Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/154d7d54-a074-3eac-a5f4-43680f8a7d4e.roa
File: 154d7d54-a074-3eac-a5f4-43680f8a7d4e.roa (raw, json)
Hash identifier: psByiVv8qJByqqGhE822CXI1XoznVmGCjQvUWs3jkNo=
Subject key identifier: 89:AC:D4:47:63:A1:69:E9:08:02:68:D1:5D:F1:44:BB:66:BE:89:6D
Certificate issuer: /CN=f4f85718-cda0-442f-9727-709a536e1e27
Certificate serial: 010D0C9F43285848EF61552EE73D6F7F44702B80
Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/154d7d54-a074-3eac-a5f4-43680f8a7d4e.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 6639
IP address blocks: 63.136.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:55:2e:e7:3d:6f:7f:44:70:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=58ea5516-da6b-4d3b-92e8-76a05b34ce6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9f:fb:a4:b1:2c:6c:ef:12:f6:00:7f:ba:8e:
bd:77:33:c2:48:e9:da:a7:4c:d1:93:6b:e0:9d:be:
f8:a8:17:a0:4b:8a:94:c9:ee:6a:fa:9b:3e:6d:29:
ed:93:44:f7:f1:46:76:30:3b:a6:88:03:34:c4:8b:
61:d8:ed:61:22:83:d5:6f:ca:25:e1:13:6b:4c:be:
ba:17:0b:e1:92:34:e2:6d:6c:75:07:c6:0a:16:0d:
fc:97:26:ab:60:95:bb:c8:2b:90:0e:9c:4e:37:3c:
bd:82:23:de:8f:31:a5:30:c8:b8:9e:b9:98:ca:d2:
91:b2:ea:0d:91:64:6f:0e:61:2a:f0:1a:b2:7f:f8:
9f:97:8d:4b:23:80:4f:9c:cb:3f:90:34:44:67:b6:
56:27:16:78:f2:a2:49:16:0e:f9:9b:f4:cf:80:f0:
0d:9a:62:7f:2c:95:52:e5:52:6e:41:76:20:bd:9f:
15:02:6d:ee:98:24:15:7b:01:38:7a:40:84:8e:3c:
0c:47:14:a0:d3:17:4f:5f:f5:af:bb:e6:6e:fc:5b:
83:4c:13:e4:fd:b9:29:8a:c0:59:80:05:24:68:0f:
5d:43:42:84:ce:a6:9c:a6:8c:ad:42:1c:09:d1:c1:
65:29:45:02:43:16:9a:ef:03:ad:5c:4e:26:d9:b3:
53:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AC:D4:47:63:A1:69:E9:08:02:68:D1:5D:F1:44:BB:66:BE:89:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/154d7d54-a074-3eac-a5f4-43680f8a7d4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl
X509v3 Authority Key Identifier:
keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer
sbgp-ipAddrBlock: critical
IPv4:
63.136.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:8a:cf:16:70:8a:35:55:04:3f:a0:90:88:81:84:a4:9e:cc:
07:11:c2:6c:5b:e9:e6:56:e6:f4:64:25:d5:38:aa:d2:3f:fe:
70:d1:14:c3:08:f6:e6:41:87:3f:59:3e:23:33:44:61:1c:c1:
c8:25:46:ac:43:72:3c:07:a7:29:8f:9c:45:81:1a:02:bf:dd:
33:33:4a:d8:e1:ad:b2:02:e3:49:06:c7:4c:43:be:8f:0c:7a:
12:9a:d7:c2:46:9f:fa:70:24:93:f7:92:9f:f6:08:1a:39:11:
22:5f:92:68:f5:46:53:5d:f9:65:18:f2:8a:2c:5c:69:47:17:
0f:18:92:fd:b4:39:d2:a3:1f:c3:eb:bb:13:95:59:b1:41:e4:
e4:02:71:78:96:2b:e5:a9:16:df:31:bc:da:4c:08:db:2a:0d:
5c:70:39:fb:d8:17:1c:f1:32:29:28:6d:f7:a1:98:3b:0f:e4:
27:34:07:5f:43:af:b7:92:9a:ba:14:f2:5d:1f:e4:71:30:60:
29:43:0f:00:cb:70:e2:87:c6:01:75:bc:fb:40:15:d5:5c:73:
1e:18:b9:4d:c1:0c:16:04:1e:f8:10:cd:de:5b:4b:f4:75:d2:
b1:90:06:d1:92:3c:37:70:96:78:3a:d7:07:bc:5f:89:57:98:
31:69:ff:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:12:08 2025 by rpki-client