Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/920637bb-df7d-3d84-9521-aa07d0bf2e1d.roa
File: 920637bb-df7d-3d84-9521-aa07d0bf2e1d.roa (raw, json)
Hash identifier: 0keslsGAPyK3SuCM3kwbJWJfvrzLKiqErLQY7XsJsCQ=
Subject key identifier: FB:26:2E:8B:2D:D1:97:9E:C8:38:4A:3D:1B:83:4D:BB:D0:4E:F6:3E
Certificate issuer: /CN=64d7cb2e-117c-431e-95aa-a0cc4c2d89bb
Certificate serial: 010D0C9F43285848BE8632048E08F3AFB99CF600
Authority key identifier: 34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/920637bb-df7d-3d84-9521-aa07d0bf2e1d.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 14618
IP address blocks: 166.98.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:32:04:8e:08:f3:af:b9:9c:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d7cb2e-117c-431e-95aa-a0cc4c2d89bb
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=25bc9cf0-4b5b-4140-b442-e89558001d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fc:e1:7f:81:83:20:ef:93:fa:79:a2:b8:c7:
f2:a0:0a:d0:c9:cf:5b:1c:de:bf:82:f6:c3:4b:29:
b4:43:fc:26:fb:51:0d:71:a4:ea:f4:90:fc:c2:fd:
bf:34:e9:9b:45:77:19:12:29:3b:de:86:7a:ed:d4:
f8:df:d5:b6:96:18:cd:d5:ab:ed:b3:df:10:dc:bb:
92:d0:11:54:0d:2e:70:41:1d:e8:a0:89:e5:44:dc:
81:5a:ed:f3:da:48:23:a8:10:e9:4d:87:9b:79:68:
3b:83:5b:fc:88:23:af:28:60:ae:aa:ea:a4:25:46:
65:fb:20:e4:ad:05:8d:c2:dc:94:c2:b9:c4:d4:dc:
83:cc:c5:18:84:05:61:b8:af:ca:2f:22:32:5f:2d:
e6:6a:d1:16:7f:fa:26:b7:b1:d4:37:42:35:56:74:
1a:40:b4:47:d6:bb:97:6f:a0:9d:75:58:ff:12:66:
b3:eb:9a:e3:29:a6:6e:a5:47:e9:11:87:ad:cb:12:
fc:9d:1e:a7:51:08:e4:e0:18:0b:26:52:75:46:27:
7b:56:36:53:4b:50:81:89:c9:9c:94:f5:c6:86:c6:
d5:19:4b:c6:b0:6b:99:0d:20:80:df:e4:f0:db:0d:
c4:58:b0:77:49:94:eb:c2:e5:25:29:f0:f7:7e:6f:
30:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:26:2E:8B:2D:D1:97:9E:C8:38:4A:3D:1B:83:4D:BB:D0:4E:F6:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/920637bb-df7d-3d84-9521-aa07d0bf2e1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.crl
X509v3 Authority Key Identifier:
keyid:34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer
sbgp-ipAddrBlock: critical
IPv4:
166.98.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:7e:83:e5:7f:41:a2:f2:42:f1:d4:36:71:d1:4a:01:eb:14:
88:86:64:d2:6a:29:be:ed:a7:bc:03:00:14:28:0e:25:69:44:
fc:ff:35:27:b7:d0:2b:7e:0a:5c:ed:d2:7d:73:b3:c0:3c:9b:
cd:11:63:72:dc:f1:ba:f4:0d:11:a0:60:f0:72:1a:57:c0:60:
20:24:d7:50:f2:59:4c:be:63:0b:fa:32:56:3e:84:45:8b:e5:
ea:6a:a2:c6:12:2b:0c:6a:a5:f3:52:9e:42:cf:b6:c3:67:fb:
b9:44:75:82:11:55:fc:e6:a9:0f:3d:d1:4e:3a:5b:5d:15:89:
63:78:94:97:49:ef:c7:b0:a0:76:09:04:d9:a0:b6:74:1a:26:
cb:28:b4:6e:40:02:5a:b1:7c:e9:60:c8:bc:4c:4d:42:02:d7:
3a:96:f6:7b:e8:89:b0:3d:be:a4:df:c7:85:dd:fa:6a:65:5b:
c1:23:ab:19:17:65:cb:1c:5f:dd:af:1e:b6:fc:3b:77:39:e5:
81:38:c6:dc:04:6a:0d:85:60:cf:ef:3c:e0:b2:23:f0:3f:d4:
60:3a:6e:83:9d:02:87:51:14:95:af:e1:3e:ac:43:a8:4b:da:
19:c3:72:a3:50:35:6b:27:12:28:31:d4:95:98:43:00:23:f9:
eb:7e:e6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:38:22 2025 by rpki-client