Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/2bddaf52-0bfd-3720-a659-08b525bd7d6f.roa
File: 2bddaf52-0bfd-3720-a659-08b525bd7d6f.roa (raw, json)
Hash identifier: M7KHNgU+5DSEhkBCEdaiX78QJVV0tJOIpt4zoZiQFR8=
Subject key identifier: 93:8E:0D:AA:67:FF:44:70:3F:1C:1C:93:51:DC:F7:C4:98:7D:B8:82
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F432858486695BA796703AA44D15CFA00
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/2bddaf52-0bfd-3720-a659-08b525bd7d6f.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 13414
IP address blocks: 64.63.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:ba:79:67:03:aa:44:d1:5c:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=5d4d29bf-e45f-49a0-9417-9f12605cbebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:31:70:ec:38:8a:71:92:d1:a8:94:41:65:ee:
e8:3f:26:50:5f:36:e1:cb:f9:1a:5f:33:8f:b4:38:
2b:7e:1d:7f:88:4e:6a:d8:d8:18:66:38:30:fb:33:
1f:e2:83:64:06:f1:b2:de:33:8e:94:30:10:df:5e:
dd:99:c4:3f:80:21:8d:9e:71:32:82:2d:fb:c2:c9:
18:57:2f:04:6c:97:0c:9e:a0:c5:9f:70:53:fb:60:
b7:3b:ac:38:84:02:b3:b1:8a:4d:25:39:24:d8:1c:
e3:2e:b1:13:09:77:73:17:f0:7b:35:81:05:7c:e7:
92:d1:14:c7:22:17:5e:a0:c3:da:b6:95:40:f6:b4:
de:7b:de:7a:76:d1:ac:8e:fa:fc:17:ab:6e:b8:b6:
f4:f5:f7:70:a2:13:71:25:36:d6:1d:34:7f:65:48:
2e:49:73:49:7c:c9:07:8f:b1:cc:94:58:05:b9:13:
bd:09:de:2f:03:a0:30:4b:52:c2:b1:0d:62:ff:b0:
e5:47:a3:35:64:21:3f:93:8b:7e:3c:e5:23:10:c5:
79:af:71:82:91:6c:81:8e:61:80:17:8b:df:3f:a5:
5c:c8:57:3e:87:77:83:7d:2f:8d:a3:75:3d:94:44:
7a:d4:48:a0:8c:1c:e1:68:f2:9b:b9:d3:ef:b6:e8:
2f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8E:0D:AA:67:FF:44:70:3F:1C:1C:93:51:DC:F7:C4:98:7D:B8:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/2bddaf52-0bfd-3720-a659-08b525bd7d6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
64.63.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:82:67:e0:e1:97:59:90:eb:fd:0e:06:ee:61:ed:ab:66:cc:
37:8f:69:e6:78:4a:b2:23:7b:9e:6e:63:a8:b6:e5:cc:1e:6d:
76:7e:3e:d7:e4:4f:ff:f8:b7:ec:a5:17:7d:77:da:63:ea:20:
25:3f:eb:b6:48:87:14:1a:d4:a8:c2:ed:ad:a7:13:a8:b5:aa:
e2:83:29:fe:e7:27:7e:5c:1f:d8:f6:17:31:b8:49:27:80:1d:
1a:95:50:53:7c:3e:28:35:aa:6f:3c:d7:e9:ea:55:18:0a:f7:
52:c1:14:56:1f:c0:10:e2:3b:d4:36:31:8f:ae:a2:a1:b1:29:
a7:83:8d:72:5f:fe:60:e3:24:3c:23:3a:4e:98:e8:5b:72:16:
c6:bd:27:01:7d:50:bf:78:d1:0f:b9:ce:c7:aa:d6:ff:4d:ac:
e4:d5:73:1e:99:dd:28:06:7b:3e:48:a4:35:c6:77:32:b0:7d:
fb:a5:b7:62:94:22:8d:8b:04:2d:58:ce:22:1b:f5:6e:f3:95:
1b:7c:ce:19:f5:71:59:29:7f:3f:64:2f:24:af:4d:b5:0f:5c:
26:bd:97:e1:d6:f2:d0:6e:ae:43:4e:8f:3f:d4:64:71:ee:2f:
ce:2a:a7:8b:64:1c:4f:03:05:49:4e:9c:b8:66:0b:5b:9b:33:
18:d2:32:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:34:47 2025 by rpki-client