Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/40dfe575-7376-3072-83e5-39cbefff6fa0.roa
File: 40dfe575-7376-3072-83e5-39cbefff6fa0.roa (raw, json)
Hash identifier: Hfm9DyPsLVCyqkOCVldWJEeA6pnmJhV5CnTo6PMnMeM=
Subject key identifier: 36:87:ED:4E:2E:96:95:DE:C4:43:44:A4:18:C3:26:4D:5D:57:36:2A
Certificate issuer: /CN=0b883aa7-bd4f-4703-b044-59552058f266
Certificate serial: 010D0C9F4328584843B002656D3796377125AC00
Authority key identifier: 83:A9:D3:49:01:EB:18:49:AF:28:59:BC:2C:FE:2D:7B:B4:A3:1F:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/40dfe575-7376-3072-83e5-39cbefff6fa0.roa
Signing time: Fri 20 Dec 2024 02:00:40 +0000
ROA not before: Fri 20 Dec 2024 02:00:40 +0000
ROA not after: Thu 20 Mar 2025 01:00:40 +0000
asID: 7018
IP address blocks: 64.112.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:43:b0:02:65:6d:37:96:37:71:25:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b883aa7-bd4f-4703-b044-59552058f266
Validity
Not Before: Dec 20 02:00:40 2024 GMT
Not After : Mar 20 01:00:40 2025 GMT
Subject: CN=bb398d81-7359-4e40-9abe-58e291340fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c1:bf:62:7a:8a:2b:03:78:22:8e:af:41:13:
a0:9e:be:30:60:a0:4a:a4:39:b7:f1:dc:c1:5e:29:
f2:51:28:7a:28:a2:08:e0:d6:99:29:2a:ee:b0:f0:
13:ed:ae:ae:ca:fb:b6:a6:03:e0:0a:19:17:a6:1c:
81:d1:0b:d9:43:91:be:bd:5f:86:fc:66:ff:7f:28:
b2:bd:03:64:37:37:76:ed:86:53:10:46:52:50:c8:
ef:18:e9:8f:f2:a2:cd:0d:33:d2:b0:a8:71:33:1b:
39:39:72:7f:7d:3c:38:52:06:2b:d3:cb:5d:d0:38:
3c:e8:86:83:6c:79:96:b5:92:c6:b8:a4:ba:32:ac:
3e:10:86:11:86:5d:68:31:33:3d:b1:6f:92:0c:47:
37:cd:f1:d9:d5:ea:e5:d0:a2:c6:73:d6:88:b2:6c:
dc:11:74:90:d5:2b:68:85:d5:e1:16:8c:56:7e:84:
4c:d6:6e:8b:dd:dc:c5:b3:bd:3b:74:74:d0:0e:cb:
a6:50:6d:09:ea:da:6d:a8:d6:d8:c0:6d:43:c8:35:
60:85:34:15:b5:56:55:e7:92:7d:c8:f7:e2:54:33:
46:8a:eb:8d:55:6e:83:a4:b6:48:23:3b:2e:2e:dc:
3f:41:78:0d:6a:58:0e:bb:c4:53:19:88:e5:98:95:
20:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:87:ED:4E:2E:96:95:DE:C4:43:44:A4:18:C3:26:4D:5D:57:36:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/40dfe575-7376-3072-83e5-39cbefff6fa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266/0b883aa7-bd4f-4703-b044-59552058f266.crl
X509v3 Authority Key Identifier:
keyid:83:A9:D3:49:01:EB:18:49:AF:28:59:BC:2C:FE:2D:7B:B4:A3:1F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b883aa7-bd4f-4703-b044-59552058f266.cer
sbgp-ipAddrBlock: critical
IPv4:
64.112.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:f2:28:7f:c1:4e:2f:1d:f8:1c:f3:6f:37:9f:bb:5d:db:6a:
b9:4e:c2:85:4b:9f:7a:31:b5:cf:3e:32:eb:96:ae:0d:1a:d7:
df:cd:84:a7:ab:d4:63:49:cb:d2:ba:0e:93:b8:64:4a:a1:dc:
10:00:d4:8b:a1:1a:29:b1:29:f0:b4:49:be:3c:ba:be:10:40:
39:67:0f:4f:f9:21:87:b6:2e:ee:fb:13:1a:58:c6:e5:22:36:
1b:f3:69:ac:f8:35:28:d6:3e:6e:7e:fe:a3:86:be:00:df:dd:
9c:b8:bc:05:6d:04:27:f7:89:07:76:21:d5:c5:5f:45:8d:1a:
70:d1:aa:60:0f:7c:48:ed:76:a8:6d:fc:ac:32:09:95:fb:35:
d1:a6:ee:b6:9b:8a:43:dc:11:e1:b8:8e:2f:fb:82:13:5e:f7:
d6:97:19:17:e8:e3:d6:f2:01:23:35:0b:39:da:e9:2a:97:c8:
c2:7e:1b:6c:ea:4c:8e:fa:7d:71:c8:8e:fa:38:1a:ab:cf:72:
84:b0:7f:33:5b:2b:f2:e7:88:f6:a0:6c:23:a1:69:5e:37:c6:
8d:b5:b5:db:26:1e:6b:42:b0:d0:d3:45:c4:bc:7b:66:1f:ac:
33:89:a1:f2:35:18:32:f5:6f:42:4c:f6:2b:7b:0c:86:1d:3c:
27:78:27:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:41:12 2025 by rpki-client