Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/afdbac6f-debc-393d-952e-f803e27af2c1.roa
File: afdbac6f-debc-393d-952e-f803e27af2c1.roa (raw, json)
Hash identifier: t7IjiWJk7L1ahGqWGgoML8KU5ff7jSC+UeevgE9KqKQ=
Subject key identifier: EF:AC:41:A0:58:25:C7:EB:E5:27:CB:B3:1F:4F:26:0C:DC:81:22:76
Certificate issuer: /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
Certificate serial: 010D0C9F4328584849456F4904C5C129B4254200
Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/afdbac6f-debc-393d-952e-f803e27af2c1.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 53828
IP address blocks: 64.191.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:6f:49:04:c5:c1:29:b4:25:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=a7b3de92-1b86-4e79-85f2-ee110bbf2d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:94:fb:36:4a:cc:71:8f:2e:ad:d4:68:c1:0c:
6c:d0:71:5f:02:ae:e3:3a:2f:c9:4c:6f:38:ae:a0:
9f:4c:32:9b:a1:e2:35:77:85:d6:6d:1f:89:cb:22:
1d:89:68:37:4f:f0:bd:6b:7f:11:4a:f4:ec:b0:69:
50:d3:0f:5c:47:b2:2e:3c:ea:62:16:6c:d5:8b:fe:
24:da:17:19:ac:99:14:82:b2:ef:0f:cc:a0:a4:5b:
69:e5:fa:19:3e:3c:18:ce:63:44:64:f2:62:bc:c5:
4b:3e:a0:66:3f:e8:b6:ad:e4:15:dc:8a:2c:07:23:
3b:62:40:0a:95:bc:8f:f4:b6:ad:7d:75:7c:77:5c:
db:9a:bd:c1:b1:7e:5b:89:8e:29:c2:92:bb:3e:7a:
89:96:55:9a:2f:2f:56:3f:8d:5e:77:2f:f7:61:b1:
f1:39:d2:85:45:2a:fc:b7:28:c7:2a:68:1c:82:75:
25:00:ec:a8:68:e5:e8:eb:38:86:e4:ca:a9:1c:c4:
c3:6c:e7:10:b5:22:c1:61:9a:17:61:93:d0:77:27:
c9:26:17:f0:50:c8:fa:32:2c:b4:b9:f2:7f:49:76:
d8:ff:fb:7a:e8:b0:be:f6:b3:47:c6:c5:d7:e0:5b:
b5:1c:c2:bc:98:46:c5:68:83:9d:3c:9d:ce:47:88:
8a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AC:41:A0:58:25:C7:EB:E5:27:CB:B3:1F:4F:26:0C:DC:81:22:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/afdbac6f-debc-393d-952e-f803e27af2c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl
X509v3 Authority Key Identifier:
keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
sbgp-ipAddrBlock: critical
IPv4:
64.191.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:ed:52:67:ec:ab:67:d6:37:ff:6b:c5:d1:01:33:20:d5:3c:
51:3c:37:55:c7:1f:9d:69:34:01:42:88:24:da:f9:81:71:f9:
8f:da:94:57:ae:5e:a2:db:87:4b:60:7d:26:fa:66:a0:8b:c3:
90:bf:22:23:cc:79:cd:77:41:5f:e8:bf:9d:5d:f0:83:70:8f:
17:c5:af:c1:e2:8b:48:d4:73:1e:b1:dc:d1:24:d1:05:d9:1d:
c2:f6:f1:ee:23:83:79:25:81:0e:b4:65:75:48:f8:76:25:42:
6e:1c:74:ef:d4:cb:52:7a:78:5e:56:d2:e2:61:dd:a0:eb:71:
78:a4:e6:4e:a8:ad:b2:76:2e:a5:62:63:6c:94:28:6f:c2:54:
72:8a:51:e1:b5:36:e7:c5:3f:35:12:61:f1:4d:f0:37:d4:c3:
4f:4e:ac:e3:c1:f8:18:10:73:cb:85:40:cf:c6:6b:5c:b3:cf:
0a:1a:25:76:5d:a1:fc:42:60:44:5e:e8:e6:a0:fa:83:37:13:
90:fa:c9:1b:a2:06:eb:a9:79:84:95:fb:e3:b6:7a:3f:cb:19:
cc:73:f8:9c:f2:3a:8b:2a:6c:a4:a6:af:1b:a6:e0:5d:b1:b4:
56:c4:e3:73:04:22:1f:d1:94:32:88:93:c0:e4:30:10:66:58:
e0:dc:03:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:25:10 2025 by rpki-client