Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/3253d608-779d-3d49-9ec9-04e34cf6f872.roa
File: 3253d608-779d-3d49-9ec9-04e34cf6f872.roa (raw, json)
Hash identifier: KdVE6mlZoG9BGOkwXzFDFGw4ffdr2Jqq/abVMc9WiU0=
Subject key identifier: E4:C5:67:DB:AC:10:6F:FA:3B:F7:04:E7:DA:76:97:E6:56:40:85:0E
Certificate issuer: /CN=0432b247-64bf-4a12-bc99-32dbce58a455
Certificate serial: 010D0C9F4328584827C533A876E66C7AE7C133E0
Authority key identifier: 00:E5:32:2F:AA:99:B2:2D:4C:7E:7C:D1:08:FB:5A:37:B2:E3:01:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/3253d608-779d-3d49-9ec9-04e34cf6f872.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 16509
IP address blocks: 64.110.138.0/24 maxlen: 24
2620:104:2040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:33:a8:76:e6:6c:7a:e7:c1:33:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0432b247-64bf-4a12-bc99-32dbce58a455
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=35136480-8fb4-4ea5-8988-964c202265cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:22:d6:f8:26:92:e1:20:40:f2:b2:c0:4a:54:
4f:2c:79:2c:eb:bb:1e:12:0a:9c:78:a5:c3:f7:ea:
96:81:f9:62:5b:4e:7d:a0:f5:b1:45:61:b7:26:83:
af:20:75:c2:63:23:e9:01:7d:7a:3b:cb:79:2d:35:
50:57:d5:d5:eb:1a:12:07:2c:5b:85:bc:24:e9:78:
e4:d3:79:1c:62:e9:b5:00:d0:7a:be:44:3b:c3:3b:
cf:32:57:75:36:65:e3:4f:9f:e5:64:d7:72:bd:76:
78:ba:ba:2f:89:8d:76:84:8d:86:8e:73:3d:9a:92:
fd:f4:55:68:80:5a:f9:96:20:a8:e0:df:85:06:29:
20:ba:fb:17:51:da:f0:12:e8:43:29:06:50:fe:af:
1c:e2:71:07:45:75:79:d4:d8:cc:12:d1:81:a3:45:
46:26:2d:52:e7:aa:1c:92:6a:46:71:a0:a1:c9:8f:
70:86:6a:e3:d3:1f:6b:d4:a2:44:45:c0:74:0e:ee:
af:64:81:4c:36:95:4e:4a:91:d1:72:2a:f3:ac:b6:
ef:cf:86:8d:92:1a:93:2e:91:ce:7e:0c:c8:fa:ac:
36:9d:96:fa:a1:20:c6:c6:22:75:70:72:be:8a:b1:
56:ee:68:6e:d9:28:e4:da:6c:e3:29:1e:1b:60:9d:
8d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C5:67:DB:AC:10:6F:FA:3B:F7:04:E7:DA:76:97:E6:56:40:85:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/3253d608-779d-3d49-9ec9-04e34cf6f872.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455/0432b247-64bf-4a12-bc99-32dbce58a455.crl
X509v3 Authority Key Identifier:
keyid:00:E5:32:2F:AA:99:B2:2D:4C:7E:7C:D1:08:FB:5A:37:B2:E3:01:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0432b247-64bf-4a12-bc99-32dbce58a455.cer
sbgp-ipAddrBlock: critical
IPv4:
64.110.138.0/24
IPv6:
2620:104:2040::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:ea:36:88:7c:bb:f2:73:69:a1:b5:71:52:1f:88:03:74:f5:
f4:ed:5d:dd:73:b0:e0:92:e0:a5:49:d1:1c:b4:64:8d:7c:45:
56:de:11:53:fb:4c:7d:5b:ec:ed:a7:42:ad:9e:1c:33:55:a4:
ab:60:f0:22:03:76:b7:12:2b:e6:f3:2f:9f:c1:5d:9f:94:70:
2c:eb:b9:4f:50:c6:bd:6f:0b:da:c3:de:e8:9e:65:99:8c:46:
cf:6e:56:56:88:49:ad:71:12:05:58:74:53:ab:73:92:1c:dc:
d0:38:77:a5:ee:7e:92:e6:0e:71:5a:53:8f:b4:6f:0a:00:9a:
a1:cf:2a:62:2e:1b:23:30:28:7c:bf:fa:ef:e4:ff:76:b1:df:
1b:f9:8c:a3:7f:cc:2a:b8:ef:75:69:c8:c2:6d:9d:96:57:fc:
be:65:97:17:e2:6b:0c:2b:38:c7:57:47:c3:5f:76:a6:3f:71:
43:12:11:e9:72:e3:66:f9:31:38:1a:b5:58:9a:68:7a:ae:4f:
85:3d:e5:e3:f7:56:99:a1:76:b2:eb:6c:94:ee:0c:bc:4d:06:
c7:a0:18:10:9c:74:2c:5f:af:9a:54:fc:8d:21:81:12:7a:35:
01:09:c6:c6:a1:ad:a2:3e:51:26:02:8c:6a:c0:2d:98:97:83:
82:5f:82:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:11:17 2025 by rpki-client