Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/39eed8f8-2ef9-361b-9a74-528e1a06ab68.roa
File: 39eed8f8-2ef9-361b-9a74-528e1a06ab68.roa (raw, json)
Hash identifier: i1ijo+m3fL/TjYOYqjlR0sEdMMX172fyHNPR9hwKPEQ=
Subject key identifier: 21:69:68:0B:42:42:67:E2:50:3E:4C:62:85:01:AD:6F:41:D1:1E:C6
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F432858486695B99F7A80B770152F5F80
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/39eed8f8-2ef9-361b-9a74-528e1a06ab68.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 13414
IP address blocks: 64.63.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:b9:9f:7a:80:b7:70:15:2f:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=595f38b3-65e7-40e0-b158-fd78b911772b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3b:c0:00:76:ca:27:0d:70:7d:64:05:df:7b:
f8:f0:b8:fb:f5:f6:1e:8b:80:ef:4d:99:da:f4:b0:
4d:82:00:ad:bf:70:1e:cf:1d:0a:f2:e3:2e:a1:c6:
33:82:ae:4a:81:f2:db:08:2f:0f:87:ca:40:3d:ba:
db:c2:b6:8a:31:33:85:19:c3:fe:64:d2:a8:88:a3:
28:3e:a9:84:3a:ee:88:e1:9a:ad:57:f3:c4:19:1c:
11:51:85:0b:97:5d:9d:36:2e:16:a7:76:69:2e:28:
b8:62:e5:8e:26:1e:f5:a8:66:1c:b2:a9:85:c0:28:
03:ba:d7:94:97:cf:6c:89:01:50:dd:c5:58:29:bb:
e0:97:28:f5:16:7a:66:34:6d:cc:8d:1e:9b:f9:50:
a3:ee:18:41:59:35:65:c8:5f:8c:9f:7b:06:fb:af:
7a:a1:d8:eb:5c:64:06:ff:fc:85:d0:f6:36:e3:fa:
65:65:a3:0a:54:3d:0a:7f:b8:8d:c7:27:25:6d:c5:
35:de:0e:58:b0:a3:e5:a0:28:4b:12:83:36:b7:45:
23:9f:75:40:12:7f:e9:74:c0:86:34:bc:6e:dd:3b:
d4:28:2c:8f:12:df:67:7d:11:d2:b2:5c:9c:f1:3d:
87:aa:23:c8:41:40:52:49:50:e7:a4:2d:32:96:e8:
bb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:69:68:0B:42:42:67:E2:50:3E:4C:62:85:01:AD:6F:41:D1:1E:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/39eed8f8-2ef9-361b-9a74-528e1a06ab68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
64.63.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:19:06:72:fb:99:fe:86:40:0e:b9:39:13:e2:38:37:1a:69:
9d:2d:d7:8d:6f:a5:92:b1:4f:eb:25:4a:e1:54:fd:ef:a5:77:
72:72:be:29:c5:ed:62:af:c9:2e:24:0d:75:97:55:78:15:e0:
50:ad:12:80:a6:0f:ee:a1:b9:76:9b:a2:37:d6:20:2e:f2:46:
69:7a:4d:94:f9:60:a1:e3:8e:f6:65:c0:6d:62:ec:b2:01:4e:
77:6e:e2:a4:d1:f9:13:71:f4:92:a7:4d:21:7f:bb:81:96:63:
86:54:23:89:e4:58:c4:03:9e:ce:ad:4e:47:71:0c:0c:09:55:
3d:62:91:9c:23:e4:5d:21:00:5d:ae:a2:5e:4e:fc:b1:9c:e0:
a9:7a:8e:bb:c3:d0:9a:9e:20:bf:22:65:d7:b1:55:f3:bf:7d:
6b:e5:52:84:b6:4c:bc:aa:7e:65:f2:8c:6b:a6:f1:10:1e:2c:
ba:b7:1e:c6:a2:e7:ea:ae:c2:41:73:1d:ab:99:09:5d:a8:1c:
de:85:4a:e5:7d:25:12:00:de:91:9d:15:44:c7:0b:11:e1:d6:
fa:7e:48:4e:c1:57:95:42:85:0e:49:e3:ec:10:49:ed:17:a7:
09:80:5b:21:ff:0a:b4:5e:18:52:c2:a2:1c:0c:bd:d1:4a:d1:
ee:83:a7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:31:46 2025 by rpki-client