Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49/7e44db43-2622-3abd-a8c0-3782c511a7e4.roa
File: 7e44db43-2622-3abd-a8c0-3782c511a7e4.roa (raw, json)
Hash identifier: MKj9pEk0l3buyk8d9m+EhHumia9Tllr9GCH/qY5WfAA=
Subject key identifier: D7:3B:88:2A:69:17:BC:46:9B:DF:C5:7A:26:49:0B:D8:3B:66:22:EE
Certificate issuer: /CN=0f5ef02b-98af-41dc-b874-23f7e75b4e49
Certificate serial: 010D0C9F432858488AE09C84CA872C06D9AA1E30
Authority key identifier: E6:67:55:3B:F1:05:6C:61:0C:52:8F:3F:A4:A7:C7:4A:96:5D:90:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49/7e44db43-2622-3abd-a8c0-3782c511a7e4.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 53340
IP address blocks: 69.64.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:9c:84:ca:87:2c:06:d9:aa:1e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f5ef02b-98af-41dc-b874-23f7e75b4e49
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=248cf330-5dfb-4d4e-95c7-b0343deb5dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c7:3a:f8:60:6f:32:32:30:d4:98:15:5e:19:
b3:77:a1:5c:78:13:25:96:c7:df:9b:a7:ee:38:4c:
55:a1:e0:f2:6d:8f:3e:13:7d:ae:62:c1:b3:ec:07:
ce:e3:2b:c7:8d:cb:c4:b7:8e:d2:b8:25:a1:15:fc:
58:86:41:8c:87:48:da:16:49:47:6e:4a:23:3a:0a:
59:71:2d:78:46:fc:bd:f3:d4:a9:19:2c:8f:1c:ec:
25:92:77:a9:4b:47:24:99:b7:31:02:f9:90:17:6e:
a2:68:39:b6:18:0a:30:ac:e8:fc:8e:52:9f:fe:c4:
0d:70:ee:97:cc:09:2e:a1:74:4e:ce:46:9b:21:47:
bf:c4:7d:3b:13:78:10:6e:28:bd:59:2a:10:f7:1c:
e6:34:30:b9:24:91:32:26:1f:a2:60:b9:06:2c:0f:
49:30:23:c6:fe:e8:ee:c8:dd:4e:4e:37:a4:b3:9e:
5f:56:5d:fa:f7:c8:cb:eb:97:80:f7:e7:1a:06:d1:
5b:ae:8d:0b:65:a4:e4:0c:f8:e9:2d:99:33:12:95:
16:76:96:6f:ad:d7:33:e7:76:75:5e:e9:30:27:53:
03:1a:84:ca:ca:22:92:55:67:ae:39:18:f0:8f:ca:
6b:73:3d:e7:17:8b:b8:ad:78:50:3b:d0:d0:75:a5:
a3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3B:88:2A:69:17:BC:46:9B:DF:C5:7A:26:49:0B:D8:3B:66:22:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49/7e44db43-2622-3abd-a8c0-3782c511a7e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49/0f5ef02b-98af-41dc-b874-23f7e75b4e49.crl
X509v3 Authority Key Identifier:
keyid:E6:67:55:3B:F1:05:6C:61:0C:52:8F:3F:A4:A7:C7:4A:96:5D:90:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f5ef02b-98af-41dc-b874-23f7e75b4e49.cer
sbgp-ipAddrBlock: critical
IPv4:
69.64.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:38:8b:6b:bf:a8:3b:cb:8f:52:a7:c0:77:40:d1:9d:e6:cf:
04:a2:b7:47:d9:14:bc:47:b5:ce:e9:dd:82:19:de:1c:1e:79:
ad:34:c7:63:7a:44:c1:f2:11:56:f9:da:9b:db:bb:37:be:ad:
71:89:76:53:3a:96:1f:ea:75:f0:6b:1f:fb:40:64:3b:d3:2b:
be:09:19:23:28:fc:ee:1e:d3:62:89:68:6b:96:24:02:e6:f9:
57:a5:e9:5a:7f:82:ef:0e:c1:8d:b7:89:20:05:2d:3d:63:a3:
07:d5:a7:7e:b1:67:32:23:2b:33:58:50:08:c3:3b:59:9b:2a:
18:f3:75:aa:c6:d3:a6:e4:4a:15:83:99:14:5c:3c:a5:b0:cd:
68:dd:f2:4a:1c:34:34:26:19:98:74:8c:e9:15:79:19:91:87:
9d:b9:4c:47:2c:a6:65:8d:9d:db:44:26:26:40:fa:d5:64:69:
1a:bc:29:ae:4b:d5:ac:5c:5f:dd:1c:dd:e3:f5:bf:3a:71:c6:
44:e6:a4:96:16:13:36:b7:fc:1f:42:ee:25:49:bf:12:ed:e5:
ec:06:9d:34:75:b2:6d:41:5b:c2:4e:93:5f:ff:28:d7:53:ce:
dc:01:93:36:bd:df:7b:ae:9d:08:ef:fb:e1:a2:04:31:2b:f7:
ce:4d:d6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:40:57 2025 by rpki-client