Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa
File: 1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa (raw, json)
Hash identifier: g/AmJgv465UcSTd6muxfB6SeTwqivf8Xdc2hNHq2pMc=
Subject key identifier: FC:10:2E:CE:00:5C:C1:32:8B:0C:09:52:8B:1C:66:D3:2E:86:8F:1F
Certificate issuer: /CN=d00749ed-70ef-447c-b17c-da6be8d7f312
Certificate serial: 010D0C9F432858482395500A2D939BE5C8103540
Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa
Signing time: Sun 08 Dec 2024 14:00:51 +0000
ROA not before: Sun 08 Dec 2024 14:00:51 +0000
ROA not after: Sat 08 Mar 2025 14:00:51 +0000
asID: 396998
IP address blocks: 64.68.193.0/24 maxlen: 24
2620:49:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:95:50:0a:2d:93:9b:e5:c8:10:35:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312
Validity
Not Before: Dec 8 14:00:51 2024 GMT
Not After : Mar 8 14:00:51 2025 GMT
Subject: CN=01dcc88b-12e8-4a26-9a1a-2df3f3cc0483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e6:02:32:a5:d5:72:af:6b:3a:fe:79:f5:62:
f8:8b:4f:08:cc:b6:62:4e:98:4f:58:1c:65:3a:39:
67:fa:74:20:76:8a:24:76:48:85:ca:c0:ab:ab:45:
e3:c2:af:2e:36:65:63:d7:6c:24:b4:6c:c6:a9:84:
78:5a:93:47:5f:ec:af:97:10:af:90:af:34:86:ec:
00:c1:9d:a1:7e:90:55:8c:16:8a:54:f2:d8:c8:37:
e7:c8:06:3b:28:ec:a2:39:66:53:98:2c:2f:25:a3:
c9:86:19:7a:5b:9a:63:fd:59:6e:7c:48:2d:92:c3:
1c:c4:3d:b2:11:00:79:8d:a2:2d:56:7d:1a:f3:9f:
8e:b2:d8:b6:27:bf:cd:df:f2:73:a3:d9:6b:7e:ab:
a1:99:b1:86:21:1d:63:b0:44:42:46:c3:c6:57:8c:
af:79:37:cd:3a:2d:f8:f4:a3:ae:36:ba:a6:35:f1:
ea:83:a2:cc:f4:96:28:1a:d8:09:7b:23:4d:91:05:
6b:9b:c9:9a:e4:35:83:33:8c:46:8d:cb:3c:45:be:
29:52:09:2e:15:63:8d:04:3d:6a:53:cc:c1:45:14:
bb:b9:b4:c5:2e:0f:a4:7a:5b:5b:fa:26:68:76:46:
e7:e4:f5:73:00:1d:27:43:87:02:2b:c6:75:90:9b:
3c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:10:2E:CE:00:5C:C1:32:8B:0C:09:52:8B:1C:66:D3:2E:86:8F:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl
X509v3 Authority Key Identifier:
keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer
sbgp-ipAddrBlock: critical
IPv4:
64.68.193.0/24
IPv6:
2620:49:2::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:42:a6:6c:8c:e2:44:6f:13:99:2d:fa:32:96:92:e9:32:a7:
73:6f:86:92:7c:22:5a:84:04:0e:40:5c:eb:be:bf:95:23:76:
06:10:93:48:58:f2:15:c9:16:b6:fe:19:f2:b7:8d:84:72:69:
f8:a3:43:65:97:69:4a:fb:51:cc:bb:ae:f3:ca:32:15:ab:a5:
fc:bd:56:72:b7:2e:3c:0c:b0:fd:6b:08:ee:ca:a1:de:be:68:
e9:ba:5f:3e:be:bc:e3:e8:8e:c4:78:8b:29:04:7e:cd:8f:6f:
4e:d9:48:4d:64:a3:6d:d9:44:83:eb:fb:47:6c:52:b8:9c:02:
96:d0:f6:ee:8a:ac:e7:08:a5:a7:f6:02:75:69:5b:4e:c0:fd:
f5:cf:d6:60:58:b0:6f:4e:81:d0:e2:ff:be:f8:ee:7e:eb:52:
78:a8:d1:32:84:2f:42:22:7c:3d:c3:17:58:c9:eb:b0:70:7c:
1a:ee:c4:42:8b:9e:92:83:71:f7:37:99:51:79:c5:05:35:40:
15:95:c4:5c:03:e7:e5:d2:6d:27:86:10:51:aa:3c:2a:a7:11:
7f:1f:53:f8:5c:59:9a:5f:5a:6f:76:f5:44:dc:e6:99:49:bb:
1d:69:2e:bb:3f:a1:1e:e7:f3:c7:d7:de:27:ec:ab:ff:4f:b5:
93:22:d9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:36:50 2025 by rpki-client