Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/bfec32a7-f047-3f26-947d-da70cd73038c.roa
File: bfec32a7-f047-3f26-947d-da70cd73038c.roa (raw, json)
Hash identifier: SccN704z6YwWn4q2KL8vdYav0vQz1Me+t2olMFlhLdA=
Subject key identifier: CA:22:54:68:68:15:6B:90:4A:0F:83:CB:27:B6:35:63:14:C5:4C:5A
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F43285848100A959CAB1F3CC54760EC00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/bfec32a7-f047-3f26-947d-da70cd73038c.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 17367
IP address blocks: 64.124.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:95:9c:ab:1f:3c:c5:47:60:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=7bbf47ce-864f-4ef1-97f2-1a5c93d2fcd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ce:1e:a1:ea:01:04:f5:cb:40:aa:fc:09:e4:
95:e0:38:cb:d1:6a:1b:53:7d:e4:89:a8:bb:53:4d:
d5:2b:20:5a:2e:d6:ca:e9:e7:32:fb:cb:79:ab:50:
a1:e7:af:89:4b:0e:05:9a:24:d5:1a:18:24:4f:f9:
8d:e7:33:ab:16:1d:53:d1:26:76:cb:aa:b2:0d:4f:
6b:5a:5f:fd:4c:22:8a:29:b0:b3:f7:c9:e2:4d:0f:
3f:3d:a2:e3:7a:bd:25:7a:01:25:c1:29:52:d1:ef:
4f:35:36:ec:b4:80:7d:bf:cb:bd:78:65:1a:75:0c:
26:9d:7e:1c:70:ee:b7:b8:f3:47:35:a5:37:34:e7:
69:3d:84:00:5d:cb:8e:0f:b1:6a:cf:b0:e5:ed:fa:
7d:65:bb:f5:e8:cd:07:99:fc:31:79:87:69:1c:da:
7a:92:87:4b:a4:1d:16:a1:51:26:7b:08:42:f1:8d:
15:01:4b:b7:02:75:2c:8a:e9:7c:56:f4:a1:0b:ed:
14:5f:72:05:d4:96:b8:29:93:7f:79:c1:d2:13:11:
52:85:ab:f3:5d:dc:45:42:1d:67:52:6a:8d:4a:5b:
09:75:19:a8:17:5d:da:65:0b:f9:21:61:4d:2c:b9:
53:a2:24:d2:72:4b:5c:52:c3:96:42:a6:80:05:76:
91:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:22:54:68:68:15:6B:90:4A:0F:83:CB:27:B6:35:63:14:C5:4C:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/bfec32a7-f047-3f26-947d-da70cd73038c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
64.124.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:ce:79:f1:45:e0:32:c8:c1:76:00:66:a3:32:c7:61:d3:8b:
9a:a7:bc:26:da:fd:b2:6e:a0:c2:62:7b:13:58:55:e7:d7:07:
fa:6f:f2:c3:27:29:8e:31:d7:2f:cf:6b:08:73:8c:f8:6e:4c:
c5:d4:80:34:ae:5f:92:94:51:85:17:b5:b9:f5:c8:68:35:5e:
7c:65:88:e0:24:c3:86:82:66:77:b0:f5:13:39:f2:62:13:c2:
7f:d2:a8:fc:a4:af:69:b9:0d:1a:1e:87:ca:f0:ef:49:04:4b:
6f:25:9f:85:d3:64:bb:e3:d1:f3:4e:11:98:e8:20:4c:d0:c0:
4a:c5:fc:68:81:88:2b:da:f4:4f:a3:1f:f2:9e:e5:bd:69:8b:
4c:5b:0f:30:56:4a:b0:a4:ef:fb:2e:a4:29:9d:47:0a:e3:bd:
98:21:5e:81:4d:b6:36:2f:7b:47:4c:28:00:9a:17:08:4e:d8:
96:33:3f:09:d9:50:2e:00:40:20:5f:ad:18:ff:de:59:44:62:
c7:30:f7:2e:b0:14:7f:12:e1:f0:81:8b:35:e5:05:82:26:c9:
99:d8:f6:84:97:07:32:48:85:e3:a0:89:24:c0:bc:d6:61:07:
b7:77:0f:38:cd:42:96:e5:46:70:3e:5e:81:4b:27:1a:0a:d7:
8d:5e:e1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:38:04 2025 by rpki-client