Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/a64918a4-9404-3759-bfe5-583ac62a247a.roa
File: a64918a4-9404-3759-bfe5-583ac62a247a.roa (raw, json)
Hash identifier: pbWlfPgty0iBsIQqyYgmtfuVYPhlkE1qOoJwaWmGj88=
Subject key identifier: 3E:02:8A:84:C9:A3:80:93:C9:27:E2:B1:01:E9:9F:21:84:44:16:F0
Certificate issuer: /CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
Certificate serial: 010D0C9F4328584827C53F12684C01AFD6777740
Authority key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/a64918a4-9404-3759-bfe5-583ac62a247a.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 399810
IP address blocks: 64.29.137.0/24 maxlen: 24
2607:f3a0:a009::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:3f:12:68:4c:01:af:d6:77:77:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=73378b86-1d2b-4719-8abf-7959e3e663e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:42:ad:47:ef:79:4d:bf:b3:cd:d9:6d:7a:87:
7f:8d:43:5e:a7:d2:ba:bc:67:b6:c2:5c:83:d0:09:
77:a8:0e:16:5d:e5:77:cb:73:a3:79:99:dc:01:6a:
b3:2c:b4:ff:52:87:d2:38:af:17:f8:d4:31:8a:d0:
0a:92:73:d4:90:52:e2:d8:4b:48:23:3e:f5:6e:3e:
31:78:04:13:da:82:cf:f8:4d:b4:e5:f8:06:6c:4e:
31:cd:04:bd:ee:c1:ee:ee:2e:76:ed:d0:c2:59:85:
7f:fe:fd:7b:27:18:ff:28:e8:bb:a8:c8:82:0a:98:
51:18:1c:c7:6a:9d:46:61:a7:43:bc:33:b9:d1:1d:
86:84:cc:7d:a2:36:8b:e1:bb:8a:b9:5a:dd:f3:f9:
c1:d8:4d:ce:bf:a4:ce:d2:63:4a:7d:48:49:07:60:
4d:c1:c2:eb:bb:03:ec:d2:b9:ce:36:77:b7:1f:c4:
38:6f:00:68:27:3e:85:71:2f:de:a3:68:83:68:f6:
c3:95:c9:e5:98:35:8a:76:8b:de:db:a2:61:8e:01:
b6:80:94:6f:0a:19:fb:86:45:84:16:e5:86:47:18:
64:42:32:91:4c:d3:6c:a5:c8:f2:23:03:ee:94:fe:
0e:2b:5a:e2:23:1f:7d:99:c6:59:af:41:37:cc:74:
7c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:02:8A:84:C9:A3:80:93:C9:27:E2:B1:01:E9:9F:21:84:44:16:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/a64918a4-9404-3759-bfe5-583ac62a247a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl
X509v3 Authority Key Identifier:
keyid:83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
sbgp-ipAddrBlock: critical
IPv4:
64.29.137.0/24
IPv6:
2607:f3a0:a009::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:af:a7:fe:47:87:f2:ee:30:30:b7:d7:9e:99:8b:f3:35:05:
b7:71:44:2b:84:42:f9:f1:3f:d2:44:25:07:11:85:8d:1b:1f:
f5:b5:7a:29:05:90:47:f2:27:1f:65:37:d6:5a:6e:66:88:6e:
9c:f3:88:68:c2:70:fb:42:af:16:f1:69:4c:7d:c7:71:40:47:
f6:67:7c:fe:75:a7:62:5d:48:8d:be:a2:7e:a2:c4:eb:bd:6d:
39:6a:3a:74:ec:6c:a3:98:8f:7e:13:d1:e5:7c:2d:4f:9b:e9:
2e:68:7a:60:85:93:a0:ba:d8:e2:04:34:b2:c8:70:03:b3:ca:
3f:d0:d5:95:5d:e7:91:22:2c:be:9e:2f:24:b0:a4:c3:0e:dd:
0e:39:18:48:cd:25:20:02:f7:fd:71:6a:35:76:a4:05:a6:6d:
60:9c:45:dd:57:86:5d:bb:f7:a6:20:be:3f:2c:e4:3b:f6:7b:
cf:0d:fc:88:6c:f4:e5:c7:56:19:c5:7a:94:26:48:ed:48:50:
c5:ee:f9:db:99:b0:59:2d:95:b7:cb:4c:3a:b1:89:d5:0f:37:
f9:50:77:52:89:35:44:2c:e6:f8:07:73:2f:fe:d1:82:ef:b5:
9c:fc:b1:e8:3e:54:50:97:18:02:54:22:2c:a0:78:3b:a1:c6:
99:2f:e0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:57:26 2025 by rpki-client