Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/29b0455b-b0db-3bef-ad71-5d8eab166a05.roa
File: 29b0455b-b0db-3bef-ad71-5d8eab166a05.roa (raw, json)
Hash identifier: jW5bVlSNSVw16xtqBsE3nZZQ0wJP82jm9BtvRuhWflk=
Subject key identifier: 45:AA:1E:F5:2A:A4:F1:AB:E6:76:A4:4C:C6:24:CF:1C:AE:4B:4E:DB
Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial: 010D0C9F432858484AAAE36147B680B0091974C0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/29b0455b-b0db-3bef-ad71-5d8eab166a05.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 13768
IP address blocks: 64.29.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:e3:61:47:b6:80:b0:09:19:74:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=61958d55-edb3-4ccb-9870-98449a6bb6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:63:59:d6:5b:bc:9f:1e:73:43:f6:fa:72:7c:
00:26:e0:71:ff:23:ef:1f:7e:84:80:00:a4:1c:fd:
8d:99:a0:1b:3f:91:80:46:f5:df:5c:e7:3e:a7:e8:
2a:87:63:55:68:07:9f:74:de:4a:fb:9d:7a:23:21:
f0:9f:93:af:fc:56:d4:83:97:42:cd:8b:f2:ab:e5:
df:b1:36:76:90:6f:9e:c6:55:df:1e:60:7d:4c:e5:
8f:82:ac:19:e3:54:f5:0b:6f:1b:29:b2:99:14:a8:
1c:46:22:f7:b0:88:d5:43:82:fe:27:c0:79:9a:87:
f5:bc:8d:0b:bf:56:0a:ca:d3:9d:62:ee:df:c3:d5:
d3:f1:61:a7:af:4c:31:30:c3:fe:36:88:79:fd:dc:
34:99:d6:0f:f7:f9:11:c8:ac:49:af:f4:71:ef:76:
2a:b3:ac:87:d3:5a:64:e1:43:90:9d:eb:04:2a:5d:
f3:6c:a9:b1:4e:fb:fb:25:e6:03:c3:86:64:d9:45:
f4:54:43:2e:77:8a:69:ef:71:2b:a0:f1:d2:57:d2:
46:f8:5c:3d:59:d6:73:78:cf:8f:fa:88:0f:50:0d:
b3:a3:76:49:85:3d:3e:54:3b:7b:7a:20:47:82:5b:
c2:db:1b:a1:8c:ea:d7:38:eb:4e:4c:79:09:df:4e:
f5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AA:1E:F5:2A:A4:F1:AB:E6:76:A4:4C:C6:24:CF:1C:AE:4B:4E:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/29b0455b-b0db-3bef-ad71-5d8eab166a05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
X509v3 Authority Key Identifier:
keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
sbgp-ipAddrBlock: critical
IPv4:
64.29.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:2a:3b:57:d6:e9:b0:ea:02:b9:29:02:f1:a8:78:6f:ec:bf:
58:cd:6c:b1:50:c3:b1:dd:c7:de:6c:4c:53:c7:47:5e:54:04:
f9:3f:aa:2e:40:9e:91:b1:ac:19:ee:70:ed:5c:00:6f:b0:3e:
ff:ac:ec:ff:4a:f6:15:dc:03:e7:32:30:bc:e9:39:29:13:aa:
bd:5e:39:94:23:50:4a:67:03:0b:9e:28:f2:a0:6c:fc:b5:3b:
3f:ca:d6:ee:40:27:a3:89:c4:36:ff:93:5a:c6:e1:3a:bf:d4:
34:24:6d:75:20:ef:1a:e9:7c:9d:94:0a:6e:1f:ec:64:6f:40:
71:ed:95:94:36:74:21:16:05:f6:c5:8c:2e:82:97:a3:46:ef:
f1:e9:36:93:0e:19:c2:81:35:aa:28:11:ac:49:4c:4b:2c:ce:
d8:09:4e:ae:4b:d1:38:e2:b0:8a:e0:80:4b:02:4d:9c:94:37:
89:7b:f1:de:25:34:83:95:79:4a:5f:47:ae:4b:fc:eb:a7:42:
91:db:1a:f5:54:f3:99:bc:bd:0f:7a:f6:1a:f0:ba:21:fe:5f:
ed:24:9e:1d:eb:e1:9f:fb:9e:93:68:f3:66:e6:77:b5:cd:51:
33:ed:b6:fe:eb:3a:5c:8a:ae:ee:f1:cd:ab:1a:28:1f:69:82:
08:8b:7b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:28:56 2025 by rpki-client