Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/473470cc-3113-3cbd-b25f-49b8c9c6957b.roa
File: 473470cc-3113-3cbd-b25f-49b8c9c6957b.roa (raw, json)
Hash identifier: ymSEiHDY0FvfKIsP0QiP3uIOpCkI4SMjotvQqB33Ycw=
Subject key identifier: 0E:EA:A0:84:B1:17:54:0C:FF:54:F4:6E:C3:88:FB:51:E3:71:96:A4
Certificate issuer: /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial: 010D0C9F4328584891DB3250507A7B8F52BF4100
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/473470cc-3113-3cbd-b25f-49b8c9c6957b.roa
Signing time: Fri 17 Jan 2025 02:00:40 +0000
ROA not before: Fri 17 Jan 2025 02:00:40 +0000
ROA not after: Thu 17 Apr 2025 01:00:40 +0000
asID: 27176
IP address blocks: 64.40.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:91:db:32:50:50:7a:7b:8f:52:bf:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Validity
Not Before: Jan 17 02:00:40 2025 GMT
Not After : Apr 17 01:00:40 2025 GMT
Subject: CN=30cecb98-78c7-4a59-915f-bae422d4176d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:22:ad:76:db:da:cc:85:fc:31:60:ee:5e:c5:
1d:59:2d:65:f7:7c:8b:03:91:d8:85:40:39:6c:83:
8c:c3:82:51:38:a7:cf:2a:59:ab:60:f8:fb:f9:2f:
13:89:13:36:b4:fa:3c:02:60:ed:74:11:50:b6:67:
28:81:53:05:90:d5:e7:10:1a:c5:87:57:da:e8:ad:
dc:a4:16:a7:d4:50:59:82:5c:63:79:af:52:3c:bf:
a9:ba:47:41:93:c4:67:71:dd:df:7d:19:ec:50:5e:
bc:16:77:48:36:69:b3:2e:ea:3f:19:69:bc:a4:3a:
ca:1c:5d:f2:b6:8c:86:51:b8:71:aa:92:a7:4a:9c:
98:8c:0d:65:6d:80:33:67:a8:64:5d:f6:46:54:5c:
86:c6:0b:36:6a:8a:34:9a:85:11:74:83:18:b0:56:
fc:11:1e:6f:57:3e:2b:69:bf:6f:87:97:d4:88:0b:
e2:27:03:58:2f:2d:2d:ba:e8:91:35:17:28:7d:b0:
5a:df:21:61:f0:15:9b:15:aa:ab:19:89:98:05:70:
a0:51:e2:ba:58:0a:00:6e:50:7f:e1:20:8f:a3:2b:
e6:41:bf:d0:64:62:d2:71:d0:07:ff:9c:01:f7:35:
fd:eb:80:06:ee:ed:cf:ea:a2:e5:60:b7:2d:15:2e:
cd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EA:A0:84:B1:17:54:0C:FF:54:F4:6E:C3:88:FB:51:E3:71:96:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/473470cc-3113-3cbd-b25f-49b8c9c6957b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
X509v3 Authority Key Identifier:
keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
64.40.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:ea:8e:fb:fb:89:6a:e0:db:94:6c:be:3b:41:5c:e0:cb:31:
51:bb:79:62:5a:54:a6:9b:c1:d6:be:d6:6f:22:7b:76:79:59:
e3:d7:d7:85:38:6e:11:4b:00:10:b1:ee:34:51:4f:ef:f0:66:
e4:0c:7d:53:b1:02:ba:01:eb:b5:b3:73:25:89:1f:d4:5d:22:
8f:8c:84:b6:03:c4:e7:ca:87:f0:05:be:f9:1b:fb:92:08:ce:
52:0c:d7:b5:1a:bf:a0:11:a5:99:66:d8:0f:68:cb:5d:c1:9a:
b5:6f:bf:81:b2:b7:7b:f0:f5:7c:23:ce:bb:bd:c2:d7:ba:0a:
58:35:44:55:0d:4c:18:44:4a:09:cd:97:f7:fa:25:8e:bb:c1:
9d:53:ff:a0:fe:32:bb:4a:6d:79:46:8e:3a:76:14:ab:54:fd:
e6:98:9a:1c:ce:db:7f:e2:e3:97:fa:d0:b7:16:91:bd:45:96:
f3:ef:c9:17:6c:ce:a2:58:09:b9:63:74:8e:68:2a:38:2a:1d:
f8:ed:bb:5c:ad:8e:49:20:16:98:0d:6f:76:37:b8:48:35:30:
f5:9c:33:8d:6e:f9:44:a9:6f:6a:df:27:25:4c:e4:dc:b6:7c:
a5:7c:71:11:bb:88:e5:48:25:fd:f6:35:f9:df:38:14:44:fc:
e0:8c:05:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:38:46 2025 by rpki-client