
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/e14febe8-dc77-3993-886f-c5107e427fea.roa
File: e14febe8-dc77-3993-886f-c5107e427fea.roa (raw, json)
Hash identifier: i1VUK1SOZBp+Ywtew5ng1jT2hr51i9DfYKBrgzV8lVc=
Subject key identifier: 0A:0B:98:CF:14:CD:F5:C4:E1:F8:E9:48:C2:3B:B5:C5:D8:C9:0A:D0
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F43285847ED24C01AA1966B1F039DFF80
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/e14febe8-dc77-3993-886f-c5107e427fea.roa
Signing time: Tue 19 Nov 2024 02:00:27 +0000
ROA not before: Tue 19 Nov 2024 02:00:27 +0000
ROA not after: Mon 17 Feb 2025 02:00:27 +0000
asID: 11090
IP address blocks: 64.4.230.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ed:24:c0:1a:a1:96:6b:1f:03:9d:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Nov 19 02:00:27 2024 GMT
Not After : Feb 17 02:00:27 2025 GMT
Subject: CN=c08897ce-9f09-4ed5-81a0-8940335bb4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d1:e2:f0:0b:c9:a6:c0:ca:eb:27:ca:8c:51:
4a:90:fe:00:aa:73:bf:f6:60:68:ff:e9:f7:93:16:
73:19:1a:b5:0f:f1:0b:4c:ee:6b:fe:11:7d:90:7d:
7e:40:63:51:60:c8:54:af:4a:b0:0b:dc:1d:62:24:
80:e5:e7:47:fb:91:05:7e:3d:41:ba:c4:27:0c:b2:
fb:18:9f:62:3f:31:0e:02:7c:57:6e:a5:97:99:ea:
41:9c:3c:76:97:f3:1f:d1:f1:e4:07:d1:ab:df:58:
5c:8a:d5:e8:57:96:85:e1:45:83:3f:b5:bb:a0:38:
1e:a7:f3:c0:57:42:9a:6b:00:76:7c:5d:6c:51:21:
14:8c:d0:aa:bf:c4:63:fa:26:94:99:94:08:f8:0f:
8c:6a:09:88:3e:2f:b4:71:81:e3:d5:1d:60:e2:d2:
46:66:b8:5e:91:32:e9:19:98:ec:84:90:8a:4b:cf:
39:d1:b4:89:9c:16:93:33:82:62:b0:ba:ab:bb:b7:
ce:a7:5b:b4:41:5a:a2:be:b4:a4:c3:37:64:f8:22:
e9:85:31:72:ac:3c:fd:48:a6:7a:53:92:0a:fd:32:
1b:ef:4a:4b:8f:a9:8c:e7:52:b2:b9:fc:a4:8c:2e:
6b:b6:91:24:ef:75:54:4e:c3:47:15:44:25:62:c1:
36:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0B:98:CF:14:CD:F5:C4:E1:F8:E9:48:C2:3B:B5:C5:D8:C9:0A:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/e14febe8-dc77-3993-886f-c5107e427fea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
64.4.230.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:14:23:7a:5c:01:18:07:e9:c7:e9:be:e5:39:1a:e1:11:06:
22:5b:4d:86:43:e6:f9:17:b0:95:2e:0d:f8:f0:9f:c8:be:3b:
c4:cc:05:cb:e9:0e:ce:c6:ae:87:10:78:0d:f9:b6:bf:e6:8e:
da:15:49:26:43:b7:57:98:3a:bf:e9:a7:7b:bd:a3:ab:86:c1:
c5:74:80:ff:91:e5:6b:67:2e:77:49:2c:9b:78:7a:10:05:35:
23:4e:e7:3d:d9:65:aa:aa:2c:1f:3b:81:24:3a:c9:22:96:2a:
e9:f6:b8:31:c7:67:fd:77:86:02:5f:02:57:be:7a:7e:57:da:
38:33:b6:a8:07:ee:65:ef:da:96:be:ee:c4:d0:32:a4:2d:7b:
03:36:95:51:fa:d8:0d:93:a9:a9:23:32:1d:1b:fa:b6:15:41:
0f:8c:c7:7e:5e:84:ad:42:51:75:60:17:1b:2d:19:2b:d3:9a:
72:c9:7f:d7:aa:61:71:12:df:b8:cf:b3:80:af:e8:1c:78:09:
9f:ff:57:d7:47:aa:86:8e:02:87:8c:a2:85:e3:97:d5:ee:99:
3d:5c:16:97:bf:9b:b0:0e:3d:34:0b:63:53:6f:f9:32:ac:42:
56:c2:9d:07:e6:c5:8a:6d:1b:18:20:53:cb:41:15:01:41:36:
ff:fe:2b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:30:31 2025 by rpki-client