Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/42c626f3-6616-371e-a23f-3647b3c8eb49.roa
File: 42c626f3-6616-371e-a23f-3647b3c8eb49.roa (raw, json)
Hash identifier: KHWig5CpYwyHAvNDDFzHVihtqVghYH1ZZy0Ksx3/j44=
Subject key identifier: 79:E1:82:77:7B:01:30:07:F9:1F:14:8B:6F:4D:DA:C1:D0:F3:58:EF
Certificate issuer: /CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
Certificate serial: 010D0C9F43285848B1F62403F73F08CF89026F00
Authority key identifier: C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/42c626f3-6616-371e-a23f-3647b3c8eb49.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 396032
IP address blocks: 64.38.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:24:03:f7:3f:08:cf:89:02:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=c8b64783-7ce8-4727-a36a-6a8faf0885b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:62:70:d9:30:f0:88:5e:65:76:9d:34:68:5d:
4f:46:a5:f4:9c:95:a5:71:62:b4:a4:dd:11:98:1d:
14:3a:d7:aa:66:50:5a:ec:16:e5:97:2d:39:2d:97:
77:f1:03:3d:19:9f:2f:4f:ce:2d:a8:24:23:32:71:
d4:87:98:b2:a0:5c:cb:94:f2:71:cb:eb:75:06:21:
13:b0:5a:ea:b4:07:51:99:12:3b:76:f1:3b:e0:50:
c4:ff:70:43:a0:f6:d3:0d:fb:59:19:e9:22:46:09:
5a:1d:e3:62:3e:06:97:21:d8:a5:42:46:bd:9a:f0:
3e:24:a4:5e:ac:bd:40:5c:a7:c8:61:97:39:56:a0:
d5:1b:0d:52:ce:b9:ab:04:e7:9b:b3:11:53:e5:ce:
77:cb:c6:cf:81:27:6c:ba:d2:75:f8:bf:51:16:6a:
19:58:0b:4d:15:a4:c9:59:da:cc:61:9f:a1:55:e1:
71:04:84:a3:e9:34:94:9e:de:83:34:e6:21:92:ff:
cb:af:e3:b7:04:60:a1:23:cc:3a:41:f7:f6:24:4d:
a9:cb:ca:ec:57:25:70:03:a1:0d:fd:b7:67:b1:52:
fc:10:a6:62:c2:75:00:44:0c:d7:84:b2:8d:f4:20:
37:79:de:ab:5a:34:0b:e5:88:31:2f:d0:4b:3f:f7:
55:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E1:82:77:7B:01:30:07:F9:1F:14:8B:6F:4D:DA:C1:D0:F3:58:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/42c626f3-6616-371e-a23f-3647b3c8eb49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl
X509v3 Authority Key Identifier:
keyid:C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
sbgp-ipAddrBlock: critical
IPv4:
64.38.146.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:8c:92:66:2b:95:3f:34:7d:a4:15:d7:d5:3d:12:3e:87:7c:
c2:c1:34:44:13:58:0a:11:11:4c:18:52:c1:3d:3e:cb:fd:87:
b5:6c:e0:83:73:1e:70:c9:1b:51:de:26:15:91:30:46:a4:d1:
7e:49:85:30:fc:f5:ef:f8:0c:d4:a7:9c:7e:d1:76:9b:cb:a5:
18:c8:7c:56:94:ff:96:a0:a4:d0:81:d1:ec:24:c7:1a:44:40:
ff:16:e4:11:ed:d7:e5:bf:a3:0d:b1:21:9d:0f:bd:2b:f8:a8:
34:42:d8:d4:78:bd:64:c5:9e:0a:4a:c9:e4:c4:7f:09:8b:12:
8d:e0:8f:04:a0:bb:22:ac:30:22:0e:4a:cc:5b:5d:5a:5c:a0:
90:22:b3:a9:44:45:95:6b:51:c0:19:b8:54:59:52:65:d4:25:
96:55:5c:85:a0:d6:32:e7:a0:f8:ca:20:2b:67:b7:76:ba:7f:
64:ba:a1:38:44:08:ee:db:1c:e6:ad:c4:81:f6:bc:ed:83:b2:
b8:9d:bc:16:27:00:10:1b:16:b9:1b:c8:a8:98:6b:62:c5:23:
79:b6:03:5c:1a:98:a1:b9:00:4b:2e:be:d2:96:75:e0:cf:1c:
5d:ec:68:db:50:81:6a:8a:2e:a5:f2:16:fe:52:ef:25:3d:3b:
28:6a:6f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:23:04 2025 by rpki-client