Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/97af0cfb-35d5-37fc-a9de-ab97821c0309.roa
File: 97af0cfb-35d5-37fc-a9de-ab97821c0309.roa (raw, json)
Hash identifier: ffjfBVC58BcdfURMHuk/46s3zM28DTs0zd9Qjl4iqAc=
Subject key identifier: C5:20:33:24:47:ED:BC:6D:B3:8F:1B:5D:27:8F:54:E6:F6:C1:2F:17
Certificate issuer: /CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
Certificate serial: 010D0C9F43285848F926A52ADCCEBEAF2CF7B7C0
Authority key identifier: C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/97af0cfb-35d5-37fc-a9de-ab97821c0309.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 18530
IP address blocks: 64.38.128.0/18 maxlen: 24
66.114.128.0/19 maxlen: 24
207.115.64.0/19 maxlen: 24
216.9.0.0/19 maxlen: 24
2001:560::/32 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:a5:2a:dc:ce:be:af:2c:f7:b7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=fce82123-2e0f-4c18-aebb-daa39471b4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9a:0d:f8:44:d8:a8:8c:17:14:b2:a1:24:13:
66:d1:75:7d:5f:3a:cb:79:d5:f9:24:43:2f:a9:42:
13:3b:69:75:68:f5:de:a6:b3:8e:ce:7d:91:63:9d:
6c:3c:67:7d:3b:b2:d2:71:2c:a4:14:f2:04:89:d3:
2e:9d:86:40:fe:d5:aa:71:15:4b:29:f1:bb:97:6e:
65:e4:7a:19:99:a9:ac:03:81:d1:1a:56:26:06:3f:
12:5c:26:9e:c9:db:65:01:da:7d:09:de:65:a3:5d:
90:45:05:08:97:3f:50:0c:ae:83:be:28:6d:a4:ac:
a7:c5:6a:86:27:3c:b3:bc:b6:9f:c8:b3:3a:28:89:
d5:73:a1:dc:a8:3c:78:5d:8f:a6:14:55:6d:a4:56:
b6:ea:95:ee:2e:81:b9:89:ec:4d:fe:9a:e4:ff:45:
56:69:af:2e:f6:35:6e:77:ec:e7:e9:cc:9c:7c:f2:
e9:06:fb:6f:42:5d:cb:12:cb:10:30:dc:7c:4e:fb:
28:39:a9:88:31:c3:f5:3c:8e:80:4e:c0:d4:1e:5e:
c6:01:ce:f4:ea:e3:80:97:8e:9f:b0:64:bf:06:f7:
e3:69:76:c5:3f:2c:1f:da:34:4a:99:ca:f1:1c:a7:
94:a8:37:8e:58:f5:6b:dd:a4:79:a2:23:1f:87:f3:
08:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:20:33:24:47:ED:BC:6D:B3:8F:1B:5D:27:8F:54:E6:F6:C1:2F:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/97af0cfb-35d5-37fc-a9de-ab97821c0309.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl
X509v3 Authority Key Identifier:
keyid:C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
sbgp-ipAddrBlock: critical
IPv4:
64.38.128.0/18
66.114.128.0/19
207.115.64.0/19
216.9.0.0/19
IPv6:
2001:560::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:74:6d:65:b4:72:12:e0:c9:8b:02:b2:6c:34:03:d4:10:6b:
17:c7:1f:d2:87:90:27:20:8d:5e:c3:d0:e6:65:d4:5f:9c:e4:
1d:3d:e6:88:4f:25:83:ae:5c:3a:fb:64:15:73:2f:56:35:5f:
d9:c0:e5:23:23:33:e4:d3:3d:0a:df:5a:f0:de:c5:a3:23:b0:
89:26:8e:a9:9b:df:a5:2c:d8:dc:43:13:da:19:ed:36:da:d9:
8e:9e:04:cf:da:38:07:9c:3e:3a:6f:87:33:fe:73:fc:9a:e0:
1f:5e:8c:76:12:7b:4f:5e:c7:19:02:df:97:90:c7:a6:e1:db:
4e:d0:0e:7c:26:83:81:45:0c:5f:70:d6:c4:cc:23:4e:22:ad:
0e:51:e2:d8:a6:e6:68:65:8e:ee:4e:42:83:88:bd:8c:68:05:
3d:18:b6:00:07:19:b6:71:52:15:f5:05:1a:6d:30:02:35:8e:
52:a1:e7:14:ba:7b:f4:f0:b3:a3:14:4a:c7:94:cb:1e:2c:14:
9a:99:4f:6c:71:5d:cf:89:07:ae:af:6f:f7:91:69:c8:10:09:
1d:c4:67:86:ac:a5:96:7e:f5:e4:db:d1:ac:d8:04:e6:e1:f1:
8c:23:5c:20:bd:47:00:61:3e:b0:8b:45:cf:07:e8:95:45:9d:
ea:39:e7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:38:19 2025 by rpki-client