Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/400c0738-5d51-3d90-bd87-79c08fe6e27a.roa
File: 400c0738-5d51-3d90-bd87-79c08fe6e27a.roa (raw, json)
Hash identifier: 9D0B79q00/d4PjGNz2DsWzKWOunFhnuj6+BLlLLr4EA=
Subject key identifier: 4E:92:A9:EE:4B:7B:AA:AD:09:64:12:19:EF:C9:33:9B:E8:21:95:55
Certificate issuer: /CN=f29fac19-e536-4e67-a788-6a1d4483389f
Certificate serial: 010D0C9F43285848EC96967309761C6142CCA320
Authority key identifier: DB:6D:43:CE:3D:45:18:70:71:B4:83:AB:35:B7:D2:65:A6:1C:F6:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/400c0738-5d51-3d90-bd87-79c08fe6e27a.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 397715
IP address blocks: 64.4.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:96:73:09:76:1c:61:42:cc:a3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29fac19-e536-4e67-a788-6a1d4483389f
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=bea8c6f9-081c-49f6-8895-4f2d74c04055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a1:ae:67:6b:16:6e:40:73:d4:b6:40:de:ea:
66:b1:4c:46:04:c4:a3:14:c3:25:9a:b0:9f:2a:07:
d0:2f:73:2d:53:79:c1:9b:15:f1:b2:a7:aa:54:15:
46:f9:e6:d5:67:ef:f3:d7:48:ec:db:ed:0e:9a:93:
99:dc:bb:7d:0c:ba:2f:3b:d5:50:8d:ba:00:69:91:
52:17:d4:ae:da:87:ee:97:5e:7c:bb:a8:d9:80:16:
b9:56:4d:00:6d:c7:45:01:05:ff:8f:cb:ba:55:be:
ad:0f:15:f4:11:b9:5a:5e:b1:36:38:c8:7f:c6:76:
de:7e:d9:03:ff:62:5d:9f:ea:6b:98:2a:38:e9:4f:
99:0e:28:7d:22:82:21:dd:cb:52:18:ef:a8:de:43:
61:12:36:70:9e:58:2f:0e:95:0a:2f:5e:92:c2:51:
53:7d:43:db:fc:b4:ee:7b:79:e4:09:d7:61:30:c2:
c0:38:86:93:6c:16:bf:5e:02:27:a8:8a:f0:fc:34:
f9:5b:e6:df:9a:46:02:66:fb:5c:c5:18:50:83:34:
f4:a7:e5:05:92:b9:7a:bd:c8:6d:75:a6:ce:0a:32:
b4:82:f1:8a:a5:7f:ae:6e:4d:cc:03:67:85:d6:8d:
47:02:44:0c:1c:62:e8:3a:66:77:c7:97:c6:97:96:
d0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:92:A9:EE:4B:7B:AA:AD:09:64:12:19:EF:C9:33:9B:E8:21:95:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/400c0738-5d51-3d90-bd87-79c08fe6e27a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f/f29fac19-e536-4e67-a788-6a1d4483389f.crl
X509v3 Authority Key Identifier:
keyid:DB:6D:43:CE:3D:45:18:70:71:B4:83:AB:35:B7:D2:65:A6:1C:F6:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f29fac19-e536-4e67-a788-6a1d4483389f.cer
sbgp-ipAddrBlock: critical
IPv4:
64.4.175.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:90:1c:39:91:ac:06:73:fd:57:5f:90:ff:6c:de:35:9a:d2:
7d:63:92:77:d0:4c:b7:63:2e:be:ba:57:b2:23:b5:2f:ae:03:
97:67:96:f2:47:e7:92:80:91:89:fb:0d:e4:e8:8e:c2:bb:4e:
0a:4f:41:9a:33:ce:02:a2:a8:01:8e:f8:e5:e6:d1:3d:08:48:
b3:f7:15:3c:77:5b:ce:8a:2c:0b:52:90:d7:cf:cb:88:49:2a:
0a:08:ea:6b:a5:46:fc:5c:59:6c:f4:33:2b:22:e4:13:8d:ea:
db:24:cc:e6:81:46:ea:b4:da:cf:67:fd:47:70:b2:84:78:a6:
41:da:51:58:58:e3:e5:6f:17:18:32:e0:1a:c5:fd:8e:eb:9c:
c0:39:c3:08:21:02:38:c9:28:f2:fd:6c:a2:e2:72:e9:44:e3:
62:19:5e:73:12:57:3a:b3:ec:5d:04:b5:c5:f7:1c:31:64:2a:
05:8f:d6:31:ec:b1:2e:7a:c9:7c:0a:7d:3f:2e:5e:7f:57:c3:
60:1f:b1:41:c4:22:88:22:ad:c8:9a:0c:4c:c6:82:47:be:43:
6e:d8:a0:81:38:cd:95:de:ad:a4:4b:04:83:ef:52:bb:32:82:
4d:0d:56:a8:e1:e5:b4:0b:af:6d:9a:51:95:80:66:c3:50:af:
be:64:e1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:41:59 2025 by rpki-client