Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/9f130887-e2e2-3f92-bf18-1ec363707acd.roa
File: 9f130887-e2e2-3f92-bf18-1ec363707acd.roa (raw, json)
Hash identifier: hWpVjNJU60n4JmOAyW520YFp0xrQy4JdJOXdT9UR5dU=
Subject key identifier: 70:A3:1B:9B:77:3A:C9:EA:93:56:C3:F8:8D:42:E3:DF:A9:2D:51:BC
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F43285847D87560EB6DD34C7A60DC7CC0
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/9f130887-e2e2-3f92-bf18-1ec363707acd.roa
Signing time: Mon 11 Nov 2024 16:11:03 +0000
ROA not before: Mon 11 Nov 2024 16:11:03 +0000
ROA not after: Sun 09 Feb 2025 16:11:03 +0000
asID: 393347
IP address blocks: 64.190.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:d8:75:60:eb:6d:d3:4c:7a:60:dc:7c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Nov 11 16:11:03 2024 GMT
Not After : Feb 9 16:11:03 2025 GMT
Subject: CN=c88e9e3a-eee6-4999-a790-2344d91da541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:72:81:32:68:eb:d2:a6:aa:78:4d:41:97:53:
17:2b:84:06:b5:62:39:e8:83:c4:90:e1:cb:0d:eb:
ee:a8:36:8a:0b:a3:46:1f:38:1d:cb:67:3e:f6:dc:
24:5b:a0:28:26:c7:5b:a1:fc:1d:d8:4d:dc:2d:b4:
e3:41:f3:03:32:ae:ea:d4:cb:7b:5d:6b:0b:ba:75:
1e:a3:64:f8:48:d2:ac:50:b6:56:68:50:e3:54:9a:
be:a7:b2:7a:76:0a:49:10:62:d1:5c:46:9a:24:a5:
6c:6f:6a:89:e0:5f:eb:5f:9a:64:91:61:8e:04:25:
ce:89:59:52:57:1b:d2:37:dc:c8:2e:f4:1e:13:e5:
23:2e:a5:e1:5a:cc:97:e6:f5:27:bf:be:40:b4:e8:
7a:9d:21:fa:d8:da:86:da:8a:a6:c2:dd:d5:c9:dc:
9d:00:77:d6:f6:36:73:79:a5:90:aa:9c:b2:97:dc:
99:fe:b7:4c:52:60:8b:44:f0:65:46:e4:ba:87:81:
29:a9:ee:15:90:dd:4b:e3:09:be:34:af:a9:4c:38:
fd:58:f5:d9:b0:fd:de:6b:24:d0:47:5e:54:8e:7f:
bf:bb:f5:35:6c:1e:85:77:f2:49:e6:de:36:ee:97:
50:bc:aa:aa:7f:59:3c:86:e7:04:d9:09:c8:ee:92:
c0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A3:1B:9B:77:3A:C9:EA:93:56:C3:F8:8D:42:E3:DF:A9:2D:51:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/9f130887-e2e2-3f92-bf18-1ec363707acd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
64.190.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d3:a1:2a:08:91:36:f1:06:b8:0e:2a:33:90:ca:b4:d7:07:cb:
ec:4a:3d:f0:1d:51:1a:b8:69:47:2c:4c:40:d5:3b:a1:65:5a:
e2:93:6e:0b:58:94:bd:8c:11:9f:dd:84:fd:17:58:b0:f2:25:
9c:4e:2d:04:8d:77:0f:6c:99:b1:3f:c2:05:49:0c:06:9e:4b:
08:d4:ff:22:0b:40:35:7e:99:30:5c:a2:98:79:c2:07:34:8f:
4d:53:6f:d6:19:4d:bd:16:e2:73:05:20:11:ce:4e:3d:19:5b:
d1:4a:69:07:b9:b8:a4:94:13:86:e4:60:dd:f2:42:c3:79:41:
2a:16:25:27:5b:9b:5c:af:27:a7:61:0f:1b:a2:42:64:99:0a:
6a:98:b0:d7:1a:60:84:80:8a:09:ef:ed:90:de:d8:cf:58:74:
5c:52:61:65:50:fc:50:ca:83:69:a6:fa:f8:92:f2:28:e4:d6:
5c:7b:8f:2f:2e:22:02:ac:c6:8f:9a:2d:bc:8e:0e:bd:77:c9:
e5:d3:06:4e:99:0d:6c:2a:dd:02:e6:8b:6f:28:46:d7:5f:f8:
a8:a0:18:a5:30:bc:a3:43:d3:3a:c6:84:29:74:5e:e7:f7:37:
68:a9:4c:f8:2e:26:37:d1:0b:b9:59:0b:69:bb:90:15:e7:c9:
85:73:5b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:52 2025 by rpki-client