Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/d651495b-6e08-3d81-a928-b517cd0cd4f0.roa
File: d651495b-6e08-3d81-a928-b517cd0cd4f0.roa (raw, json)
Hash identifier: 8Es0kkqeae2dhdYuDhzqvgHO3oCZ7yCaoX9EmQFccLs=
Subject key identifier: BE:48:41:7B:FD:08:EC:E2:F7:62:C3:8B:81:B4:FD:89:51:8D:7F:FD
Certificate issuer: /CN=29c10060-705c-45ae-937b-544864b670d7
Certificate serial: 010D0C9F43285848E59BC0531AB4A54EE27C4D80
Authority key identifier: 7A:BB:A3:47:4B:89:BD:BD:31:F7:17:B2:DC:02:B2:94:A1:2E:0B:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/d651495b-6e08-3d81-a928-b517cd0cd4f0.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 27229
IP address blocks: 64.71.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:c0:53:1a:b4:a5:4e:e2:7c:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c10060-705c-45ae-937b-544864b670d7
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=5538dc85-a1d2-4182-9489-21c94994406b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8d:1f:4c:e6:49:c9:96:56:4c:32:eb:63:45:
e3:3f:c6:73:d6:a6:1e:c6:d2:a7:8e:7a:64:0d:f4:
51:bb:87:61:cb:d0:f9:21:5d:be:e5:27:f0:1a:28:
9f:39:db:52:07:d5:1c:f3:f2:a0:d3:19:bf:3a:87:
81:d6:40:e8:5a:82:9f:fb:c1:22:28:4d:c2:93:39:
6b:d7:e6:b3:3d:9c:37:c2:93:59:3f:5b:b6:72:81:
06:5f:53:eb:9f:69:3f:92:e6:64:de:81:4b:1d:38:
41:8a:72:21:3b:e0:6e:e2:92:2f:03:91:4d:c2:24:
66:b7:56:a4:e4:50:22:e2:8d:2a:38:87:0c:00:07:
5c:f8:29:74:2e:74:92:7e:e6:51:c7:69:e0:07:54:
45:c8:86:19:9b:0c:65:35:d8:26:46:e4:fc:74:e6:
ce:8a:31:13:d4:7b:6d:a4:46:c4:86:ab:da:72:35:
1b:c7:ed:e2:68:0b:72:a6:d9:31:7e:12:10:39:14:
f9:eb:a3:67:df:07:58:03:bf:28:73:16:74:5b:da:
cd:a2:20:0b:7c:c2:33:c5:c1:c8:38:a6:61:5e:0f:
13:28:eb:46:02:0d:96:2e:5a:bd:3e:be:ea:27:91:
1b:cd:18:e3:41:03:75:d9:6c:a9:4e:8b:0e:41:94:
82:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:48:41:7B:FD:08:EC:E2:F7:62:C3:8B:81:B4:FD:89:51:8D:7F:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/d651495b-6e08-3d81-a928-b517cd0cd4f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.crl
X509v3 Authority Key Identifier:
keyid:7A:BB:A3:47:4B:89:BD:BD:31:F7:17:B2:DC:02:B2:94:A1:2E:0B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer
sbgp-ipAddrBlock: critical
IPv4:
64.71.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:5d:65:53:27:1f:1e:3f:d0:d6:74:a4:a2:a0:a7:09:05:a2:
95:60:c6:7e:9b:1a:17:21:c8:00:2e:1c:b8:a7:65:b4:25:d8:
66:b0:9e:77:e5:01:2f:d8:f9:0a:14:de:de:85:98:15:d9:18:
7a:8f:86:45:55:b3:a3:ff:20:51:77:ae:9f:93:56:d7:37:40:
b9:75:70:0e:c6:01:66:31:62:e2:ae:ff:5e:88:33:2a:ab:20:
94:fb:8c:e7:ab:25:a1:24:7c:e4:ab:8f:4f:3b:7e:d9:15:c9:
40:fd:f6:3a:a6:13:38:99:1d:9c:f6:49:3d:40:fd:e7:6c:79:
92:b2:14:ab:bc:2d:3b:3f:94:92:54:c1:2f:7f:85:3b:c5:cc:
0d:33:79:35:60:78:31:64:1a:40:9f:73:e8:4f:97:55:8d:e4:
70:44:44:76:14:5b:ae:36:85:12:7a:c2:ef:f5:aa:04:e6:c1:
03:92:6d:36:7f:1c:c5:b7:af:2d:32:39:c0:24:23:8f:da:59:
45:1e:9b:0f:2f:57:81:49:2e:e4:a6:4f:3c:84:a0:64:25:65:
34:b5:82:05:b7:aa:a2:5a:2c:45:34:69:a8:7f:8f:82:da:19:
41:bd:77:07:a6:36:df:78:ac:4d:aa:19:00:fe:59:15:95:54:
55:a4:f6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:36 2025 by rpki-client