Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fe50bbd-28d3-4434-bf61-3151216bd374/22b29ab4-ecc1-3d50-a383-9015a2be9056.roa
File: 22b29ab4-ecc1-3d50-a383-9015a2be9056.roa (raw, json)
Hash identifier: 45vRxDIf8rvLa5wlNdf/it8JLCsOVIQeyPK3rOEttHA=
Subject key identifier: 21:D9:10:05:22:C7:7A:CC:71:58:27:D1:A4:3B:AE:FC:82:87:D1:F0
Certificate issuer: /CN=5fe50bbd-28d3-4434-bf61-3151216bd374
Certificate serial: 010D0C9F4328584819CFC6BA6C50D39877D30660
Authority key identifier: 0D:87:E1:30:E6:10:9F:FD:61:DC:D2:29:CF:2B:19:92:3F:A4:B4:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fe50bbd-28d3-4434-bf61-3151216bd374.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fe50bbd-28d3-4434-bf61-3151216bd374/22b29ab4-ecc1-3d50-a383-9015a2be9056.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 16509
IP address blocks: 64.190.110.0/24 maxlen: 24
64.190.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:c6:ba:6c:50:d3:98:77:d3:06:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe50bbd-28d3-4434-bf61-3151216bd374
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=98446bdf-e3f2-4ee9-93fe-3994f17c7d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7f:9f:f6:1b:b1:2e:70:ef:76:9d:f8:6b:54:
1e:42:bf:d9:a5:a8:bc:3f:1a:9f:78:59:d4:9a:f4:
f2:4e:23:ec:c8:ae:67:ed:c0:c7:8a:70:5d:65:37:
3e:dd:df:5e:95:66:7f:9c:fb:1f:aa:31:21:15:36:
ad:06:56:f7:93:3b:f2:97:2a:ea:69:67:5a:73:08:
11:12:4c:ec:c5:3e:4f:90:c3:28:c6:dc:a1:6d:2c:
42:9d:9d:25:81:40:6b:11:84:f8:dd:9b:cc:a2:f6:
db:c3:6d:c1:b6:bc:b8:50:eb:f6:c1:82:f7:2e:55:
ac:3f:9b:d2:11:c2:1a:a4:8c:b2:4b:5c:e6:10:ed:
6e:de:e8:5a:d7:f1:6a:ee:25:b9:1e:33:ce:00:70:
cf:4b:55:b6:5f:55:55:be:ce:3a:e0:a7:94:eb:15:
39:fb:91:7a:7e:8c:83:62:32:b5:e6:8e:e1:d4:f1:
2c:c9:6b:44:bc:75:08:5c:4a:5e:56:99:e4:e5:32:
05:8c:f4:8a:35:a0:fe:54:8a:8e:2f:8f:4f:76:bf:
61:0a:76:6c:61:0b:cf:32:de:d2:ca:29:8a:fb:68:
16:8a:b3:18:e5:0f:ab:c4:5b:93:88:5e:99:09:63:
0e:9b:d7:c8:d8:e1:c5:76:ea:d4:2e:07:f0:76:20:
9e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D9:10:05:22:C7:7A:CC:71:58:27:D1:A4:3B:AE:FC:82:87:D1:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fe50bbd-28d3-4434-bf61-3151216bd374/22b29ab4-ecc1-3d50-a383-9015a2be9056.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fe50bbd-28d3-4434-bf61-3151216bd374/5fe50bbd-28d3-4434-bf61-3151216bd374.crl
X509v3 Authority Key Identifier:
keyid:0D:87:E1:30:E6:10:9F:FD:61:DC:D2:29:CF:2B:19:92:3F:A4:B4:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fe50bbd-28d3-4434-bf61-3151216bd374.cer
sbgp-ipAddrBlock: critical
IPv4:
64.190.110.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:a4:dd:6d:75:78:d7:70:d5:41:27:66:b5:f1:d6:68:87:73:
06:77:86:7e:6a:07:e7:92:69:ae:54:be:05:20:ea:c0:40:86:
7a:ab:01:f3:a3:7f:51:f2:9f:ae:0d:03:02:6a:22:78:e3:12:
0f:c2:37:41:09:5c:23:69:be:b1:bb:7e:50:15:34:a8:12:28:
5f:55:53:90:e0:a7:18:58:dd:ef:9b:16:4e:32:bc:6a:4d:e2:
46:34:4a:39:3c:fe:5e:a3:4c:c4:87:fc:b9:5f:f7:73:4d:88:
8b:ae:0e:77:97:6d:8e:f9:4e:d2:94:d2:aa:0c:c4:14:20:f1:
0a:ae:af:0c:87:68:95:25:5c:d6:d0:df:24:41:0a:8e:a5:d6:
74:18:8d:01:07:2d:fd:b0:82:b1:81:63:0f:bb:4e:96:ec:2f:
9c:4a:39:e7:47:30:fd:f3:fc:57:fb:ea:d9:21:83:e6:af:84:
2c:4c:25:97:49:6c:34:ac:5b:5a:8d:fd:3d:7a:03:42:9d:53:
24:a8:cf:6a:fb:7c:cd:79:70:1e:c2:ee:e8:b9:8a:79:d0:bb:
fa:f6:4a:e5:6b:01:55:93:66:24:d1:a1:0e:ac:45:e0:ae:bc:
79:f7:3f:51:98:d9:f1:e8:51:1f:88:84:7f:43:ac:17:c3:38:
18:db:2d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:35:08 2025 by rpki-client