Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba6df326-d80c-4cb4-91a1-83dda19f144f/74be51c8-f4d9-3046-952a-c64a5d214db9.roa
File: 74be51c8-f4d9-3046-952a-c64a5d214db9.roa (raw, json)
Hash identifier: QJwtMD6/vJFgX0oIP53wGbf74Yb520/rn7HF/eirN2o=
Subject key identifier: BE:94:DB:5E:36:22:2C:B7:1A:6C:43:8D:14:14:22:07:4D:A0:93:EA
Certificate issuer: /CN=ba6df326-d80c-4cb4-91a1-83dda19f144f
Certificate serial: 010D0C9F4328584886B07FED4C24F4C207B8C380
Authority key identifier: EE:A7:AD:14:39:82:06:B4:AA:93:56:2E:34:F2:56:BB:A0:7C:95:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba6df326-d80c-4cb4-91a1-83dda19f144f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba6df326-d80c-4cb4-91a1-83dda19f144f/74be51c8-f4d9-3046-952a-c64a5d214db9.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 36378
IP address blocks: 64.29.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:7f:ed:4c:24:f4:c2:07:b8:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6df326-d80c-4cb4-91a1-83dda19f144f
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=88bdd15d-a0d4-4c96-91d9-b0d009db8eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:31:95:0e:ce:91:b5:04:f0:e6:5e:14:68:14:
4f:60:60:57:9f:df:04:10:55:a6:79:d1:46:de:4e:
7a:fe:06:b0:21:f9:2b:75:b6:fe:d1:27:b4:65:45:
a7:70:b3:8b:2e:42:2d:e4:38:52:d0:92:fd:96:69:
a7:c5:9c:f1:db:fa:87:24:2a:18:1b:e9:4b:35:7c:
a7:39:b5:65:c1:c3:19:ae:ba:70:ba:2b:d3:41:34:
22:e3:e3:92:7f:d2:5b:00:b4:71:6a:97:dc:4b:77:
88:f5:1b:86:8d:3a:ec:79:25:6e:da:15:b0:5f:8c:
bf:2d:00:88:20:7c:02:30:76:ed:1d:14:a4:22:d7:
a7:84:be:57:48:75:1e:b2:4b:32:69:4b:44:1a:ec:
d6:01:6e:14:aa:31:69:97:e8:e3:77:1d:af:7b:50:
80:d2:9b:c9:a6:04:99:00:a2:68:ac:4d:a5:e6:22:
da:73:88:c4:b5:57:64:07:55:c6:78:d3:b5:98:2b:
af:c0:fb:c0:42:8a:0c:b6:5d:1f:a5:aa:a3:b9:d2:
7f:92:9e:b8:ce:71:dc:2b:89:0b:e9:db:b4:33:c1:
a4:07:5a:4a:c8:4d:a6:ee:9b:f9:82:42:53:71:59:
d1:c4:7c:6b:34:ad:ff:7b:01:b4:83:3b:57:e7:65:
67:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:94:DB:5E:36:22:2C:B7:1A:6C:43:8D:14:14:22:07:4D:A0:93:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba6df326-d80c-4cb4-91a1-83dda19f144f/74be51c8-f4d9-3046-952a-c64a5d214db9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba6df326-d80c-4cb4-91a1-83dda19f144f/ba6df326-d80c-4cb4-91a1-83dda19f144f.crl
X509v3 Authority Key Identifier:
keyid:EE:A7:AD:14:39:82:06:B4:AA:93:56:2E:34:F2:56:BB:A0:7C:95:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba6df326-d80c-4cb4-91a1-83dda19f144f.cer
sbgp-ipAddrBlock: critical
IPv4:
64.29.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:be:a2:f4:e8:cc:2a:0a:fa:9d:32:90:d0:84:cf:79:f5:9d:
d6:6a:ae:b3:a3:20:0e:3c:76:92:8f:61:71:54:f3:ff:d7:f8:
8b:6f:db:26:82:18:31:79:aa:9b:9d:43:05:4c:44:69:a5:85:
00:20:c4:0f:a0:1e:d5:e5:6a:27:7c:5c:be:53:39:e9:51:77:
e0:88:97:24:5a:ac:3a:be:c0:32:d2:d0:2a:13:1d:5f:13:89:
e0:25:ec:cb:25:a5:9d:e8:c4:a2:10:bc:3c:a5:19:12:d1:0f:
86:b2:41:11:49:fe:9b:cf:8c:60:e2:8a:9c:0d:69:be:cb:56:
a7:75:61:5e:76:00:76:5b:01:26:60:0c:ce:10:64:8e:ee:8f:
95:68:f3:8c:c0:49:6a:44:f4:b2:e4:99:01:0d:16:c9:dc:7c:
6f:88:26:ac:ee:7a:dc:25:2e:48:eb:0e:7f:a1:e6:3a:d6:10:
bf:e8:b5:bd:be:1e:40:46:27:ca:be:ae:54:84:d2:b5:80:f5:
a2:f0:28:fc:a2:fe:30:8c:33:e8:c1:d1:b3:bf:4e:55:16:ec:
fc:8e:94:42:d1:58:08:ce:8b:fd:33:56:2e:57:91:84:fd:33:
cb:f4:ae:0d:d0:39:27:28:c2:e2:d1:67:8a:56:6d:62:dc:f3:
05:5e:da:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:39:01 2025 by rpki-client