Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/d7a5f85b-4598-32d1-b8cc-d3f40d50fed2.roa
File: d7a5f85b-4598-32d1-b8cc-d3f40d50fed2.roa (raw, json)
Hash identifier: q2u/4kMnyPmdsE1d9PY1aMBIaxwzgA3sPGbbNXIBaTk=
Subject key identifier: 06:2A:75:F8:9F:52:B2:DD:8A:E9:F4:98:20:6B:F0:29:BE:1D:F5:11
Certificate issuer: /CN=20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e
Certificate serial: 010D0C9F43285848B35B67C2F956C1271240CC00
Authority key identifier: B3:9D:C3:8F:82:1E:92:58:6B:AC:7E:60:33:85:13:34:51:93:A3:50
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/d7a5f85b-4598-32d1-b8cc-d3f40d50fed2.roa
Signing time: Wed 29 Jan 2025 02:00:39 +0000
ROA not before: Wed 29 Jan 2025 02:00:39 +0000
ROA not after: Tue 29 Apr 2025 01:00:39 +0000
asID: 21790
IP address blocks: 64.190.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:5b:67:c2:f9:56:c1:27:12:40:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e
Validity
Not Before: Jan 29 02:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=4915b1a8-f3f8-4f46-8284-645c71d6cb32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b7:79:a9:5e:ae:85:0a:af:51:b9:13:ae:52:
34:ea:33:b9:65:65:d2:ee:9e:fa:17:02:12:a7:db:
2b:3a:27:50:8b:a2:37:02:b1:56:96:1b:97:ad:9f:
5f:ff:d0:06:35:5c:a7:99:3a:8f:97:c0:c5:9a:20:
ee:78:0a:39:35:32:8a:97:41:98:8d:9e:c4:8f:b5:
ab:94:10:ec:74:99:0f:26:86:cd:13:e5:75:fa:16:
33:23:56:cd:37:de:fa:76:98:6d:a6:83:8a:4c:c1:
ef:2a:0c:cd:76:bd:74:9b:40:1b:19:58:4a:a1:b6:
a5:f7:81:29:4d:b0:d1:80:f2:ae:7e:b8:04:ae:56:
6b:f4:a2:ab:a1:e6:87:db:15:4c:8b:80:11:bb:92:
2e:1c:54:88:e7:f8:0f:7b:21:7c:da:a8:b2:8d:5b:
31:68:63:23:40:5b:e7:bd:37:4e:ce:4c:59:d5:e9:
ff:59:34:13:9e:f1:08:2f:22:9a:9d:2b:09:c0:e8:
9d:07:d9:c2:d4:e7:09:92:98:dd:96:5c:4a:ab:42:
61:22:fb:81:e2:10:4d:eb:79:20:c6:82:73:29:77:
14:37:f5:be:f4:77:22:a7:96:bf:04:83:d4:c3:e6:
bf:61:9c:90:fe:b5:02:98:f5:be:19:d5:f1:ff:00:
e5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2A:75:F8:9F:52:B2:DD:8A:E9:F4:98:20:6B:F0:29:BE:1D:F5:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/d7a5f85b-4598-32d1-b8cc-d3f40d50fed2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.crl
X509v3 Authority Key Identifier:
keyid:B3:9D:C3:8F:82:1E:92:58:6B:AC:7E:60:33:85:13:34:51:93:A3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.cer
sbgp-ipAddrBlock: critical
IPv4:
64.190.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:76:22:ba:0b:27:a2:56:4c:d0:d4:26:23:0b:25:38:87:cd:
56:d6:bb:58:57:06:26:47:a8:0e:63:c1:6d:52:8a:93:97:9a:
e3:ee:87:b0:39:82:0b:0f:28:f6:5d:df:ce:0d:c1:18:25:ef:
e8:eb:8b:3f:0a:90:49:a7:04:31:c9:02:92:65:4c:48:f2:66:
eb:3f:1f:d5:06:1a:50:17:06:51:55:87:cd:23:54:f2:bf:d8:
9d:cf:fa:a9:f7:4d:5d:08:97:d7:c1:bc:14:d0:c6:95:6d:80:
38:89:0d:c3:68:51:ec:97:a3:ed:c9:1f:dc:52:cc:52:86:f0:
40:b4:06:6a:a4:cc:bd:0e:16:72:fb:88:32:4b:ad:62:ee:13:
eb:de:25:8f:a8:ca:95:a6:8d:da:b4:04:8b:2d:49:17:78:d9:
e9:c5:b9:c7:e1:10:ac:e7:e3:a7:35:30:e5:dc:c3:c8:39:fc:
92:fe:b1:99:68:c7:bb:cc:a8:9b:43:a4:58:fb:38:2f:ba:9c:
11:d3:7c:29:85:1b:0a:83:51:e0:89:6a:63:30:57:76:cb:4f:
01:28:f1:0b:9e:86:9d:86:cf:ca:b5:cb:c1:01:b4:9e:32:6e:
10:6b:10:c8:ae:9c:31:fe:21:85:00:f8:8b:c6:c3:41:bb:0d:
d0:a4:0c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:00:10 2025 by rpki-client