Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa
File: 3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa (raw, json)
Hash identifier: pvaHqsWSRYrT88Pp6vnPAm9js+0A0WoyF9MwBSpTtjg=
Subject key identifier: D4:85:75:62:F6:75:57:DE:35:B4:28:C3:CD:DE:98:05:3B:24:56:90
Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9
Certificate serial: 010D0C9F4328584902EC06A866592F736219AEC0
Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 14618
IP address blocks: 64.52.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:06:a8:66:59:2f:73:62:19:ae:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=4a3e2b50-0c5d-41a0-ab0a-cacd33f8cdef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4d:74:e5:ab:38:ff:7d:98:48:8b:d6:f4:ae:
4b:61:89:22:0a:7e:88:36:2b:86:31:f5:ff:86:1e:
82:5f:26:50:63:0c:61:bb:d0:bd:af:61:76:3a:a3:
ff:56:9a:7a:be:bb:3c:5b:aa:6f:1a:e3:3b:e7:59:
1e:51:b2:8b:5c:14:71:50:b8:96:51:72:3e:eb:73:
a4:9b:c2:81:63:e2:3a:9d:4f:e5:f1:e2:ea:d7:05:
5a:6e:94:64:83:50:fe:10:12:56:00:66:2e:25:aa:
75:7f:78:11:1d:04:02:f3:9d:4f:82:cd:c3:cb:aa:
dd:0d:4d:c6:85:6e:54:10:46:49:80:2a:28:a2:34:
76:44:70:a4:5f:41:86:32:42:d7:dd:52:83:94:74:
68:a0:6e:58:6f:9c:09:5e:bb:26:4b:5d:c3:1e:27:
f3:1e:64:64:32:71:69:68:b4:cc:75:5c:13:81:65:
18:65:fa:6c:35:83:42:f0:4b:d1:d1:fb:4a:7d:96:
de:5a:81:81:5e:cb:a5:5b:c2:47:e9:5e:e1:b8:c5:
bd:92:61:6d:cd:5c:83:a1:02:72:95:f1:4b:d7:46:
19:8a:2a:e9:cb:e2:03:47:7c:71:54:b7:17:6e:e3:
45:63:71:a3:ac:ee:2a:32:06:a6:4c:a1:b8:8d:3c:
70:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:85:75:62:F6:75:57:DE:35:B4:28:C3:CD:DE:98:05:3B:24:56:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl
X509v3 Authority Key Identifier:
keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer
sbgp-ipAddrBlock: critical
IPv4:
64.52.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:b1:24:6c:9e:12:22:c2:fd:bc:9a:d4:de:ac:e7:8d:6d:3c:
a5:fd:73:74:b0:44:cf:0f:0c:68:19:30:f4:d3:c4:58:24:4d:
3c:17:9e:ce:df:10:fb:49:33:42:fb:ca:c5:31:cf:92:54:89:
9b:ca:2e:d1:8e:dc:c1:65:34:58:3a:4e:ee:7b:ae:6e:65:18:
cc:1b:ac:1b:1c:40:f8:be:70:01:88:2d:ac:91:1c:83:97:ec:
79:d5:49:5a:75:95:c0:c9:94:cd:8d:75:db:bc:c0:83:9d:02:
29:c8:03:86:86:c7:12:8d:af:e5:dc:52:0e:1c:f1:f1:98:c7:
db:98:03:9b:2b:00:10:2a:e7:fd:1e:b3:6f:51:47:a8:0e:8c:
95:9d:c8:d3:73:b1:e5:16:eb:44:f7:c5:f3:db:0e:21:19:32:
5a:f8:9a:cc:b0:30:22:06:55:06:4b:05:6f:cf:67:f8:3e:e1:
ee:27:f7:d6:a3:48:fd:d2:0d:36:ad:89:9f:d6:3f:13:cc:7b:
b1:5c:7d:df:97:e9:61:7c:3e:26:60:fd:e1:9d:d1:f7:fc:d7:
74:e2:76:ed:98:43:cb:a6:50:3f:d2:70:0c:b6:03:4e:82:41:
c6:c5:64:65:38:43:6f:32:59:25:3a:72:d6:64:32:83:0a:d3:
f2:d1:fa:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:26:59 2025 by rpki-client