Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/9a4fa7ef-2d0a-3f3c-aa3f-5b8be8c805d7.roa
File: 9a4fa7ef-2d0a-3f3c-aa3f-5b8be8c805d7.roa (raw, json)
Hash identifier: qKujqAObNe58HeFHVLZc19d7pkQYQIOJ3V5OkeL+WyI=
Subject key identifier: 7D:25:71:AE:53:7C:A7:F8:ED:EE:8F:08:86:2C:F6:BF:5E:02:C4:3A
Certificate issuer: /CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
Certificate serial: 010D0C9F432858488F10801A684C88AE2040075C
Authority key identifier: 3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/9a4fa7ef-2d0a-3f3c-aa3f-5b8be8c805d7.roa
Signing time: Thu 16 Jan 2025 02:00:39 +0000
ROA not before: Thu 16 Jan 2025 02:00:39 +0000
ROA not after: Wed 16 Apr 2025 01:00:39 +0000
asID: 15171
IP address blocks: 64.203.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8f:10:80:1a:68:4c:88:ae:20:40:07:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
Validity
Not Before: Jan 16 02:00:39 2025 GMT
Not After : Apr 16 01:00:39 2025 GMT
Subject: CN=2d418fef-6e5c-4133-aa4f-d8990cb203ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:06:0d:7e:66:97:17:5a:90:13:01:c1:50:f7:
d7:30:12:61:a7:ce:da:a0:18:b3:bc:c0:e2:c7:68:
89:90:b2:0d:ff:3c:c2:2d:ae:c0:b7:60:6a:e6:c3:
6c:a0:92:4a:97:60:b3:fd:de:97:5c:98:d5:d0:f8:
df:27:85:91:c2:d4:b1:e2:66:e5:34:56:a2:2a:8b:
93:cb:16:b4:a3:24:df:57:99:f6:18:e4:41:06:ad:
99:f1:01:8f:5b:34:d0:df:2c:fc:af:01:72:d1:fd:
66:22:74:bd:28:69:fc:5a:97:da:05:c2:4e:18:6f:
4c:31:41:c7:8e:30:f6:de:14:5b:fa:2c:7f:1f:44:
84:b4:cc:61:e6:4e:2b:f6:8a:5a:99:e2:b2:e5:3f:
46:de:93:66:5b:5c:0b:ba:f1:79:bf:c3:11:bf:a0:
c5:20:2f:cf:a1:b4:99:fb:56:5a:f6:9b:60:7f:b7:
ad:07:7e:09:13:f9:6e:a1:bc:cc:a3:c5:ad:8a:82:
b4:81:a1:91:b6:ec:e9:28:7b:0c:28:73:69:30:f1:
c7:cf:1e:32:69:0e:c7:b9:13:94:15:24:c2:79:7e:
ca:d7:6b:e4:71:33:76:b1:4f:f6:92:24:d7:84:5e:
44:75:78:ab:e0:b0:88:2a:31:ee:59:eb:55:82:02:
07:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:25:71:AE:53:7C:A7:F8:ED:EE:8F:08:86:2C:F6:BF:5E:02:C4:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/9a4fa7ef-2d0a-3f3c-aa3f-5b8be8c805d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.crl
X509v3 Authority Key Identifier:
keyid:3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer
sbgp-ipAddrBlock: critical
IPv4:
64.203.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:43:ad:05:58:f4:69:8a:fe:8e:4e:04:1a:28:b2:a1:3e:0d:
c9:dd:53:05:41:13:96:3b:57:9b:31:fb:8c:e5:5d:ec:5b:d5:
c8:e1:a4:85:d8:e4:4b:72:43:3b:71:20:4d:16:47:26:67:97:
52:0f:9c:f7:48:7b:7c:95:d2:06:d4:bc:98:17:cb:6c:25:65:
73:80:2c:df:33:f0:c5:b8:5a:26:bb:bd:0a:90:b1:a6:75:6a:
e2:ca:73:44:a2:df:47:eb:2c:3f:fa:93:f8:53:cb:2d:93:8d:
44:df:1c:53:1d:92:a7:67:f2:1c:c2:e9:85:0f:ab:72:f0:58:
d6:d4:52:a4:1c:00:34:d8:3e:a7:b6:d0:b0:27:c1:89:2e:f0:
e0:45:26:44:ef:cc:20:16:d7:0d:0f:81:9c:32:c6:c9:3f:24:
14:e0:5d:fe:f5:6e:50:2d:93:9e:19:7e:25:c9:58:5b:9b:55:
9b:a5:1e:d2:9a:41:91:48:93:00:e4:88:37:02:83:14:30:25:
65:8c:a5:84:f7:ea:a4:4b:20:0b:bf:a8:84:24:e8:e4:e6:9d:
6a:37:f9:9d:cf:5e:d4:97:9a:00:f1:78:ae:6c:7a:83:cb:f7:
ae:32:61:f4:81:32:b5:3d:56:8e:c6:5a:98:28:16:d0:92:1a:
4f:bf:fd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:28:22 2025 by rpki-client