Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d51fd254-9132-3c5e-9f20-b890540aa448.roa
File: d51fd254-9132-3c5e-9f20-b890540aa448.roa (raw, json)
Hash identifier: 6A3B9hv5fLPZEXd5jJfU+999XClt0cjO+WeKdZw0uPA=
Subject key identifier: D5:B2:CE:8E:D1:3E:6E:67:B7:E1:D9:33:46:81:00:43:6B:E9:78:CD
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F43285847ED24BFA8400714A3C591EF80
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d51fd254-9132-3c5e-9f20-b890540aa448.roa
Signing time: Tue 19 Nov 2024 02:00:27 +0000
ROA not before: Tue 19 Nov 2024 02:00:27 +0000
ROA not after: Mon 17 Feb 2025 02:00:27 +0000
asID: 11090
IP address blocks: 64.4.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ed:24:bf:a8:40:07:14:a3:c5:91:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Nov 19 02:00:27 2024 GMT
Not After : Feb 17 02:00:27 2025 GMT
Subject: CN=16db76a6-7a06-43df-a43e-f3277c08e556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e3:4f:03:e7:55:e2:5d:d7:c9:d9:3e:7d:5f:
5f:98:2a:da:2c:24:39:fe:c3:a0:ca:51:93:ee:32:
ab:66:0b:d5:de:88:32:23:fb:93:98:d7:85:b3:1f:
5f:d8:de:de:09:81:00:85:3c:1d:95:00:30:75:02:
db:ec:76:e7:62:c0:8f:1a:a1:d3:4b:54:05:9e:85:
35:a1:0b:a7:13:ef:b0:9c:50:0e:b4:f9:02:4b:a2:
38:51:4c:4b:31:18:20:29:13:39:83:87:5f:f4:f4:
65:e6:83:de:45:d6:e5:6a:0c:c5:6a:6f:70:21:f3:
65:e2:7f:90:c7:fa:74:e7:68:8d:72:4c:5d:32:3c:
d7:37:b7:69:3d:c4:05:9e:89:cb:f0:f7:67:e2:db:
ce:9f:1e:53:11:e9:2e:12:33:8f:79:6f:40:d1:f4:
b2:17:35:6c:dc:f1:f0:35:96:c7:16:55:e9:77:09:
d7:13:07:67:86:fe:a9:77:a8:e5:87:0f:f3:02:87:
6c:e7:e8:fe:01:68:15:67:02:e4:6e:0b:49:8b:a9:
e2:71:8c:7e:8b:39:86:cd:81:25:ba:0d:a9:9f:27:
82:e2:86:f6:5e:2a:56:d9:91:be:50:ab:d4:8e:fb:
af:02:f4:43:ec:40:3f:8a:2d:35:f6:1f:12:13:9d:
a1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B2:CE:8E:D1:3E:6E:67:B7:E1:D9:33:46:81:00:43:6B:E9:78:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d51fd254-9132-3c5e-9f20-b890540aa448.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
64.4.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:40:a8:23:ce:61:3b:b0:b2:16:c5:0e:09:da:77:1a:4a:28:
be:33:8c:23:33:93:5d:91:0b:21:a9:75:8d:00:03:0e:37:28:
fd:29:fb:12:c7:ac:65:a4:0a:5a:50:ae:eb:79:c6:15:2b:4c:
55:c8:f3:13:d4:e8:b7:e1:3f:f2:8e:71:e6:c9:a3:26:34:6c:
db:de:eb:93:4c:7b:fa:b6:91:28:0f:dd:e7:a9:a4:d6:f0:71:
62:68:68:78:56:16:20:fe:fd:2c:1a:58:18:4a:74:90:5b:cf:
69:08:44:32:e9:50:53:a6:48:c3:05:85:cd:3b:3a:e9:14:f5:
bd:96:58:8c:ed:9b:69:ba:4b:a2:cc:8a:d9:7d:92:3f:cd:cd:
3f:2e:d1:24:c7:f3:fe:62:da:cf:c3:52:eb:8e:65:21:40:9b:
f0:1c:b0:0d:10:e0:7e:20:66:27:af:87:af:2e:60:44:e0:a6:
70:ae:d4:d6:a2:47:19:e7:49:c0:31:82:62:fd:7e:91:65:28:
45:b5:e3:52:34:7d:fe:8a:7d:2a:fe:61:c3:81:15:6d:34:2f:
d3:79:9e:f6:81:b3:db:dc:c4:59:07:f0:93:05:45:b0:8a:f4:
f6:85:7f:57:3a:a2:98:26:c4:10:81:b7:4d:7c:85:4f:3b:69:
e1:87:5f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:25:01 2025 by rpki-client