Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/add0a9ff-c124-381c-9d60-5f74979be3f7.roa
File: add0a9ff-c124-381c-9d60-5f74979be3f7.roa (raw, json)
Hash identifier: tW43bt3IJwPygMiNJfrYYstE3fUvzgD4AnfiVv1P0pY=
Subject key identifier: 5B:C0:16:7A:86:6C:6F:10:3E:EE:BD:C6:24:45:94:C0:8E:B1:98:6E
Certificate issuer: /CN=afc2bf64-2cba-4362-8b12-56844da30e4e
Certificate serial: 010D0C9F43285848F0C66BECA8C0678CFD935B00
Authority key identifier: 43:5D:5A:CD:27:CD:09:AF:C9:76:63:2C:28:78:AF:73:FA:9F:5F:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/add0a9ff-c124-381c-9d60-5f74979be3f7.roa
Signing time: Thu 20 Feb 2025 02:00:40 +0000
ROA not before: Thu 20 Feb 2025 02:00:40 +0000
ROA not after: Wed 21 May 2025 01:00:40 +0000
asID: 14343
IP address blocks: 64.26.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f0:c6:6b:ec:a8:c0:67:8c:fd:93:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afc2bf64-2cba-4362-8b12-56844da30e4e
Validity
Not Before: Feb 20 02:00:40 2025 GMT
Not After : May 21 01:00:40 2025 GMT
Subject: CN=c6acc0d0-b828-4a05-81e4-d6b4c9b0847f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:64:d7:49:5c:68:c4:8c:fd:f1:01:33:9f:1e:
26:82:e7:7e:9c:04:0a:45:5b:81:4c:20:b1:83:e7:
5d:43:21:ff:4b:73:77:07:9e:4a:1d:ab:58:ad:1b:
62:bb:98:ce:ca:38:7d:2d:b8:47:f4:72:ae:55:82:
10:d8:2d:18:7d:a3:9f:01:cc:7f:14:ae:af:ee:30:
50:c7:44:a1:da:de:f1:ac:4f:bf:e2:cd:b1:3f:61:
81:02:6b:0d:66:9b:04:bf:d9:0e:8c:32:6f:c6:ad:
81:10:48:fd:73:c8:04:bf:da:20:9d:ff:f4:f5:e5:
a4:99:75:ed:64:08:5f:fe:15:86:d9:8d:e7:86:bc:
a6:84:53:54:eb:ab:e8:a9:28:a2:1e:b9:4f:0f:64:
8b:08:dd:ce:18:43:1f:a0:ff:ad:f6:92:27:2b:22:
7f:66:ae:6d:24:0b:ca:da:10:24:cf:a7:88:d8:45:
fa:fe:42:59:bf:18:81:2a:10:99:5d:36:3b:7a:99:
20:52:cf:88:ca:72:04:97:46:66:11:99:7d:6b:75:
64:04:53:9c:51:68:5f:81:21:c9:74:98:c7:63:a9:
90:1e:8f:d1:0b:26:58:ff:cc:11:22:42:01:ea:1e:
c0:f9:85:0f:0f:25:97:32:24:af:01:93:b2:52:62:
f5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C0:16:7A:86:6C:6F:10:3E:EE:BD:C6:24:45:94:C0:8E:B1:98:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/add0a9ff-c124-381c-9d60-5f74979be3f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/afc2bf64-2cba-4362-8b12-56844da30e4e.crl
X509v3 Authority Key Identifier:
keyid:43:5D:5A:CD:27:CD:09:AF:C9:76:63:2C:28:78:AF:73:FA:9F:5F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e.cer
sbgp-ipAddrBlock: critical
IPv4:
64.26.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:c5:db:31:de:75:c8:09:51:73:bb:cc:24:af:9d:a3:99:53:
fc:1b:ca:ca:f3:ca:7f:90:53:3e:d1:76:01:fb:92:90:44:24:
b5:72:e0:18:37:29:fb:71:c2:e0:21:b0:4e:12:8e:76:81:0c:
ed:31:59:ca:97:b5:80:e8:52:06:3c:5b:e3:9f:bc:09:79:dd:
45:ba:b2:90:58:6e:9c:5b:fc:f2:ca:41:59:d6:ec:18:98:72:
62:1b:fa:19:44:8d:0d:fb:ba:e3:eb:ea:18:e8:e2:55:0f:ed:
af:32:fb:63:e3:cb:dc:de:db:26:09:ff:f0:64:4b:3e:0f:c8:
f9:45:c0:81:72:6d:c9:a1:bd:b2:5b:83:be:fc:00:6c:d0:61:
c4:49:bf:91:cc:d5:c8:50:74:37:59:9f:eb:05:0a:24:81:41:
22:10:b7:dc:12:4c:0d:ed:70:e9:72:8c:ea:4e:c3:fe:6b:6b:
83:c3:b5:c4:9a:0b:0b:6f:7f:9d:f1:31:b5:e6:4f:11:0e:dd:
b8:bb:ce:ac:45:96:12:c9:68:d1:85:dd:43:98:2e:f1:a1:10:
47:5c:8a:17:a6:48:48:45:34:96:9c:47:27:8f:c3:b3:79:6e:
34:cf:68:4e:71:3a:0b:49:b5:7a:74:82:d6:02:f3:b8:f2:06:
44:c5:e7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:35 2025 by rpki-client