Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/c5bdadcd-8406-357f-8be2-50939878ca10.roa
File: c5bdadcd-8406-357f-8be2-50939878ca10.roa (raw, json)
Hash identifier: GAo5RamztociqcgCdxNTpWNKmu2ioqjjq2+YjBPdPBQ=
Subject key identifier: 82:B9:A9:5D:82:55:D4:E0:ED:D1:12:59:F5:9D:C4:48:FB:B8:86:9C
Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial: 010D0C9F432858480BDA603A3F327C6431887280
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/c5bdadcd-8406-357f-8be2-50939878ca10.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 42
IP address blocks: 64.78.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:60:3a:3f:32:7c:64:31:88:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=c901d73d-7f49-45fe-9e02-e9bb0d575ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ae:86:14:d8:fc:55:0b:5c:b9:28:fc:f7:3c:
75:d7:b0:98:c3:3c:90:6d:e0:ff:9b:bb:38:25:60:
44:47:d6:a9:cb:43:55:b9:a5:42:76:87:3b:cd:ec:
bc:29:6b:44:3f:1e:02:9f:3f:18:cc:5d:92:85:2a:
7d:a3:9c:d6:84:d2:29:94:15:98:1e:68:50:e7:d8:
e0:c7:fa:10:66:78:55:1b:ea:fa:d2:fc:9a:4e:ed:
3f:48:93:09:f5:8c:b4:37:5b:fb:d4:a8:52:bc:33:
0c:a0:1d:5f:bf:f3:c0:15:65:11:14:4d:fd:9d:b9:
2b:bb:84:e1:98:57:99:4b:5d:5f:12:bb:5f:96:ea:
a0:0e:34:00:dc:2e:01:f5:0e:88:a5:15:15:38:e1:
0b:1d:86:4e:fc:99:07:5a:2a:a8:98:bd:9d:0b:b1:
34:35:6b:e6:59:5f:b8:0f:1f:a0:b4:ea:ba:1e:9a:
f4:dd:7d:06:d6:22:c9:18:49:10:2e:fe:43:46:74:
48:80:aa:07:db:9b:93:47:ae:bd:24:3a:c0:66:7b:
ad:32:54:9f:f6:fd:e6:5e:41:57:8d:55:e0:a7:09:
28:00:22:c8:c2:aa:43:be:ad:5e:0d:b6:a0:da:51:
ff:ee:75:6c:d9:2b:44:5b:21:6f:ac:40:16:af:e6:
94:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B9:A9:5D:82:55:D4:E0:ED:D1:12:59:F5:9D:C4:48:FB:B8:86:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/c5bdadcd-8406-357f-8be2-50939878ca10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
X509v3 Authority Key Identifier:
keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
sbgp-ipAddrBlock: critical
IPv4:
64.78.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:99:b4:62:f6:06:44:6d:1c:e9:62:b7:15:37:c4:13:5e:d7:
dc:2c:a8:54:0b:21:d4:f4:85:bf:87:17:a2:06:34:b8:2d:28:
b0:40:65:fc:af:86:18:b1:b7:68:9a:a6:ab:e7:ac:7d:d1:11:
da:b2:ce:4f:34:93:0e:6a:b6:1d:e4:52:c4:55:1e:4a:cf:a9:
87:6c:be:8a:e8:d0:77:56:19:2c:ff:7a:26:39:c9:fc:32:6c:
06:00:e2:a2:7a:a7:a5:e3:e9:ab:0e:22:22:86:fc:34:85:60:
d7:b1:3b:05:03:d1:74:8e:f4:df:7c:7b:86:ef:c2:f6:20:c7:
f8:ff:f5:8a:9a:ec:da:7d:6f:81:46:fa:62:9c:1f:f6:a3:a5:
5c:33:0b:13:f3:6d:71:1a:a7:4a:6e:1a:63:2c:96:13:26:50:
f7:0b:c7:11:f1:82:94:6d:3d:3a:25:95:07:4d:01:ef:66:23:
17:cd:e2:83:63:55:31:aa:7e:21:5f:64:b6:ff:e4:9f:d1:58:
ce:61:1d:05:86:6b:bc:67:4a:c5:ee:9f:0c:62:8c:2a:6a:cf:
9d:70:90:a7:c7:a5:bd:ea:7d:d1:1f:9c:23:fe:d1:2a:6c:1d:
4b:be:3b:37:2d:f2:20:d8:c4:15:9b:96:0f:ec:82:8d:f7:8d:
c5:32:6d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:35:50 2025 by rpki-client