Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/c75b84f1-3d27-372d-be12-4dd1aa1548ba.roa
File: c75b84f1-3d27-372d-be12-4dd1aa1548ba.roa (raw, json)
Hash identifier: 4bkt+65DISn2+axPshLT5W3eZIy0eiiiBY5OSzWBCWs=
Subject key identifier: 41:70:37:BC:AB:1C:CD:16:59:9D:B8:BF:73:62:92:34:83:10:6F:DA
Certificate issuer: /CN=9f4a0908-708d-490b-9f22-60855d3d69b3
Certificate serial: 010D0C9F43285849071BE5F5603BDC74BE063B80
Authority key identifier: 4B:A1:AF:02:F6:57:F1:AC:8C:2A:41:4E:2F:85:84:70:50:DA:81:A6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/c75b84f1-3d27-372d-be12-4dd1aa1548ba.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 209242
IP address blocks: 64.69.24.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1b:e5:f5:60:3b:dc:74:be:06:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f4a0908-708d-490b-9f22-60855d3d69b3
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=b313cd54-bced-40d7-a5af-ee85651abcdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:29:72:0b:db:85:30:52:49:de:3c:09:f1:70:
7f:a9:8b:8c:73:ea:0b:f6:04:79:f7:45:65:07:e0:
95:ab:6d:24:e0:ae:aa:97:33:68:b3:32:7f:23:a5:
e7:87:d9:07:9b:39:da:ff:51:9a:57:2e:b3:f8:b1:
32:47:bb:6d:6b:a3:b0:9e:43:c7:3f:88:16:2a:b4:
ad:44:d4:5e:bb:b9:91:0f:19:3c:1c:5b:08:3c:b2:
3c:79:76:69:a3:64:c3:dd:21:9f:60:8f:d9:ed:49:
ca:bd:42:1e:f9:92:3e:5f:ed:e1:df:dc:a7:3c:6f:
35:7d:0d:73:d5:fc:c1:82:cf:e6:85:f6:dd:7c:7c:
b9:22:77:0c:6b:2b:e2:4f:f2:f0:77:22:e5:2c:55:
75:f6:39:1d:13:3d:f0:8f:a4:b3:5f:16:1d:6e:6e:
2f:ce:3e:ee:a6:f0:4e:91:d4:a1:e6:0b:65:67:bb:
cc:84:0d:d5:bc:72:a2:eb:0e:d5:63:0d:dd:56:77:
98:14:57:18:17:0c:3b:05:64:f9:66:34:3d:f9:fa:
81:67:a5:ab:b5:01:36:dc:9f:50:37:7d:c5:28:9b:
de:d4:14:c4:74:d3:a6:3c:59:7b:a9:95:4b:d7:0c:
47:82:09:f9:b9:eb:f0:c9:c2:23:8b:70:1f:de:7c:
14:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:70:37:BC:AB:1C:CD:16:59:9D:B8:BF:73:62:92:34:83:10:6F:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/c75b84f1-3d27-372d-be12-4dd1aa1548ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/9f4a0908-708d-490b-9f22-60855d3d69b3.crl
X509v3 Authority Key Identifier:
keyid:4B:A1:AF:02:F6:57:F1:AC:8C:2A:41:4E:2F:85:84:70:50:DA:81:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3.cer
sbgp-ipAddrBlock: critical
IPv4:
64.69.24.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:fb:04:cf:d7:28:e1:4a:a7:11:ba:10:fa:66:aa:a0:7a:48:
10:53:d8:cd:ec:9f:c1:3d:a2:25:f6:a5:ea:b2:42:35:98:5c:
15:46:7f:14:7c:ea:18:d0:b7:ac:26:d4:48:98:7a:b4:f6:9a:
a5:ea:b5:18:36:b4:d8:df:d8:96:0e:73:52:a0:77:44:1b:a8:
91:a2:e7:c1:67:04:a8:a0:95:21:44:41:1c:53:85:eb:5c:9e:
ee:60:b1:3d:53:f9:04:56:fb:31:c2:42:87:aa:1e:62:e5:85:
0d:95:fe:21:ab:1e:29:6d:cb:86:6d:99:7a:b9:ce:62:24:fe:
02:49:6a:d1:c3:a1:43:63:db:5e:32:34:15:d1:85:d0:3d:2e:
01:9c:8e:dd:f1:e7:51:a9:c4:62:59:63:d1:a9:82:15:90:b0:
3e:7c:5e:bf:57:b1:97:95:49:3f:35:d3:9c:2f:72:94:b6:f1:
a8:f4:b5:ab:00:0f:c6:61:85:44:21:33:5a:1f:7b:11:1d:00:
83:e8:d1:80:09:dc:f2:dc:b3:f1:e5:b0:e8:e6:d2:d5:ba:82:
d7:8a:55:b1:23:80:0d:0d:49:c4:8f:b4:7f:c3:8e:34:13:77:
65:88:6a:c2:16:a2:e8:23:59:df:07:b4:35:c4:89:c8:0c:43:
d2:f9:43:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:12:06 2025 by rpki-client