Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8/a20f1c23-b345-360d-ab0a-26cae59bee50.roa
File: a20f1c23-b345-360d-ab0a-26cae59bee50.roa (raw, json)
Hash identifier: fP5yaZcTbfAUIPVC92FdpgVumLz2vEhHhD1dLocbM2Y=
Subject key identifier: EC:42:54:73:96:01:B7:71:17:B1:C6:D2:E7:4E:DE:D4:97:5E:2D:F9
Certificate issuer: /CN=70bfa7b5-c12d-44b9-84de-fe33a4838fa8
Certificate serial: 010D0C9F432858482EBFFAB6DA40DDFF1FDC4B80
Authority key identifier: FD:7D:7F:71:AF:08:52:01:53:23:3F:DA:08:72:67:94:FC:D9:5B:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8/a20f1c23-b345-360d-ab0a-26cae59bee50.roa
Signing time: Thu 12 Dec 2024 14:00:51 +0000
ROA not before: Thu 12 Dec 2024 14:00:51 +0000
ROA not after: Wed 12 Mar 2025 13:00:51 +0000
asID: 16509
IP address blocks: 64.207.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2e:bf:fa:b6:da:40:dd:ff:1f:dc:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bfa7b5-c12d-44b9-84de-fe33a4838fa8
Validity
Not Before: Dec 12 14:00:51 2024 GMT
Not After : Mar 12 13:00:51 2025 GMT
Subject: CN=20dd2d1b-a36a-4815-a5fc-69d81532e62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b8:4b:4a:ac:d2:83:d8:5d:8e:a3:7d:ba:75:
a4:b5:9b:5a:d0:6c:81:81:40:e2:14:1b:1e:0a:70:
2b:d7:10:a8:f8:6f:d8:d0:ad:38:08:76:17:17:58:
56:1d:8c:f4:ac:36:75:83:a4:09:a1:28:d2:5b:2c:
a7:98:8d:ec:fc:9d:d5:22:e3:7d:d3:37:c7:88:27:
30:e2:1d:9b:07:cd:e3:b1:73:f6:be:2a:60:18:60:
b0:1e:80:a4:c4:e3:55:fc:1a:84:af:9a:31:72:d3:
3c:05:e6:3f:86:54:f5:dc:e8:3c:69:36:54:eb:97:
f3:1b:00:2d:e4:7e:9f:12:0f:d0:65:8a:95:59:54:
6f:2b:17:2f:19:a2:0c:77:e7:66:5b:62:18:47:c2:
74:40:ea:22:d0:51:56:9d:8e:f3:3d:3b:4e:e1:5d:
0a:46:08:b3:7c:58:e2:ff:d4:8c:8e:6c:9b:cc:26:
33:d8:39:f1:75:6d:a0:5d:30:a8:87:6d:6f:69:7f:
46:de:0a:e8:21:06:54:34:e3:2d:b0:23:7a:ef:1b:
2f:1c:f1:66:b4:ea:91:a5:c2:d2:34:e3:3b:5e:49:
61:1e:53:ee:d8:96:8e:9f:fd:4e:27:03:52:60:f7:
8e:cf:70:85:fe:a3:b7:8d:fb:de:74:90:3c:01:17:
9c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:42:54:73:96:01:B7:71:17:B1:C6:D2:E7:4E:DE:D4:97:5E:2D:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8/a20f1c23-b345-360d-ab0a-26cae59bee50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8/70bfa7b5-c12d-44b9-84de-fe33a4838fa8.crl
X509v3 Authority Key Identifier:
keyid:FD:7D:7F:71:AF:08:52:01:53:23:3F:DA:08:72:67:94:FC:D9:5B:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/70bfa7b5-c12d-44b9-84de-fe33a4838fa8.cer
sbgp-ipAddrBlock: critical
IPv4:
64.207.194.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:99:c7:5f:e6:a1:a7:3d:b8:81:6a:e7:1b:a3:a2:1f:22:f6:
71:87:00:78:c2:6b:70:0d:bb:5c:a0:44:b3:b5:fa:c5:a6:68:
e8:2d:fd:4d:0b:6f:ee:6b:df:d2:8e:ce:c4:37:9c:89:39:26:
aa:e2:22:e4:3e:2d:36:92:0b:81:cf:fa:06:03:ee:ac:c3:fd:
ef:4c:ab:1b:ab:48:2f:b0:7b:bb:42:16:9b:0b:ca:15:72:3e:
6a:7e:c4:88:f0:fe:46:b1:bc:2a:80:3d:6a:ad:97:e5:c0:30:
2d:42:f2:31:dc:53:93:bb:45:8c:79:c0:71:be:2f:9c:e0:e5:
01:07:af:c8:9c:cf:4e:e4:21:be:0c:39:c3:bb:51:70:06:8a:
e3:11:6a:34:7a:11:ff:3f:94:52:f7:fd:98:87:53:d7:63:0a:
88:e1:fd:b0:31:fc:37:9b:ed:94:ad:7e:1d:e1:5a:1e:94:dc:
6e:a6:e2:7c:c4:01:11:98:b1:eb:e3:26:85:6b:ab:a6:23:3f:
4e:57:56:ba:1a:3b:0f:18:55:75:c1:50:f6:ac:b1:9b:fe:cd:
43:ab:84:6e:a5:a7:3e:7f:f1:23:e9:6a:21:87:15:ff:b9:31:
ec:07:30:6d:b5:01:53:0a:b4:71:ea:43:3b:aa:33:af:9a:87:
b0:bb:e4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:30:34 2025 by rpki-client