Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/3bc19f11-5e48-3eb8-b0ba-61a881700277.roa
File: 3bc19f11-5e48-3eb8-b0ba-61a881700277.roa (raw, json)
Hash identifier: TlVday7QQmWtq6pcE7mJojQBKvD2nLP8tk+ZRnlqm1g=
Subject key identifier: 32:1B:68:A7:BC:1F:0E:C5:B0:48:1B:BB:92:18:37:88:32:B0:A1:CB
Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial: 010D0C9F432858489FD099E5867C1ABA04FDEDC0
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/3bc19f11-5e48-3eb8-b0ba-61a881700277.roa
Signing time: Wed 22 Jan 2025 02:00:39 +0000
ROA not before: Wed 22 Jan 2025 02:00:39 +0000
ROA not after: Tue 22 Apr 2025 01:00:39 +0000
asID: 11325
IP address blocks: 64.79.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9f:d0:99:e5:86:7c:1a:ba:04:fd:ed:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Validity
Not Before: Jan 22 02:00:39 2025 GMT
Not After : Apr 22 01:00:39 2025 GMT
Subject: CN=d7f1b3ca-deba-449c-904c-9270ff171a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:76:5b:42:e9:a4:55:c9:be:d8:51:18:45:46:
12:7f:3b:45:30:8a:48:9f:80:42:c1:21:21:14:a2:
18:e1:1f:cd:6e:16:ab:aa:c6:1e:f4:96:bf:f7:a8:
f3:a1:bf:ef:7f:5f:02:71:d1:b8:e7:d6:0d:fe:26:
5b:f2:01:66:2e:75:b7:9f:6f:83:88:a4:56:80:cb:
46:e6:7b:91:ef:a0:2d:08:24:51:c8:32:7c:ab:42:
e5:b5:86:58:e8:78:64:7e:45:33:29:72:95:95:ce:
5d:fd:e9:86:6e:31:d9:1b:93:65:86:9b:5b:f7:54:
66:b1:32:cb:d4:99:16:5a:ba:bb:8b:a9:36:f8:fc:
2d:41:a3:c8:ac:f0:8a:a2:a4:3a:ae:f7:45:31:e5:
8b:26:60:b6:20:d2:53:b1:35:df:92:2f:34:cc:f9:
17:e7:30:a1:eb:43:e9:ee:9a:9e:43:6c:36:de:c3:
a2:22:65:17:5f:e3:83:99:77:da:34:14:81:51:34:
9a:1f:a8:bc:0c:03:27:9e:60:35:8f:8a:1c:b3:1b:
68:4c:ef:89:6c:8c:a4:61:ff:70:22:f8:b8:5d:8a:
14:bc:ba:71:3d:1e:e1:33:d4:36:c0:3a:e5:d0:fe:
f1:f4:8e:5d:cb:e0:ca:39:05:39:60:3a:d7:7b:d7:
cc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1B:68:A7:BC:1F:0E:C5:B0:48:1B:BB:92:18:37:88:32:B0:A1:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/3bc19f11-5e48-3eb8-b0ba-61a881700277.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
X509v3 Authority Key Identifier:
keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
sbgp-ipAddrBlock: critical
IPv4:
64.79.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:a3:e6:21:66:99:57:46:1e:d1:f7:c8:71:c5:e0:76:c4:4a:
e5:a5:b5:39:62:e6:00:b4:4f:e0:bd:01:68:f6:43:c2:f5:2c:
af:f3:ee:a5:e3:fe:97:b9:bc:6d:ff:a8:6f:42:ab:78:fe:09:
14:65:4e:0b:62:39:fd:51:3d:ec:c3:01:20:4d:d2:bd:bc:2a:
7d:86:16:fe:9c:bb:b7:6f:2c:13:10:bf:ae:ae:61:c3:22:5f:
97:76:db:e8:e0:6b:b8:7a:87:06:9c:a5:cf:ca:74:14:4b:7a:
00:b7:79:07:4d:d7:d6:e8:f3:3f:d5:ee:59:04:7a:ea:2e:d4:
89:50:a6:d4:2d:7e:64:e5:fe:71:c1:8a:5b:a9:ec:64:56:b6:
29:2b:1f:93:02:2d:d8:5c:54:b2:c8:63:4b:91:aa:63:b7:d2:
4c:5a:2d:aa:3f:68:a9:f2:38:8a:5f:c1:73:e9:92:fa:63:f1:
bc:4c:39:7d:14:ea:19:a9:19:1c:4d:51:88:6b:a7:d3:11:94:
bb:5c:d8:68:e8:89:44:6e:73:7e:59:78:76:0b:fd:8a:17:be:
e2:49:d5:f1:87:8f:5f:e2:a8:45:87:5b:6e:4d:45:2e:c0:2c:
0a:22:d9:fe:aa:cb:42:13:5f:10:81:e5:df:5a:2c:6f:83:f4:
11:18:79:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:13:01 2025 by rpki-client