:23:
3a:67:4d:63:76:3f:23:ff:f7:6b:c5:6d:32:4d:76:
78:8a:e6:9f:a5:9b:f9:d0:da:66:7a:18:8d:b7:5e:
8a:1b:7c:e8:9d:f6:31:46:66:3e:52:24:e1:13:d9:
46:0f:d7:e1:3a:b1:70:2d:da:25:87:f0:b0:f5:4b:
1d:15:01:fd:cd:90:d9:49:59:bf:77:0b:bf:96:65:
fc:b1:dd:ad:0a:0e:32:f2:55:87:17:53:dd:6d:59:
ea:60:3b:1f:96:43:0c:dc:9f:62:73:56:6a:b3:33:
82:c4:d7:ce:43:2e:40:bb:ca:0e:68:69:48:92:87:
d6:c5:ba:f9:f3:ce:b2:9d:a6:a4:8d:d7:ee:b4:da:
6e:b4:fe:d5:2e:6b:ac:a1:a0:a3:0c:f4:83:3a:15:
1e:fe:1b:ae:1d:b7:25:b4:f4:f2:82:77:15:30:32:
0a:d9:0d:57:a8:97:0c:83:77:6c:ea:c9:1c:c5:bb:
0f:68:d7:17:4e:38:85:ca:95:91:5a:d7:4d:0b:8c:
bb:7a:a7:bd:6f:47:03:39:3f:94:51:60:a1:ab:5e:
c3:3f:cd:bf:5d:73:8c:3d:39:cb:44:94:c9:3f:c9:
a0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CB:ED:BC:DE:AA:83:2A:9A:21:0B:24:B8:FD:6B:B3:10:08:58:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/49b4b37f-b599-3ef1-bca8-c4802687016c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
64.124.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:a5:02:6b:39:0a:22:05:a1:e7:3e:ca:35:15:0c:d1:0c:f7:
4a:bc:a7:86:fa:ac:ae:4d:2f:73:01:4a:12:6c:85:53:08:06:
a7:11:82:45:3e:73:9c:d1:11:d8:05:bf:f9:6b:ed:66:7b:b0:
33:09:4e:68:0d:5d:af:7f:8f:ed:a1:fc:d1:aa:d3:be:fb:9b:
08:fc:83:b8:c7:aa:54:9a:8e:6a:07:24:cb:50:da:5d:f8:16:
3f:b5:fd:7d:74:60:d9:c8:47:34:84:9d:f3:6d:1b:36:44:da:
b7:46:c4:c3:ca:05:27:08:2f:08:d4:30:05:9d:53:d5:ff:26:
b3:9a:29:cc:49:5d:d5:2b:3c:89:17:53:a4:96:74:50:5d:45:
6b:0f:9f:74:66:80:02:d8:26:1a:c8:ed:1f:28:13:eb:b2:b9:
08:0e:cf:f8:a0:98:0b:a6:1a:81:be:54:99:c9:3b:cd:ff:4f:
ed:9e:bb:3e:5e:d8:f1:26:ad:ec:98:57:c4:9d:a3:16:0a:c0:
84:dc:58:a5:8c:52:15:8d:a0:af:63:f2:0c:d1:a7:58:5a:f4:
a7:27:d1:47:a5:48:2a:52:7c:ea:35:12:86:64:87:86:b8:b5:
4b:9c:09:80:cb:2c:a8:c7:67:69:a5:a0:fe:c1:67:6c:5f:5f:
b5:9f:c1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:59:16 2025 by rpki-client