Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f9643951-7cbf-30d6-b0c3-92404b8ab0e7.roa
File: f9643951-7cbf-30d6-b0c3-92404b8ab0e7.roa (raw, json)
Hash identifier: QZ/X725WPXYjFXxwX6RPoCKXArxaT7aKYFdjdmozZRw=
Subject key identifier: 09:3F:DE:0E:6A:FB:EC:51:DF:99:FD:9E:93:03:F9:C3:1F:93:E0:88
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F432858486695B422E00D3388EDD20680
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f9643951-7cbf-30d6-b0c3-92404b8ab0e7.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 13414
IP address blocks: 64.63.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:b4:22:e0:0d:33:88:ed:d2:06:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=f25bec29-f673-4596-a933-65a9e450e9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:09:20:98:c1:c2:1c:72:8f:76:12:b4:f5:30:
30:65:9a:77:52:d4:96:32:6e:3f:97:00:df:fe:7e:
bf:66:7e:b5:fa:84:44:33:9a:b7:db:9b:dd:3d:11:
3c:06:5f:ec:41:2b:c2:78:03:74:de:e0:56:bf:0d:
f6:e9:ce:64:c4:8c:fb:4e:48:65:96:5a:66:76:17:
a6:df:af:db:db:81:3e:06:50:7f:dd:0b:f7:6b:46:
a2:34:5e:1f:ae:46:66:f4:97:f0:e1:35:a6:d7:58:
94:6a:1d:27:9d:27:90:58:a9:fc:cd:ed:d7:3a:0d:
b7:ba:2c:b2:4d:59:d9:7f:9a:73:8f:b0:89:40:9a:
6c:07:fd:73:d1:77:11:ed:ae:f2:c0:cb:70:e5:42:
64:18:75:94:21:c9:4e:5f:f3:5a:cd:c7:1b:0f:96:
13:77:58:37:40:13:64:ba:32:2a:46:a6:da:fb:d4:
d1:57:9d:d7:7c:2c:07:b9:1e:01:52:9f:1f:74:ef:
f3:b8:53:01:fd:16:2e:41:e7:31:3c:b2:38:47:0c:
2c:ab:9e:50:34:bd:ea:62:3e:b0:de:fe:14:ca:a1:
70:86:51:35:38:32:93:99:2d:cd:32:24:5c:6e:c6:
e7:cb:27:5e:78:fc:42:af:94:34:77:66:27:14:91:
d6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3F:DE:0E:6A:FB:EC:51:DF:99:FD:9E:93:03:F9:C3:1F:93:E0:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/f9643951-7cbf-30d6-b0c3-92404b8ab0e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
64.63.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:23:b8:b7:59:03:63:0b:b8:6c:6e:92:24:e6:81:6d:6f:d8:
98:5d:de:25:d7:40:4f:35:81:79:90:8c:20:98:a0:c8:fe:f8:
77:99:71:bc:55:0c:9f:87:82:cc:47:32:ee:0b:26:72:ac:35:
4c:82:3b:d2:75:a8:41:25:82:69:7b:7f:da:1f:53:3c:70:6a:
2c:fc:c0:bd:c5:94:7a:c8:18:a3:1a:24:f5:a7:d7:0b:b5:a6:
79:66:af:96:cc:1f:90:69:01:28:53:0f:07:cd:a5:09:c5:24:
38:1e:ee:6e:12:ef:02:ab:03:17:b3:97:ee:3f:71:d5:57:5f:
1b:b9:d9:6c:c8:44:df:c1:ca:4f:fe:df:1b:49:25:54:90:6d:
dc:f0:11:36:f8:00:a5:35:ba:4a:8e:dc:90:8c:e5:31:a7:9c:
6e:b7:f8:68:02:b8:34:8d:38:1a:06:94:d2:55:f5:99:c5:48:
42:36:cb:1c:65:75:da:47:16:6d:14:c3:7f:54:84:28:5e:f4:
be:40:12:bc:dc:1f:2a:80:14:43:f1:72:42:25:bf:3c:e5:47:
a2:5c:6a:60:67:b3:ae:df:e7:6f:40:44:fd:c2:41:99:7a:d8:
a4:ab:bd:65:7c:08:9f:78:55:b6:3d:ba:2f:6d:37:96:cb:7c:
8d:8b:a3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:34:34 2025 by rpki-client