Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/154594e0-ee8d-31de-8d13-6d107201791f.roa
File: 154594e0-ee8d-31de-8d13-6d107201791f.roa (raw, json)
Hash identifier: +kWiCZiFlWnB4htiPLuds9JAEUWfrS2hGJne8k/V/cU=
Subject key identifier: 43:E0:C5:22:E3:34:A6:5B:FB:7A:6A:69:27:22:E0:DA:D2:87:7C:98
Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Certificate serial: 010D0C9F432858486960680C0F719F536E12A600
Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/154594e0-ee8d-31de-8d13-6d107201791f.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 393885
IP address blocks: 64.71.216.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:68:0c:0f:71:9f:53:6e:12:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=738339f9-756d-4f09-8ccf-9e250abb01c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:99:da:5e:f4:62:8e:4b:44:99:13:ed:a6:0b:
c1:f8:c3:75:8a:f9:c5:5a:c2:04:9e:73:06:4f:22:
55:39:d7:ef:0c:73:58:27:b3:d9:5b:26:49:b4:d7:
6b:c2:aa:c0:e5:96:bb:77:6e:aa:73:58:13:21:b7:
5c:57:0b:73:d4:a0:27:99:18:bc:43:57:c2:33:32:
4f:94:62:54:09:03:ae:f0:39:f4:6d:fc:fd:5f:50:
46:f8:c1:10:9e:a1:38:ff:7f:cf:4a:49:47:dc:a5:
90:b4:a4:1f:e5:ae:fe:33:8c:4f:ae:70:b1:ec:50:
a1:b5:5a:2c:c0:ca:8e:4a:c5:d4:92:76:9e:fd:b9:
1b:83:a5:07:ee:d9:29:da:90:9d:62:f7:18:8a:75:
bf:16:19:56:23:7b:8f:25:53:bf:99:53:24:3c:b3:
db:79:9c:f3:81:34:94:32:66:fb:e9:9a:81:76:fa:
f6:29:87:c5:d3:0e:41:26:69:68:56:9b:f1:9b:5c:
57:c6:f2:b8:59:01:92:e5:23:2d:72:c4:71:ee:d5:
91:ad:30:fd:62:20:ce:f5:c2:c6:70:6a:9f:ec:f9:
5a:3e:fc:80:a7:2a:78:20:33:e8:a7:7a:e0:01:2f:
f9:79:89:8e:ad:7a:4f:3b:a1:95:be:41:2a:00:d0:
94:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E0:C5:22:E3:34:A6:5B:FB:7A:6A:69:27:22:E0:DA:D2:87:7C:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/154594e0-ee8d-31de-8d13-6d107201791f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl
X509v3 Authority Key Identifier:
keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer
sbgp-ipAddrBlock: critical
IPv4:
64.71.216.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:e3:88:fb:08:57:fa:66:64:51:32:a3:57:2c:cc:00:52:e8:
b9:15:89:6c:2e:63:71:9a:64:20:27:4e:a5:6c:01:66:b7:cf:
22:a6:82:be:9b:ce:bc:03:83:70:83:dc:98:8f:2b:f3:04:21:
54:d8:ca:9a:ce:71:aa:21:67:a1:c7:f6:07:9d:79:f3:50:32:
a2:4f:d6:13:26:f6:2f:bc:61:3b:8c:e7:49:35:5b:d0:01:c6:
61:eb:78:40:3d:b2:6f:9e:bb:c1:92:8f:78:18:0a:7c:64:7d:
9a:ce:e4:e5:75:05:9f:6e:c3:1a:34:ab:b6:e8:df:18:43:cf:
08:82:eb:97:a9:a8:32:99:e4:81:ac:b4:ef:15:e1:32:78:58:
98:5e:ab:2b:42:4c:39:76:59:f4:97:2e:50:21:35:37:86:e3:
2b:7d:77:d0:04:bc:cb:8b:48:25:08:c2:9f:26:8d:e8:e0:89:
7e:d4:c0:96:69:ce:c5:8b:fe:81:43:af:d3:1e:0f:de:50:c2:
7e:b1:42:e0:a4:34:be:5d:be:66:fd:f9:22:6c:77:a5:c2:a6:
01:b8:5b:8c:dc:41:05:f8:2d:db:57:c9:3b:db:d5:f2:12:3d:
8c:6a:67:09:f4:52:ff:9d:fa:4b:ec:3e:21:23:6c:18:cf:ff:
91:8d:bb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:34:20 2025 by rpki-client