Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/1f024507-bec7-3fa8-9e70-86a5d6d3d1a8.roa
File: 1f024507-bec7-3fa8-9e70-86a5d6d3d1a8.roa (raw, json)
Hash identifier: 0kgqlu2aVFKU7jcV6LvX06At5rQRflRsZEgxId2ffqY=
Subject key identifier: E3:E6:21:D3:A0:B0:5C:76:07:A9:E4:23:A9:61:DB:98:1C:97:6C:6A
Certificate issuer: /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial: 010D0C9F432858490021596341FAC6524831FC40
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/1f024507-bec7-3fa8-9e70-86a5d6d3d1a8.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 6142
IP address blocks: 64.39.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:59:63:41:fa:c6:52:48:31:fc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=11553237-19e6-4963-a98d-342f4b41e69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b1:c0:2f:28:ed:5d:ef:d6:e1:e8:96:66:a5:
eb:76:03:3f:ba:30:56:ff:5a:55:02:5f:25:65:c8:
f8:96:a3:d0:8b:99:3d:a5:a5:09:73:10:34:3a:3e:
3f:92:87:7b:73:7c:de:4f:fd:c0:6b:6d:bf:b9:1d:
8b:9b:7f:49:7d:2d:9a:ee:1e:d8:53:24:b3:a3:67:
07:6f:24:08:55:8f:39:fa:86:02:13:01:8b:27:7c:
82:a3:45:77:b6:82:7b:ef:d6:1f:22:37:60:ab:7b:
0d:5e:ec:31:f0:67:a9:99:d5:eb:dd:81:0d:72:8c:
3c:3b:54:ac:2d:42:dc:e0:38:ee:7b:52:b4:19:d0:
a5:b7:ef:ef:ad:d4:0e:1b:a4:c2:0a:73:f4:2a:4f:
0b:99:7c:a5:a9:d3:69:15:11:9b:b4:b0:48:fe:d7:
fe:be:04:a8:50:e6:c6:6f:6e:c1:04:ea:02:33:b0:
71:a8:78:4e:32:ab:00:43:93:59:b3:4c:63:9e:dd:
64:3c:79:45:b6:3d:06:7d:c4:06:2b:31:0d:98:84:
5e:83:a5:d9:8e:bb:29:34:53:24:f6:47:45:c8:b1:
43:83:05:a2:37:ee:3d:33:f6:45:49:32:30:06:5f:
91:b6:cf:d3:d7:ab:56:92:e1:65:fa:5a:6f:46:cc:
ad:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E6:21:D3:A0:B0:5C:76:07:A9:E4:23:A9:61:DB:98:1C:97:6C:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/1f024507-bec7-3fa8-9e70-86a5d6d3d1a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
X509v3 Authority Key Identifier:
keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
sbgp-ipAddrBlock: critical
IPv4:
64.39.98.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:45:84:22:ce:88:b1:24:e6:46:e9:42:93:2c:cb:85:64:73:
ae:cf:b5:1b:fe:56:6c:70:5c:07:08:a9:94:29:9f:9c:ae:f8:
9f:f1:31:cb:1c:6a:24:3e:d5:82:6b:3c:b5:39:06:f1:ae:17:
a1:8e:ef:a8:4c:d1:c6:5e:b6:62:44:9b:f9:86:6d:91:91:5e:
bf:f0:67:ec:01:a4:ff:8b:d0:31:fd:77:09:7f:fe:92:60:0f:
bc:70:18:94:43:a8:ba:57:db:ac:df:af:09:38:66:89:5d:8e:
50:4b:8a:d1:3b:ea:84:91:aa:ac:04:d0:69:33:a4:98:bb:dc:
00:88:46:f2:62:22:fc:ce:b9:4a:32:97:18:b5:e0:07:f6:a4:
4b:a9:e9:82:fe:8f:dc:50:e1:fe:54:aa:0b:84:70:09:95:1b:
3f:3f:00:91:1b:a1:2c:17:05:4f:cb:87:50:ca:1e:08:53:d5:
81:fd:84:fb:f8:5c:3e:3a:ff:3d:3d:32:d5:2c:6c:8d:9c:c4:
f3:78:ab:80:90:01:aa:1f:45:fb:b2:4a:a9:28:b1:ac:87:d6:
92:46:86:32:c9:41:19:97:ee:df:27:b0:3b:81:a8:06:81:02:
64:d4:68:0f:cc:b2:b4:96:e2:3f:2f:1d:47:85:9c:61:fc:3a:
96:bf:19:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:15 2025 by rpki-client