Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/2a16a396-2c27-3987-8c67-8adede3e55eb.roa
File: 2a16a396-2c27-3987-8c67-8adede3e55eb.roa (raw, json)
Hash identifier: DYHowwxx25BlmWLvpfcHWlRzfuMuUaJpXCHuTg/PgLU=
Subject key identifier: 35:34:E8:5F:80:21:C0:9D:F1:D4:3D:28:E6:46:DE:4D:3D:28:75:0D
Certificate issuer: /CN=5dcf6139-5993-4941-a803-3ff450a6149e
Certificate serial: 010D0C9F432858487755DD6E28D8AE8EAE198500
Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/2a16a396-2c27-3987-8c67-8adede3e55eb.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 61317
IP address blocks: 64.113.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:dd:6e:28:d8:ae:8e:ae:19:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=5b5c0204-e96b-427d-a4d8-a6c6e7d9c590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c6:33:63:14:5e:a2:cf:95:e7:02:59:05:11:
28:ad:83:37:92:b7:a3:e6:76:7c:86:05:71:de:8b:
b9:11:b3:c3:94:22:7b:d2:f3:cd:ec:8e:dd:49:18:
1e:75:be:bd:8c:e0:0d:bb:0f:7a:d7:b5:e6:93:01:
4a:62:c1:e2:52:ae:15:d1:18:59:a6:1c:bb:38:1e:
1d:13:43:64:69:b0:b5:ef:8a:7a:b8:41:fe:82:10:
dc:cf:17:41:9c:ad:40:9f:6d:18:ac:7f:ba:a2:2c:
84:78:6a:c5:bf:46:e8:99:fe:0d:da:51:22:cb:41:
6f:28:06:e5:b7:15:c3:59:56:0d:1d:6d:9f:c5:f5:
f7:21:7f:8d:97:38:93:6f:7b:83:ba:7c:ed:d6:a5:
f3:15:98:a9:4c:1c:0f:db:ab:50:c4:a7:dc:e9:7d:
17:cc:18:31:ea:8e:d5:71:72:3b:fa:7e:26:20:34:
26:6d:fb:90:a7:03:3e:fa:8a:4e:a9:e6:71:d2:0f:
69:16:47:9a:6d:50:5c:84:a3:5d:48:8b:99:cd:cc:
9c:dc:ec:fe:9d:89:7e:13:e5:27:de:f8:18:d4:cd:
07:8d:14:ae:84:d2:be:42:05:47:70:61:12:c0:9c:
a4:31:4c:02:35:07:42:55:87:c5:ae:de:bf:ab:ab:
9e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:34:E8:5F:80:21:C0:9D:F1:D4:3D:28:E6:46:DE:4D:3D:28:75:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/2a16a396-2c27-3987-8c67-8adede3e55eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl
X509v3 Authority Key Identifier:
keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
sbgp-ipAddrBlock: critical
IPv4:
64.113.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:bc:2f:ba:07:87:9f:66:df:ac:4c:34:5c:77:d6:a2:5a:11:
1c:a5:16:92:92:bc:63:77:15:98:a1:90:9a:48:5d:13:1e:dd:
8c:3e:ae:eb:15:d5:c6:ad:05:8d:1c:84:29:c1:09:02:b8:55:
e3:9d:fe:98:38:30:bd:e4:99:71:99:16:fc:5b:e5:a7:19:ad:
97:f8:7b:5f:9f:78:1e:70:87:86:d8:07:1d:0a:7b:a4:53:44:
07:ea:fb:1b:0a:28:47:25:7a:47:0d:2c:34:36:76:7b:1d:bf:
ec:1b:51:fd:ef:20:fb:0d:96:5e:bf:61:00:b1:30:73:5f:4f:
28:15:1a:38:b0:63:05:7f:9f:99:aa:a1:4e:51:50:5d:b9:e6:
a2:9f:c0:57:2f:cc:2f:e0:c4:43:f4:e6:b6:71:01:f9:6a:15:
3f:7c:87:b3:5c:5b:2d:41:45:c4:8b:01:ce:6d:2b:bd:10:56:
4a:b2:37:65:3a:fa:27:f4:1c:5c:22:e0:f9:66:3a:1e:c0:ef:
f7:b6:e2:82:50:1f:3a:9d:22:b0:cd:e4:ad:69:b5:de:79:af:
e2:67:a7:9a:95:e8:51:43:b4:57:09:bf:73:7d:e0:3b:d5:8a:
3c:f9:15:33:8c:a0:f0:fb:13:92:d5:8d:7d:70:27:03:22:ec:
5e:e4:fe:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:49:16 2025 by rpki-client