Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/78c99d61-de96-33df-b757-bdeb7746dada.roa
File: 78c99d61-de96-33df-b757-bdeb7746dada.roa (raw, json)
Hash identifier: IBrOwzPXoau3jpT6wTSv5vNxOujSQfs0t00AvfjRLnM=
Subject key identifier: F1:79:B7:73:F5:42:B7:D0:AB:F0:3C:14:C7:6C:7A:F5:2F:C4:73:52
Certificate issuer: /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial: 010D0C9F432858488AE0918A03AE09CD58EB8B80
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/78c99d61-de96-33df-b757-bdeb7746dada.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 63363
IP address blocks: 64.96.2.0/24 maxlen: 24
2620:57:4002::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:91:8a:03:ae:09:cd:58:eb:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=f210a5ec-fe6d-4b43-8924-a4e415ae02ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:93:39:b8:ad:e2:d8:f5:9c:43:88:05:0a:bc:
a9:c6:fe:4b:96:a8:c9:35:45:f3:3f:a4:e1:2d:65:
be:b0:4a:56:10:e3:2d:54:ef:70:07:c2:1c:6a:9f:
a6:7a:4e:b9:f7:b6:db:dd:a8:f6:a6:03:f3:26:23:
dc:2c:fc:2b:dd:24:84:aa:e9:ef:1c:b7:81:2c:70:
0f:ae:b4:67:da:73:d5:8c:7f:5d:18:2d:b1:dd:cc:
f5:09:cc:37:2f:34:13:5b:75:c5:e8:c0:df:df:d2:
3f:a7:ad:e3:2b:d6:ce:88:5d:87:2c:88:d0:22:b2:
b7:47:40:42:2d:ff:82:fd:0f:cd:3a:f6:70:a1:bb:
de:14:80:b3:fd:91:da:a8:a5:1d:71:8b:64:b1:d3:
5a:73:9a:de:99:8e:98:f0:3e:be:67:ff:eb:e5:42:
50:80:6d:83:6a:90:c9:02:eb:e9:32:4e:83:12:cc:
18:56:58:0f:a4:7a:59:81:04:87:ac:1a:c3:96:46:
f2:36:44:b9:54:0a:f2:2c:70:0b:c3:52:d5:10:db:
d6:b0:5a:e1:9b:af:69:ee:62:39:c8:46:ca:b6:52:
d7:5f:8e:7b:fd:41:61:55:ed:53:3c:1f:03:a9:dd:
fc:a6:56:7e:32:82:85:84:af:5e:98:f2:c5:31:96:
5d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:79:B7:73:F5:42:B7:D0:AB:F0:3C:14:C7:6C:7A:F5:2F:C4:73:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/78c99d61-de96-33df-b757-bdeb7746dada.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
X509v3 Authority Key Identifier:
keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
sbgp-ipAddrBlock: critical
IPv4:
64.96.2.0/24
IPv6:
2620:57:4002::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:53:df:28:7d:80:04:73:ca:69:9f:11:f6:55:e4:b8:13:ec:
fa:f7:dd:4b:65:98:c7:a9:90:ad:46:8d:b9:35:1f:46:77:4a:
8f:e1:ff:82:19:a9:a5:06:df:3f:3e:18:b1:d4:e6:99:5a:73:
72:10:9a:dc:ee:9f:4b:c9:b7:1a:39:bf:d2:da:dc:26:0a:7c:
4d:12:d7:a8:4d:4c:76:76:8b:a3:be:1f:8f:b3:09:1c:0b:c7:
db:39:5c:9a:1f:25:0f:ef:d5:3c:58:6e:eb:9d:0e:f3:68:14:
3e:f9:34:fa:d1:4f:9c:54:22:30:de:22:7d:ec:89:af:8d:28:
49:26:f3:4b:81:a5:a7:8d:b3:84:fb:25:07:a4:fc:c3:91:2f:
c3:4f:69:8e:39:bb:89:af:d6:19:40:0d:5e:a4:97:17:cb:8a:
92:73:ce:e3:ca:b3:8b:4e:7c:25:d8:11:6b:40:7c:0e:c4:35:
88:45:61:40:56:5b:90:9c:4d:d7:8c:52:8e:14:76:21:c1:fb:
44:0b:1f:5a:77:35:23:3e:b5:e2:46:c1:71:ce:2e:54:1a:62:
48:ab:4d:44:a2:63:0a:0f:b6:f5:94:4e:be:d9:90:cd:9a:46:
d4:f7:b0:1a:b1:ff:8c:0c:21:f4:db:31:ed:c1:18:89:8c:a1:
e7:d4:4a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:45:56 2025 by rpki-client