Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2/4b50e3cb-bf61-3242-bd51-7c419281bb0e.roa
File: 4b50e3cb-bf61-3242-bd51-7c419281bb0e.roa (raw, json)
Hash identifier: WGE03Vo2NXgorhwEP5fCws2eHfliKdL7HTBnoJwy5KE=
Subject key identifier: 23:56:8A:8B:28:04:F9:B9:B7:16:8C:FD:5E:A1:E0:18:51:DC:F1:34
Certificate issuer: /CN=1e38a0af-c492-44f5-88b1-b4dfdb1180f2
Certificate serial: 010D0C9F432858480214F8D071388EA0CA156800
Authority key identifier: 65:A9:BA:30:CA:A9:4B:F4:DD:1C:34:F5:E9:D5:C8:5A:94:81:1B:A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2/4b50e3cb-bf61-3242-bd51-7c419281bb0e.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 63440
IP address blocks: 64.16.224.0/19 maxlen: 24
192.76.120.0/24 maxlen: 24
2620:b2:c000::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:14:f8:d0:71:38:8e:a0:ca:15:68:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e38a0af-c492-44f5-88b1-b4dfdb1180f2
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=cb434205-446c-4b62-946e-1543f85c9a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d9:d0:f5:3d:45:92:ee:e4:33:82:9e:b3:77:
fc:7d:0b:9d:90:ef:11:c4:ea:da:3d:b2:19:14:86:
99:a9:66:94:c4:79:34:50:fa:4e:05:32:10:9e:d9:
95:04:b1:21:c3:83:52:b2:bc:df:65:4b:c8:9f:75:
92:ea:44:b0:2d:03:65:7b:79:0b:b0:a6:80:b1:8e:
a9:f9:a0:6d:93:a7:b8:41:32:af:73:61:ab:d3:38:
7b:dc:9d:26:cb:1b:56:9b:8b:70:7d:f3:e6:8f:dd:
01:95:c6:aa:4f:c4:61:6f:1e:a6:42:ea:ab:2e:88:
69:63:e1:0f:8d:38:a2:db:cf:8d:71:e3:17:2e:3b:
18:34:ec:38:bd:ac:75:a2:b0:2b:dd:6e:39:8f:60:
23:2e:52:42:c6:b5:82:6f:7d:92:14:03:26:37:ec:
85:b9:f7:28:af:26:8f:95:93:36:27:45:bd:a4:76:
38:93:cf:67:d6:1d:49:8e:3b:e5:4c:50:63:f7:f8:
3e:e1:2e:13:16:9d:47:de:ae:fb:a2:20:2f:f2:ba:
3c:be:60:bc:c0:77:0e:83:4d:20:fa:a3:2c:be:bf:
a2:bf:21:4c:72:3d:de:a4:3f:f4:a9:3d:a7:60:f1:
0f:91:8b:1c:e4:19:98:0e:0b:9c:1a:17:e0:f4:29:
44:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:56:8A:8B:28:04:F9:B9:B7:16:8C:FD:5E:A1:E0:18:51:DC:F1:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2/4b50e3cb-bf61-3242-bd51-7c419281bb0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.crl
X509v3 Authority Key Identifier:
keyid:65:A9:BA:30:CA:A9:4B:F4:DD:1C:34:F5:E9:D5:C8:5A:94:81:1B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.cer
sbgp-ipAddrBlock: critical
IPv4:
64.16.224.0/19
192.76.120.0/24
IPv6:
2620:b2:c000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:f0:6f:29:6c:99:a2:46:7f:df:19:e0:a2:9a:ce:46:dd:4f:
19:d9:8a:68:72:e0:b4:d2:ec:88:d4:99:1d:56:a7:74:f2:59:
7f:ad:51:1e:3f:d1:56:c7:af:84:09:24:11:fa:3e:be:09:8a:
7a:0f:60:8e:ab:22:59:f8:20:d3:fc:19:f0:d8:62:9b:cb:bc:
0a:6e:eb:e6:01:fb:bf:d1:ab:2c:a1:be:94:63:23:62:d0:96:
4d:cb:b3:f1:9b:7b:1a:b1:2e:86:d1:09:e8:da:d4:60:9a:1a:
d8:d8:11:1b:5c:26:15:f8:6a:fe:2a:fb:c3:8b:f2:13:12:db:
69:69:d8:00:ad:fa:ba:17:4b:32:d6:49:c7:60:04:83:a9:f1:
47:6d:49:d2:df:24:34:8e:84:67:d9:c9:31:4b:33:6d:fc:dc:
ee:bb:fe:f9:45:7b:94:d1:f3:e2:87:89:3a:85:8f:ba:7e:32:
0a:5a:64:e5:4a:9c:a7:c0:e2:c1:82:68:7a:3b:07:87:72:8a:
1d:11:9a:b3:70:88:8c:47:b8:d5:96:a1:ec:e7:f8:01:4d:15:
af:08:f7:87:4b:cb:51:b7:8e:66:9d:22:5d:2d:2e:06:07:14:
70:d6:f4:33:a2:f3:b7:f6:62:83:85:2a:cc:fc:2a:d3:ee:fb:
c1:e2:46:5a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:36:33 2025 by rpki-client