Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/2e8acbff-1552-3529-94f8-0a925c87a027.roa
File: 2e8acbff-1552-3529-94f8-0a925c87a027.roa (raw, json)
Hash identifier: 0/XHTaP6f1fHwy+KwxVw32IyBN4wbaJV+fc4mJVcDZw=
Subject key identifier: 2B:33:C0:C3:3F:92:25:DE:77:04:CC:22:7C:BC:FB:63:97:59:6F:45
Certificate issuer: /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Certificate serial: 010D0C9F4328584854703572285CFCFBD3430880
Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/2e8acbff-1552-3529-94f8-0a925c87a027.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 58182
IP address blocks: 64.7.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:35:72:28:5c:fc:fb:d3:43:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=fab42289-d597-4a81-a66c-bc199b3f7446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ea:07:89:96:2a:4a:33:a7:af:41:13:cd:e3:
4f:f6:db:34:b3:6a:ca:85:09:ee:a8:35:cd:29:f7:
29:31:68:62:db:7c:46:bd:6e:a9:a8:93:e8:0c:92:
e3:86:09:73:9f:22:a5:f7:36:ba:a5:b0:9e:a3:47:
86:43:d7:b1:55:4d:35:e6:48:70:b3:98:23:e8:78:
04:f4:49:52:88:e7:fc:bd:6a:42:f1:b5:7d:29:23:
53:59:74:1c:19:24:79:7b:91:16:64:96:a2:d4:8d:
7b:43:dd:96:2b:ad:ad:07:85:ee:73:a6:0c:01:1d:
e0:0a:e7:ed:41:21:66:57:13:5e:96:a0:d4:9d:9b:
a3:33:82:2b:56:bf:e2:f5:6d:c7:97:71:e0:b9:6f:
04:c6:a8:8c:73:4d:29:63:da:48:9f:cc:b2:fe:54:
d4:37:3f:dc:97:a0:1c:42:39:0e:f9:ef:4a:6e:a7:
5f:2c:37:ea:bb:87:25:d4:c3:69:d6:54:a4:d8:76:
f1:58:e3:a7:fb:e0:bc:49:d5:e3:cb:a5:d9:b7:d1:
8b:c8:8b:0a:fe:16:6a:28:6d:34:dd:ef:16:0e:52:
f0:7e:37:2a:58:46:03:a7:48:33:c3:43:ec:31:32:
97:78:db:73:66:20:ab:9c:0c:b9:8e:40:92:7e:29:
10:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:33:C0:C3:3F:92:25:DE:77:04:CC:22:7C:BC:FB:63:97:59:6F:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/2e8acbff-1552-3529-94f8-0a925c87a027.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
X509v3 Authority Key Identifier:
keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
sbgp-ipAddrBlock: critical
IPv4:
64.7.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:e4:12:a1:2a:bc:b8:76:08:dd:55:63:71:85:1b:f2:7c:f7:
d6:1a:90:99:8c:b6:a4:8b:69:00:d4:a4:5a:af:ac:71:1e:ed:
1f:92:8a:17:f2:70:03:47:23:8f:66:b7:0a:18:61:d5:7b:c2:
5d:1c:13:88:31:73:e4:d3:90:c0:b4:56:cf:29:4e:54:9e:84:
97:a5:4d:fc:4d:20:a3:a9:b7:7a:ef:e2:f1:2f:ec:a0:b0:0c:
19:f6:97:36:ca:a0:01:ec:7e:88:76:0e:4d:60:22:30:10:2f:
b7:0c:91:cf:e1:06:99:19:be:38:9f:ed:22:21:e1:12:51:3e:
9d:c4:96:6e:60:df:ca:52:5c:ab:1e:76:c1:bf:6a:7b:f0:57:
5d:b9:32:ef:7b:a8:bd:5b:d0:47:39:f3:3d:f2:72:86:f0:bb:
cb:ed:54:d0:e8:3f:f2:a8:6b:e0:b4:69:a6:56:96:39:d6:b3:
b0:6a:fe:9d:0e:32:12:ae:67:34:e1:dd:54:25:80:8e:78:50:
7a:cf:b0:95:f1:d1:88:84:b1:bc:a6:af:24:f8:e0:e1:32:7b:
23:49:e8:8a:ef:16:32:f1:de:f7:1d:f8:09:e6:05:c9:d7:ab:
f4:8a:27:d5:ad:ef:2e:53:e8:e6:57:ac:8f:b9:3b:05:f8:3e:
94:24:a1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:41:13 2025 by rpki-client