Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/c10be178-41da-38c0-aa71-3d02d08e892d.roa
File: c10be178-41da-38c0-aa71-3d02d08e892d.roa (raw, json)
Hash identifier: FAvmg+Zll7Bqv+hJU8vhhy0SkWw1C8g7LLOKB2iZmD8=
Subject key identifier: A6:01:62:57:63:D2:51:1F:43:75:1A:F2:E3:94:F1:90:C2:0A:F0:97
Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7
Certificate serial: 010D0C9F4328584827C54828083318D88A552480
Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/c10be178-41da-38c0-aa71-3d02d08e892d.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 21657
IP address blocks: 64.147.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:48:28:08:33:18:d8:8a:55:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=bcc9fd21-5e75-47c1-a2f0-74f391348957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:24:d5:06:0a:e1:ea:c7:86:f5:92:26:2c:ec:
fb:0e:24:42:04:69:c7:35:86:37:75:fe:78:71:7c:
0f:13:96:6f:9f:7f:f5:47:75:66:44:60:46:76:22:
dc:2a:68:10:a8:a7:52:13:53:61:c7:6c:d4:4d:2e:
8b:bf:0f:cf:af:b3:ce:67:e8:2c:74:0e:85:49:b2:
39:c2:ff:86:d4:26:c7:c7:a5:4e:31:18:28:33:24:
d5:df:79:d4:19:46:69:9d:71:13:88:c0:ec:f0:d6:
ef:3f:3f:08:aa:0e:17:f2:2a:db:33:9d:45:f7:de:
06:f1:13:7b:c5:e5:17:b7:23:f9:9f:a1:86:39:f7:
d2:b0:24:2d:36:67:06:e1:94:26:7a:e5:ea:71:f9:
43:66:64:9b:90:92:e9:fa:5e:d8:56:f6:8d:3e:33:
fd:20:04:f4:a3:cf:1f:66:e1:41:34:bd:29:96:5e:
2a:5a:8c:9d:d4:44:01:86:bd:6d:e7:33:76:9e:15:
98:9c:cf:31:df:9e:78:d0:5b:9f:18:b2:95:ca:8e:
0e:8e:89:40:b1:57:48:ee:ad:1f:67:ab:85:09:e9:
f9:68:28:1c:86:72:32:cd:f6:8a:5b:13:c3:1b:3d:
a2:68:28:8e:80:ce:d5:e4:89:d0:39:a7:59:56:e1:
a1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:01:62:57:63:D2:51:1F:43:75:1A:F2:E3:94:F1:90:C2:0A:F0:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/c10be178-41da-38c0-aa71-3d02d08e892d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl
X509v3 Authority Key Identifier:
keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer
sbgp-ipAddrBlock: critical
IPv4:
64.147.229.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:85:6d:8f:ff:7b:ec:31:aa:7d:e1:a7:0b:15:0f:b6:f7:3e:
b3:bd:01:6a:b2:4e:f3:5d:a9:62:80:ca:14:af:54:68:84:e2:
bb:5c:51:c9:59:ff:f0:85:a0:83:d5:ae:b4:2c:75:41:d7:62:
89:f6:cc:88:43:50:a2:dc:b7:17:8e:55:34:1d:9b:90:f5:3b:
d8:a3:75:f8:58:b3:6c:a4:5f:a5:33:a7:cb:3f:22:37:c9:69:
75:0e:57:f7:64:d2:8b:ea:74:4c:3b:ae:98:b4:07:d4:97:6b:
9e:c1:ee:c5:68:19:b4:cf:99:28:5c:9b:21:09:47:12:98:3b:
47:60:f5:e3:d2:da:c4:15:ea:08:4a:01:82:06:3e:ad:78:3d:
17:7c:8b:3e:fc:dd:eb:3d:54:0a:73:d4:8d:84:1b:e3:25:0d:
05:1f:f1:0f:50:43:bb:66:21:62:b2:dc:f7:28:31:46:64:f2:
76:67:15:fe:f4:da:02:b4:4d:4e:47:2d:87:c3:d6:0d:7b:03:
5d:82:90:f4:c0:d0:ff:38:b5:24:ca:fc:f9:6d:7c:a1:f1:a8:
89:92:ac:78:41:bc:39:c7:12:7d:02:0a:7f:c8:4e:ea:35:bc:
b5:25:16:70:da:ab:1d:d6:25:0c:42:8f:52:36:e1:44:70:68:
a8:88:26:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:35:59 2025 by rpki-client