Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/fe55b376-4f8a-303c-a275-778287cb6142.roa
File: fe55b376-4f8a-303c-a275-778287cb6142.roa (raw, json)
Hash identifier: K08eZC4j0+VDJrNqsjY8XWsY/WofEyPhUh2d8sukl9Y=
Subject key identifier: 3F:10:FA:9E:E1:03:E9:C1:02:7D:FB:53:F1:D0:5D:16:40:08:A6:AD
Certificate issuer: /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Certificate serial: 010D0C9F43285848E59BCA19726E1DEC5B9A3A00
Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/fe55b376-4f8a-303c-a275-778287cb6142.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 2906
IP address blocks: 64.120.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:ca:19:72:6e:1d:ec:5b:9a:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=b5fa540b-fe04-4b5e-91b9-c8344c178eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f7:4d:67:17:45:68:38:76:32:9a:67:6c:80:
45:59:d6:19:62:50:5b:10:a3:7d:e4:50:d9:f7:6b:
58:e4:e3:4c:61:f2:b9:e5:66:ae:ab:ed:9c:01:b8:
07:0e:2c:86:f4:3f:49:6b:b4:07:54:5b:95:73:fa:
56:1b:93:05:f4:48:d0:b2:d7:24:0d:ce:c0:58:73:
b8:1d:25:ea:f5:92:a4:3b:1c:71:65:22:b0:43:6d:
a2:61:60:fc:92:8e:aa:f2:f2:6d:4a:3f:8d:cf:f0:
cc:7b:b1:f6:c2:2e:d0:24:4d:31:7c:19:5b:f1:f2:
39:6e:a0:50:b7:93:35:2b:d0:74:33:22:eb:86:53:
5c:79:40:51:73:f1:43:c6:29:5a:46:52:47:dc:27:
6a:0c:e4:2e:dc:d5:62:18:24:07:6e:b0:14:d8:36:
45:d4:a9:78:eb:a8:c2:07:15:03:60:cd:e0:53:c8:
62:89:10:52:f8:02:7e:28:41:9b:53:b2:1a:a1:39:
18:1a:c2:fc:0b:2b:a8:ba:35:af:59:f4:c3:2f:f9:
13:c0:d6:1b:ba:28:46:a6:c0:e1:9b:7e:15:56:71:
71:db:51:94:aa:37:14:12:05:9c:f2:e0:2f:05:6f:
4e:f0:7e:08:32:db:2e:9f:9e:1f:f3:72:26:0e:9a:
9a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:10:FA:9E:E1:03:E9:C1:02:7D:FB:53:F1:D0:5D:16:40:08:A6:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/fe55b376-4f8a-303c-a275-778287cb6142.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl
X509v3 Authority Key Identifier:
keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
sbgp-ipAddrBlock: critical
IPv4:
64.120.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:b0:f4:c6:39:76:71:2b:65:49:48:f7:44:d9:a6:bb:e0:71:
7e:74:c7:9c:2b:39:54:e1:95:07:d9:93:a1:a7:b8:33:87:bc:
d8:ef:77:9d:6e:f6:cb:44:3e:df:1b:1d:ba:53:34:5d:96:53:
63:6c:d2:ff:a7:aa:02:7f:ab:fb:52:1b:bd:72:9a:fb:3b:49:
e0:c7:4f:86:d8:5f:ca:4d:85:08:f7:c3:d0:74:dc:3d:1b:90:
df:1d:a3:22:ca:57:fb:e5:d0:20:c1:e5:c5:9c:65:07:52:35:
03:8d:79:36:3d:f7:ac:44:b7:33:24:cc:7e:98:b3:36:ea:17:
f8:8f:74:4a:1f:04:33:4e:4d:18:14:4e:c7:bc:d3:5d:cd:96:
07:dd:15:fb:b6:f8:4a:be:ee:1e:76:75:34:6e:a9:95:0d:43:
20:36:6e:e7:a8:72:24:37:cd:95:80:b0:09:46:95:98:a1:00:
95:ff:4d:78:69:4f:da:8a:b9:a9:23:25:ec:bd:ca:c1:83:85:
75:fd:de:a5:67:04:e5:4a:27:f3:be:9b:49:f6:41:33:f2:f2:
a5:90:88:ab:d2:93:fc:7e:a8:f0:5b:16:20:59:83:73:6c:12:
9f:80:d3:72:ea:60:4a:eb:56:23:a2:c5:ea:01:e4:12:05:c3:
12:ef:0d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:39:42 2025 by rpki-client