Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ba928cd3-74e7-3e5f-a258-c51d51f5a624.roa
File: ba928cd3-74e7-3e5f-a258-c51d51f5a624.roa (raw, json)
Hash identifier: +RHU9Xn17dET+f/UBenQW5bXM92F640HPQxSiw3WW2w=
Subject key identifier: 4A:24:F8:82:C5:C7:2F:FB:FE:D2:73:C9:12:B5:00:DB:1C:94:0D:78
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F4328584869605EC2E8206E7FB0647960
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ba928cd3-74e7-3e5f-a258-c51d51f5a624.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 13414
IP address blocks: 64.63.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:5e:c2:e8:20:6e:7f:b0:64:79:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=f16c71d8-bb41-4485-b6b2-5cebb135a691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b9:c7:41:d8:ac:67:09:26:54:4d:ff:03:8e:
db:52:82:07:0e:9e:71:18:af:69:61:24:c5:2b:85:
19:2d:fe:bb:41:4e:5d:c0:72:15:73:1b:fb:4d:d6:
76:11:04:aa:ac:46:5d:28:48:6b:e2:16:92:4e:cf:
f4:74:fe:8b:c4:1c:5d:27:8a:ac:21:ed:a1:2b:b4:
14:97:fd:86:7b:54:68:4c:21:23:ae:ea:80:b2:50:
92:7e:57:4d:a5:bc:83:68:78:86:e0:5c:91:37:56:
3f:73:43:b2:74:60:13:5b:30:97:26:4b:6a:91:2d:
71:be:5c:c9:b6:b6:27:99:b8:c4:9d:19:ac:e9:a2:
4b:5f:60:04:bb:7e:99:89:64:2c:5c:7f:50:9f:69:
47:d9:66:fe:dd:4f:d2:0d:26:16:61:a7:ea:57:3b:
02:a9:ea:0c:ab:db:84:b7:f8:7b:f1:5a:45:f0:61:
eb:91:f7:91:10:52:ce:36:56:3d:ff:51:06:6d:9f:
ca:f4:09:0a:ef:8e:7d:10:70:53:c5:f3:7a:b1:94:
69:e7:20:5c:60:87:04:81:54:c9:fd:de:c4:c5:7c:
02:d8:cb:bb:43:b3:0d:3f:53:a2:46:02:ac:24:f5:
42:43:f8:5c:d6:18:77:98:6f:9f:7d:ec:08:e1:0b:
ab:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:24:F8:82:C5:C7:2F:FB:FE:D2:73:C9:12:B5:00:DB:1C:94:0D:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ba928cd3-74e7-3e5f-a258-c51d51f5a624.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
64.63.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:3c:ee:a9:99:1f:60:a0:98:6c:d7:5d:b0:19:04:e6:2c:5c:
eb:f6:76:1b:e6:99:f2:a6:fe:57:d6:2e:4b:37:c4:20:da:65:
bd:05:46:8b:ef:f1:90:fe:e6:b3:48:3b:de:7f:f7:c8:21:af:
75:0d:1b:97:94:55:0a:59:e8:20:71:66:0f:4f:5d:43:3e:52:
e4:ea:26:51:82:85:32:3d:81:46:5c:63:49:3f:29:e2:2c:66:
df:28:79:57:72:c8:d4:6e:eb:81:41:0a:f2:4d:6e:e7:d6:ef:
27:f2:1d:35:59:d5:0e:22:2a:57:11:45:c3:82:07:98:5e:e9:
69:ad:ed:64:a9:c8:7c:e2:7b:63:ee:79:d7:d0:1a:be:ee:2b:
83:a6:cf:1b:6c:f2:50:9f:db:33:ba:d2:4f:6c:46:9f:12:44:
54:e0:b4:67:f6:3c:68:a6:73:83:4f:47:cd:78:1a:a8:cd:6c:
2b:b3:c3:4c:f1:72:42:1c:4a:20:06:f6:d7:e1:94:53:04:52:
32:dd:90:72:18:ba:a7:61:d1:dc:74:a1:65:c5:89:f7:17:30:
76:56:bc:e5:7b:53:d5:d7:d7:61:c7:0d:ad:04:ca:80:e9:e1:
f2:31:60:27:69:07:8d:d9:23:4a:1a:f4:7b:37:02:64:7c:90:
95:b0:75:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:59:29 2025 by rpki-client