Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/47eb5d5d-c777-3848-b1e5-bbd321e7f74f.roa
File: 47eb5d5d-c777-3848-b1e5-bbd321e7f74f.roa (raw, json)
Hash identifier: CTmhvt2JXJY+2CJFJkhqgBdBYEMsyZMf+u2F+LgicOw=
Subject key identifier: F4:7C:4C:E2:A4:7E:D1:DA:18:94:38:95:29:80:DB:CF:39:83:EE:EC
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F43285848C84BF55128F81392681B58F0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/47eb5d5d-c777-3848-b1e5-bbd321e7f74f.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 36492
IP address blocks: 64.9.224.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:f5:51:28:f8:13:92:68:1b:58:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=b5df29fe-a82c-41a8-84e5-0c66615f86f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e8:a3:87:23:8c:8d:73:c3:7e:43:cb:18:b7:
58:65:73:0a:84:c3:a0:a4:b9:a5:d9:08:b4:08:c4:
71:79:8a:41:81:20:e1:eb:55:2a:c6:1b:8f:cb:6a:
59:b8:25:e8:3f:1c:ee:43:b8:d7:ca:19:4c:36:4c:
2a:14:bd:e0:31:20:b2:d3:40:69:fd:33:7f:8e:48:
69:60:8e:26:2d:65:64:ff:1f:fa:00:fd:e5:11:87:
94:e6:01:90:7d:f3:64:95:b4:78:3b:f1:9e:12:c9:
ae:da:89:62:e4:ab:12:e5:be:ce:8f:fa:0a:5d:96:
08:82:26:2a:d9:8e:fe:2e:2d:78:e2:4b:52:2e:af:
f1:7b:33:c5:4a:2c:e7:fb:40:cb:51:95:96:a3:21:
5c:98:11:e6:29:0e:74:c0:5c:64:50:e3:05:ab:d2:
b6:dd:4c:c3:ac:ee:6e:c1:5d:3c:1d:a6:80:96:bc:
4c:82:66:0e:e7:a0:5a:b0:d7:54:7f:84:d9:7d:02:
3f:9c:4d:10:96:49:d1:85:d0:58:80:f0:66:79:5e:
9d:9e:1d:75:fc:f4:c9:6a:26:99:c1:53:45:1f:c4:
6c:7d:86:46:65:4b:b4:73:07:f1:d0:9e:0d:a8:2f:
32:0b:69:3d:4e:ba:48:24:72:46:f0:59:9a:95:34:
e6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7C:4C:E2:A4:7E:D1:DA:18:94:38:95:29:80:DB:CF:39:83:EE:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/47eb5d5d-c777-3848-b1e5-bbd321e7f74f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
64.9.224.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:91:bc:e8:11:6a:26:7a:fa:96:eb:6d:f7:09:23:48:33:07:
86:9c:5a:74:40:3b:30:e1:5a:4c:b8:c4:fd:b3:22:c1:34:c2:
1b:b8:2b:b2:81:63:d1:e3:b8:73:45:23:5f:35:de:24:e3:33:
69:f3:9c:dc:6a:5d:37:d2:8e:75:cc:cd:4e:3c:ad:7f:d9:52:
55:c6:0e:14:1b:22:48:1a:a5:e5:3b:5a:69:b9:27:dc:aa:d6:
6e:ec:06:3b:5e:6d:8e:53:5f:6f:82:a7:d2:50:72:62:00:73:
6a:d5:5b:b1:45:c1:9c:b9:00:f2:8c:9a:25:f1:bc:67:0e:06:
bf:61:cf:59:8a:3c:f2:00:d9:6b:49:e2:fe:e1:b7:13:e8:ca:
bb:55:a2:fc:2e:2c:35:ce:20:5f:c8:25:5c:24:73:b9:4f:da:
b4:41:a8:72:5e:76:e5:32:9d:2c:90:83:61:06:03:27:eb:57:
d6:ea:4e:f1:99:8e:f7:f0:a2:4f:6a:3d:7c:95:e0:a9:a6:c6:
58:85:dc:79:ce:7b:a5:58:ea:23:50:a7:19:91:f6:fe:96:dd:
81:27:03:62:4c:6c:04:41:bd:18:92:ec:07:bc:06:2e:31:f9:
68:57:b6:57:61:eb:7e:92:ad:d6:da:ef:14:64:f9:30:bd:a5:
1b:6e:ff:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:41 2025 by rpki-client