Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2dc8644f-88a8-3d7d-9a4e-1b1abb47f791.roa
File: 2dc8644f-88a8-3d7d-9a4e-1b1abb47f791.roa (raw, json)
Hash identifier: DBMgkm9d9UH2ED8EsJcUrmbSMzRebybrB46AJwSb6Z4=
Subject key identifier: 87:BF:C0:3C:86:D1:2E:26:EE:F2:4F:BD:B8:EF:E8:4D:32:2C:D8:5F
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F432858493C093E6C2802F13B682C55C0
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2dc8644f-88a8-3d7d-9a4e-1b1abb47f791.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 15204
IP address blocks: 64.33.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:3e:6c:28:02:f1:3b:68:2c:55:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=fe1b2b62-6900-4f03-947f-d89540b6b783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ab:dc:05:7f:ee:e3:43:65:cb:b1:cc:8b:dc:
ec:e2:e4:e5:33:ea:02:6e:7f:6f:f0:c3:ad:c4:dc:
3b:8d:4c:b0:77:69:b1:ba:6e:6c:fa:e2:eb:1b:be:
d2:54:87:2c:14:d3:05:03:bd:a1:73:9b:fd:50:ce:
af:a7:03:a7:4a:dd:99:97:58:75:7e:d6:45:c3:f7:
35:95:79:13:92:76:77:e4:89:4c:72:b0:99:95:f1:
b9:fc:ec:8b:cb:ab:87:66:fb:74:80:58:17:ed:4d:
ad:09:07:70:aa:8f:81:ba:31:91:4e:34:8d:f7:2b:
89:42:15:76:be:8b:bb:9d:68:c3:ef:64:80:1c:97:
87:3c:c7:5c:23:ed:a9:78:9d:76:5b:84:1f:b7:16:
d2:ef:fe:e0:ce:22:b6:03:5a:a6:f2:e6:71:95:5e:
a5:39:bb:0d:4f:91:c4:b6:29:48:64:3e:28:99:6d:
e6:af:a9:3d:e1:ea:b1:5f:4c:0e:0f:2d:1d:f0:43:
3d:07:f8:4a:f1:d9:c7:18:3e:cf:19:ae:8a:d3:2d:
28:c2:8d:7b:97:bc:08:61:3b:77:ae:aa:55:df:86:
96:9b:98:41:13:39:5e:82:d0:63:1a:cd:d5:97:56:
f8:34:46:99:96:03:75:2d:64:7f:7c:4f:90:6f:4b:
43:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BF:C0:3C:86:D1:2E:26:EE:F2:4F:BD:B8:EF:E8:4D:32:2C:D8:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2dc8644f-88a8-3d7d-9a4e-1b1abb47f791.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
64.33.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:43:04:a2:e6:8f:c2:a9:1c:14:fe:ca:c6:e5:eb:ec:bd:20:
6b:6b:75:0e:c3:c3:f9:34:05:24:78:97:7f:aa:6e:15:b7:00:
65:32:25:34:b3:ab:94:ac:31:2b:5f:40:46:9f:af:49:c0:80:
0c:58:02:bf:cd:ea:11:4f:c9:66:d3:44:63:1f:f9:12:c2:a3:
23:22:d7:71:95:45:d2:15:ce:91:55:6f:3f:28:dd:86:a0:69:
7f:b3:6e:9d:da:ea:ce:59:c6:e4:e1:95:53:d1:62:10:77:61:
ea:87:ad:c8:bf:ef:a7:0c:d1:29:e6:a1:05:4e:8e:d4:c3:91:
22:6e:7d:51:86:8c:c2:3f:43:bd:73:cd:d4:90:75:b2:f8:2f:
d4:13:30:4d:af:5c:9e:35:8a:1d:45:26:30:83:6d:d6:8d:87:
8f:13:46:2b:f4:68:fb:e4:2d:fb:8a:9f:24:05:74:82:0e:ed:
8c:87:3a:d5:93:2d:cb:05:0e:af:bb:0d:32:ca:29:d7:7d:77:
81:2d:1d:a1:ac:79:ae:18:9c:c4:c1:5d:6a:4a:e5:5a:45:1c:
ea:29:83:3a:64:c9:31:a6:5d:29:2e:93:7e:c1:83:eb:de:f5:
7f:21:e2:8a:14:00:5c:57:1f:6a:de:f0:c9:de:ac:26:81:6f:
5e:90:99:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:05:53 2025 by rpki-client