Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96a56c78-dc55-3fe5-8a22-aa151aab171e.roa
File: 96a56c78-dc55-3fe5-8a22-aa151aab171e.roa (raw, json)
Hash identifier: Idtgp/bcZJ6zFfPj63oAHnqEUjHreXvf/0qvhlGHAvA=
Subject key identifier: 53:2B:95:F6:4F:84:50:11:75:11:ED:AE:4D:10:47:1B:3E:7B:BF:CE
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858482EC014C9C195BD42FEBECA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96a56c78-dc55-3fe5-8a22-aa151aab171e.roa
Signing time: Thu 12 Dec 2024 14:00:51 +0000
ROA not before: Thu 12 Dec 2024 14:00:51 +0000
ROA not after: Wed 12 Mar 2025 13:00:51 +0000
asID: 7342
IP address blocks: 64.6.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2e:c0:14:c9:c1:95:bd:42:fe:be:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 12 14:00:51 2024 GMT
Not After : Mar 12 13:00:51 2025 GMT
Subject: CN=2de1ff58-6383-457e-b484-6a0c968aaf4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:16:e8:0b:70:bc:31:e7:ea:8c:59:cc:32:f9:
89:b9:b9:1f:16:fb:79:07:39:ee:4c:5d:1c:4d:b8:
6c:b0:fd:21:2a:82:a7:35:91:21:cd:56:d6:bb:a5:
28:ba:8e:ee:96:5c:56:2c:bc:33:5e:ff:3a:8e:3a:
b3:74:02:36:ba:c8:b0:98:e6:22:85:9f:3f:c4:16:
b0:a8:07:76:db:9a:4f:2e:37:3b:56:f3:50:ef:28:
a9:c2:91:db:82:4c:d1:b9:7e:0d:d9:23:0b:4e:89:
ae:ba:30:bc:72:97:2b:6d:09:8c:01:5e:88:1b:22:
b5:e1:47:b0:69:73:57:dd:25:b7:34:7b:a5:b7:ca:
bf:6c:83:0d:ca:17:b5:6a:18:cc:d4:32:c5:79:54:
f6:d1:fd:47:13:84:2c:67:47:54:77:cc:21:e4:dd:
b4:9a:e4:b5:f9:7d:36:82:e6:d4:ee:19:93:fa:34:
7f:3e:27:a3:96:8d:f8:79:44:90:66:23:37:fb:cf:
ba:ff:58:b0:97:71:10:af:03:c8:dd:5a:ac:79:d7:
b4:8b:70:7b:f4:0f:77:f6:6d:9e:c1:94:5e:1b:ea:
6f:cc:74:ee:73:7d:fe:98:96:8c:0c:4a:16:cf:b9:
4d:3e:76:8f:6e:7e:6e:91:8d:66:75:76:21:fc:f8:
bd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2B:95:F6:4F:84:50:11:75:11:ED:AE:4D:10:47:1B:3E:7B:BF:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96a56c78-dc55-3fe5-8a22-aa151aab171e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
64.6.85.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:a0:32:bb:b7:07:fb:4c:03:20:de:bb:16:d2:d5:04:ac:18:
c0:b2:e6:7a:d5:15:c3:fb:02:cb:22:74:88:5a:61:e4:a2:36:
68:06:ba:93:9e:f9:dc:8e:e8:9c:2c:0c:e9:15:1b:63:21:3f:
71:1c:72:23:5d:f7:fe:2f:ca:31:75:4c:36:6d:f1:ad:3b:bc:
18:d1:02:f3:b6:b4:54:cb:ba:ee:bd:23:a8:8e:74:43:76:5a:
b9:98:1b:13:2e:12:05:bf:3e:84:41:34:85:ce:91:0a:c4:aa:
18:fb:86:b1:a1:21:39:36:a6:aa:5c:0d:47:35:bd:b4:d3:90:
c8:7b:30:7f:08:2c:e3:84:dd:71:04:9e:ed:2c:66:73:ce:8e:
57:03:b4:c6:15:c9:c3:c5:fc:1e:9f:1a:78:22:0f:ea:81:14:
a4:4e:a7:67:51:80:9a:b9:6c:36:10:fd:7c:98:2b:d5:52:c1:
5f:ab:97:e7:7e:78:82:a9:b6:e9:b8:e4:5f:30:ec:af:11:6a:
02:19:b3:32:9e:5a:88:d0:a8:c2:8c:19:5d:9f:7b:60:75:d6:
3f:6a:90:b6:1f:93:3a:45:69:6d:c9:0d:3e:52:b6:15:a5:32:
55:28:7c:eb:be:35:c7:08:6e:3d:33:19:f7:a6:e1:1a:9e:3a:
e0:fd:c6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:46:15 2025 by rpki-client