Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/6851468d-791f-3582-8090-bbf757f8e43b.roa
File: 6851468d-791f-3582-8090-bbf757f8e43b.roa (raw, json)
Hash identifier: pUP94FaxGnEBNyTnbWGCJ4Nb2EXXQYjTH4FfNhAaVOI=
Subject key identifier: 7E:14:3A:FA:10:C3:35:8B:1D:70:6D:37:22:FC:22:AD:D8:7A:4A:0B
Certificate issuer: /CN=d00749ed-70ef-447c-b17c-da6be8d7f312
Certificate serial: 010D0C9F4328584851A5785028F3FF5A9EA11600
Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/6851468d-791f-3582-8090-bbf757f8e43b.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 36236
IP address blocks: 64.68.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:78:50:28:f3:ff:5a:9e:a1:16:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=22fd7668-73d1-416c-976e-bf174cf1f864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:be:16:8f:95:ea:1e:a3:8d:b4:ab:2c:d6:de:
51:40:5e:14:d3:3e:a9:a2:ee:37:fe:b1:45:7e:73:
4d:ab:da:1a:d9:8e:ed:18:ef:d8:8a:f9:e1:b7:93:
1a:4a:e5:68:89:b8:3f:60:10:96:17:ee:6b:66:ca:
67:02:7b:94:83:aa:bb:2d:c7:20:b7:a7:c8:fa:4d:
a7:74:46:ac:7b:68:c7:34:a3:a7:6b:7a:0c:5a:2f:
6d:bb:76:1a:ca:ba:67:12:ab:00:ab:b5:3a:46:49:
ba:8c:cf:2f:d9:87:cb:e7:24:2a:c4:f6:44:9c:47:
71:c8:bd:34:09:5c:63:fc:b7:d0:8a:fb:7c:95:df:
61:a2:75:6e:b2:7a:47:bf:bf:14:42:5a:fd:32:ba:
41:a5:07:f0:7e:99:5e:7d:b7:16:c7:75:15:4d:22:
de:0e:9c:5d:c8:9f:3d:a7:97:01:0c:2d:00:22:d9:
d9:d1:e6:6a:62:1a:35:87:35:8b:88:de:0a:ea:d1:
b6:27:54:3e:af:22:7d:f1:c1:92:2d:bc:e7:27:6a:
37:08:d0:f5:a6:75:99:73:e3:be:25:ad:97:14:17:
aa:7a:bb:eb:d1:24:7d:9f:c5:1e:57:6f:02:d5:3b:
54:31:39:2c:b7:f3:46:5f:2a:79:ef:36:c5:b6:a0:
4c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:14:3A:FA:10:C3:35:8B:1D:70:6D:37:22:FC:22:AD:D8:7A:4A:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/6851468d-791f-3582-8090-bbf757f8e43b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl
X509v3 Authority Key Identifier:
keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer
sbgp-ipAddrBlock: critical
IPv4:
64.68.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:8d:00:16:d4:32:46:a6:8f:82:18:93:f0:13:53:f1:e9:9d:
ee:2c:8b:11:5c:b1:c8:38:1f:bc:6e:e2:2c:bb:9b:59:2a:93:
a0:de:72:7c:58:93:7e:d5:7a:29:c9:e3:85:45:55:8c:10:ad:
2c:3a:eb:7e:dd:2b:29:91:5b:82:b7:cf:4d:10:09:45:57:f7:
b9:83:58:3d:90:d5:44:41:b4:f6:54:00:5a:a2:04:5c:13:c1:
b8:9d:18:56:6a:9c:6d:41:35:9a:7c:69:c7:53:03:f5:ba:9a:
8e:b6:e9:47:f1:23:d3:08:49:6e:5e:a9:11:ea:cc:ba:45:28:
9f:bc:fa:44:a4:bc:1e:77:83:9c:d5:47:64:a3:25:36:7d:de:
9c:62:21:a6:b2:51:47:6a:0c:d4:05:16:28:75:4d:5b:eb:20:
4b:8c:35:33:e1:61:93:0b:6c:38:59:78:e8:52:88:f0:11:bf:
9d:af:bf:d5:14:27:14:17:39:e7:6e:f2:fe:b2:4e:23:43:0d:
6f:b5:4c:4d:47:f6:9d:3c:e8:df:3a:46:1e:94:ca:ff:aa:23:
36:6a:e5:85:10:d2:37:f8:25:e0:4b:6a:41:5e:b4:49:24:43:
77:4c:a5:73:ab:7b:e0:9f:28:7b:18:c7:e0:51:00:94:b8:0e:
73:bc:cc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:49:08 2025 by rpki-client