Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/650dd2fc-99af-35a3-81ca-030219a24999.roa
File: 650dd2fc-99af-35a3-81ca-030219a24999.roa (raw, json)
Hash identifier: eakbgInsoHGl9wefDp6JdmIv20n+3Bm1rHVrIqMfE4E=
Subject key identifier: D2:7E:CE:A4:CE:47:6C:2D:80:F7:98:9C:8F:F8:43:08:07:76:F6:EB
Certificate issuer: /CN=95e29289-6f1c-4c2f-84f4-c944e9e54940
Certificate serial: 010D0C9F4328584823954AAEA4C5FDBD8C3CBDD8
Authority key identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/650dd2fc-99af-35a3-81ca-030219a24999.roa
Signing time: Sun 08 Dec 2024 14:00:51 +0000
ROA not before: Sun 08 Dec 2024 14:00:51 +0000
ROA not after: Sat 08 Mar 2025 14:00:51 +0000
asID: 19905
IP address blocks: 64.58.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:95:4a:ae:a4:c5:fd:bd:8c:3c:bd:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e29289-6f1c-4c2f-84f4-c944e9e54940
Validity
Not Before: Dec 8 14:00:51 2024 GMT
Not After : Mar 8 14:00:51 2025 GMT
Subject: CN=9e3f9f81-0df3-4164-bdb2-5123061b0163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:02:cb:23:2d:88:f4:42:02:78:e8:09:33:47:
23:46:76:6f:4d:65:6a:97:cd:23:70:30:51:4d:8f:
c7:6c:8c:d9:89:c0:e0:5b:21:19:d7:44:8d:d6:5e:
9d:12:0b:30:11:9c:76:11:a6:81:7a:62:b6:58:87:
84:a8:5d:76:62:37:2e:d1:56:fd:9f:5f:14:78:0e:
56:dc:bd:18:56:28:c1:17:bb:23:82:d4:18:cf:50:
bf:1a:47:ff:54:78:0a:8b:66:e7:6d:d4:a5:75:7c:
55:31:d9:60:7f:e9:51:1d:09:fd:db:c5:fd:30:54:
9a:48:2c:b3:34:07:17:7c:d1:b2:49:84:ce:b2:0f:
a9:c6:ee:f8:3b:b4:ba:10:98:88:25:5b:f3:58:c3:
c3:5c:f8:14:23:af:e7:26:38:d6:cc:a0:43:e8:6c:
40:43:12:b9:42:74:9f:22:ee:18:a3:6f:b0:33:44:
7f:a0:fe:6e:23:7b:1a:36:42:00:37:f0:3f:ef:f7:
31:f2:ab:86:f2:d2:72:c7:61:44:c0:57:9b:d0:d1:
8b:d0:6d:f6:bd:ba:3b:44:08:28:e0:6c:35:10:a9:
f4:61:1b:fe:66:57:e7:25:76:78:9d:39:14:72:e9:
8b:73:8c:38:71:61:33:9a:47:c2:4e:44:be:05:21:
2f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7E:CE:A4:CE:47:6C:2D:80:F7:98:9C:8F:F8:43:08:07:76:F6:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/650dd2fc-99af-35a3-81ca-030219a24999.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl
X509v3 Authority Key Identifier:
keyid:4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer
sbgp-ipAddrBlock: critical
IPv4:
64.58.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:34:17:40:b8:80:9c:4d:cb:38:22:6d:e3:88:7d:b0:02:8c:
6c:9e:1f:d0:d0:c1:fa:cd:86:b0:fa:67:ae:c2:98:a8:13:1a:
ba:bf:ab:ca:1e:fb:b7:be:50:ef:df:9a:06:d3:8a:e2:60:af:
df:b2:f7:f2:a5:b7:8f:15:bd:6e:01:20:73:9f:22:ed:a4:52:
bf:66:75:42:1b:11:41:88:25:63:ea:89:0d:a0:7d:56:83:b1:
f9:15:7e:2e:31:5e:ad:a5:22:ed:04:7a:a5:c4:83:85:d5:31:
0d:3b:1a:f1:27:99:a6:67:7f:73:1b:60:fe:b8:a5:72:d4:e1:
cc:39:c6:63:3c:b2:57:c1:4d:de:04:e2:2d:98:d9:7a:12:98:
62:7f:a5:7c:df:12:40:84:b1:06:2f:c8:71:0e:e3:07:75:a7:
ff:7a:b1:6c:7a:e4:45:e9:7e:fe:03:0b:50:cc:40:dd:5f:41:
89:70:bf:9a:5e:83:06:96:e3:20:e2:55:b2:20:33:43:64:eb:
e6:12:53:66:fd:36:e3:f5:9c:b8:34:fd:57:ba:e5:f9:44:06:
61:8f:d9:26:75:08:ec:ca:2a:0a:75:2a:6c:ec:a0:b2:7a:74:
45:1d:8a:91:95:f9:9f:cb:f1:8d:16:22:82:79:3a:b3:d2:c1:
97:55:56:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:34:39 2025 by rpki-client