Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af069eb2-6c16-4ba9-99c6-9975f320137c/0d36e968-d482-3da5-9764-8a88e70112bf.roa
File: 0d36e968-d482-3da5-9764-8a88e70112bf.roa (raw, json)
Hash identifier: yS5MWGpiY6A71F/ihpRgeRKQ1p01kmSd3wrrUkfyMxg=
Subject key identifier: 7F:20:08:05:C8:E0:1D:20:C0:06:1F:25:E6:0C:D0:D0:15:C8:41:29
Certificate issuer: /CN=af069eb2-6c16-4ba9-99c6-9975f320137c
Certificate serial: 010D0C9F43285848A29B44CE36DC87F6EB6BB1C0
Authority key identifier: F3:82:C4:21:02:08:6B:F2:28:0D:D0:08:5B:1D:23:E0:DB:1F:56:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af069eb2-6c16-4ba9-99c6-9975f320137c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af069eb2-6c16-4ba9-99c6-9975f320137c/0d36e968-d482-3da5-9764-8a88e70112bf.roa
Signing time: Thu 23 Jan 2025 02:00:40 +0000
ROA not before: Thu 23 Jan 2025 02:00:40 +0000
ROA not after: Wed 23 Apr 2025 01:00:40 +0000
asID: 399045
IP address blocks: 64.93.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:9b:44:ce:36:dc:87:f6:eb:6b:b1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af069eb2-6c16-4ba9-99c6-9975f320137c
Validity
Not Before: Jan 23 02:00:40 2025 GMT
Not After : Apr 23 01:00:40 2025 GMT
Subject: CN=d890df91-4c28-4473-987e-a13d46ebf76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a1:45:28:70:c6:9c:84:5e:a5:d3:d5:91:c6:
7b:39:a5:79:a5:99:9b:14:0d:d2:42:a1:1a:c0:66:
58:ab:4a:88:73:bb:72:72:b8:31:6d:9f:99:19:08:
48:38:01:6e:fe:2b:24:08:b4:16:70:46:29:b1:7d:
8c:1e:4c:a3:02:94:20:54:bf:ed:45:7c:d6:de:10:
fe:02:ac:29:20:6f:e3:ba:f3:a6:32:d0:e4:85:76:
7a:89:16:da:1f:57:3a:ea:84:f7:a5:bf:23:01:1c:
30:95:52:c9:05:16:64:7e:4b:2c:c3:16:51:b3:d5:
2e:2c:05:83:6c:a0:f3:04:e3:85:6f:90:46:18:0d:
f0:af:9e:d9:3b:08:a5:e4:a4:42:11:bf:c0:5e:e1:
b8:06:0f:32:95:bb:a3:c9:15:95:b5:fa:d4:9d:6e:
a4:e1:28:79:c9:89:65:7f:30:2c:ae:8c:5e:a1:38:
78:81:41:c5:ff:1d:9c:e9:fd:a3:8f:53:22:f6:04:
79:fd:96:e7:2b:54:a9:fa:cd:71:91:eb:37:72:5c:
ef:63:ad:70:33:a1:26:f4:4f:8c:ee:38:d2:71:1c:
f7:7a:88:0c:b9:19:1d:50:a3:34:ca:95:58:ee:c8:
9f:d7:b5:a8:90:31:b4:48:47:f6:fa:df:b8:b0:79:
1f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:20:08:05:C8:E0:1D:20:C0:06:1F:25:E6:0C:D0:D0:15:C8:41:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af069eb2-6c16-4ba9-99c6-9975f320137c/0d36e968-d482-3da5-9764-8a88e70112bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af069eb2-6c16-4ba9-99c6-9975f320137c/af069eb2-6c16-4ba9-99c6-9975f320137c.crl
X509v3 Authority Key Identifier:
keyid:F3:82:C4:21:02:08:6B:F2:28:0D:D0:08:5B:1D:23:E0:DB:1F:56:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af069eb2-6c16-4ba9-99c6-9975f320137c.cer
sbgp-ipAddrBlock: critical
IPv4:
64.93.80.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:a3:78:6d:0d:c1:b6:da:c9:62:37:71:e5:3c:b8:2b:b1:e4:
bc:8e:3f:ae:db:c9:76:7d:c5:13:25:9d:21:e0:e3:af:dd:64:
27:0b:de:fc:e0:88:58:11:6e:6c:21:0e:8f:2f:7a:6a:86:a6:
3f:17:c1:cf:bc:10:4e:64:7f:44:ac:e0:52:00:79:58:23:1b:
cd:86:b3:e2:38:63:0d:dd:16:51:08:71:b4:ba:5f:39:4e:ed:
82:cd:23:a9:ff:9a:61:97:bb:09:4a:58:91:02:e3:f0:23:a4:
46:36:d6:b1:4d:0f:eb:db:d3:a7:26:7d:be:79:ad:2e:d5:9e:
b1:01:64:5c:45:69:30:f3:73:de:f5:e3:31:19:bf:b8:29:ac:
fd:8e:77:05:69:b6:e7:43:04:8f:1d:6b:51:e8:72:3e:97:7a:
3d:4d:d4:21:72:3b:cb:2e:9d:a9:1a:e6:e3:f0:f1:da:f3:56:
3a:60:b5:f0:6c:71:71:04:34:33:6d:97:10:c7:c0:a6:38:19:
02:fb:48:59:e5:21:0d:11:8e:bf:fd:f0:47:2d:16:b2:04:82:
47:5c:0f:57:89:47:84:9f:ff:2b:f9:a3:90:e6:4f:64:3e:66:
b3:b1:c9:65:f9:20:20:00:70:98:11:96:96:e5:28:32:9f:42:
8d:57:01:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:21 2025 by rpki-client