Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/b18a889a-5739-3965-8dfa-fa6e98c9a3c6.roa
File: b18a889a-5739-3965-8dfa-fa6e98c9a3c6.roa (raw, json)
Hash identifier: oW+7ENraVF8YZt58azWSq9x/UebfqH0DF3oevGcxtZQ=
Subject key identifier: 66:81:80:87:2B:32:3B:5C:31:A1:0C:E0:D6:7C:00:A6:A0:90:6D:F7
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F43285848064503A191CE1BD425A1C280
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/b18a889a-5739-3965-8dfa-fa6e98c9a3c6.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 206092
IP address blocks: 64.64.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:45:03:a1:91:ce:1b:d4:25:a1:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=16622dc2-1c43-4596-a505-5ec3efd18781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:76:87:be:12:62:3c:b0:06:d2:73:0c:02:5f:
6b:db:3c:f6:b5:a0:f9:73:a9:07:d1:55:fc:d9:1b:
f2:5e:b8:73:a6:59:ac:ef:fd:01:08:ef:24:da:b2:
75:6e:15:e7:82:5e:a5:49:13:c6:8e:11:13:c6:5f:
b7:30:5c:db:b6:40:91:a9:6f:91:3a:68:80:c2:e6:
3d:93:9b:f2:85:19:ed:df:dc:8c:d2:cf:fb:08:9d:
5f:97:8a:e6:a5:be:4d:8d:5c:d4:58:51:84:10:80:
9a:b2:9a:3f:ae:f1:c8:8a:9c:ec:96:2a:4a:3b:6b:
14:05:41:1e:3b:5b:d2:48:6a:23:88:67:b4:67:09:
cc:13:92:66:a5:90:08:4b:73:c6:c5:19:16:60:b2:
15:21:4f:e1:f8:fb:b4:f2:4c:02:d3:69:80:ab:15:
6a:a5:49:a5:ce:8d:1e:56:33:f7:57:3c:df:a4:9c:
8f:f1:bd:61:8b:79:fd:9a:d1:6a:51:73:db:3b:5a:
89:01:6f:ab:94:be:f7:4a:d2:13:e9:66:4e:aa:76:
07:36:63:4a:91:95:79:ea:37:b9:46:c5:9c:1c:7b:
45:fe:d8:3e:7e:fe:8c:ba:fd:78:bf:b6:4c:fd:b2:
ef:1b:4d:44:28:32:d7:a1:6e:4b:53:00:04:b6:b0:
11:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:81:80:87:2B:32:3B:5C:31:A1:0C:E0:D6:7C:00:A6:A0:90:6D:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/b18a889a-5739-3965-8dfa-fa6e98c9a3c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv4:
64.64.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:8c:3c:8d:ab:10:6c:0a:83:f3:e2:47:a1:b0:db:c3:10:e3:
4a:85:28:94:6f:47:76:e0:9f:98:21:87:25:27:ce:63:1f:d6:
04:00:93:ce:e6:65:3c:ee:47:1c:15:80:b0:fe:a9:33:8c:26:
12:53:8b:2d:65:89:74:58:d3:0e:80:46:77:c9:83:da:4b:dc:
d1:a5:8b:db:01:db:3c:c1:7a:f8:cb:bd:e8:a1:b9:e1:aa:c1:
ae:0c:a0:c8:31:a5:e0:b1:43:74:69:96:58:52:e9:5f:6e:c6:
dc:f3:51:b6:8f:df:e1:6e:ff:e0:b3:a1:d8:99:cc:17:32:c5:
af:f2:ff:ac:00:06:05:62:83:ec:da:cc:61:ea:a6:bf:52:ce:
96:c2:40:13:72:06:3c:19:98:3f:3f:f2:47:58:83:ae:dd:62:
3c:a3:14:b6:09:60:12:90:94:b4:8f:ea:d9:50:27:82:a4:06:
c7:36:1a:f5:dc:37:3d:77:cf:f8:ce:05:53:16:bb:16:76:51:
c5:38:bc:e3:b9:e8:ef:2b:92:7a:5b:04:a7:ad:d2:02:4d:92:
4b:1f:ae:82:cf:62:4b:e3:41:1d:b8:19:b4:ae:1f:dd:10:23:
c0:ff:c6:0d:ff:32:66:ed:d4:e6:b3:6c:2b:30:76:5c:e8:72:
d9:09:7f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:11:24 2025 by rpki-client