Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/34af55c9-2b58-3f1a-9296-3ed31b7e8d01.roa
File: 34af55c9-2b58-3f1a-9296-3ed31b7e8d01.roa (raw, json)
Hash identifier: Yc4ZFYhCZMCbzipccgvDMxgem5jm8mJt1LQ+TiMyMPs=
Subject key identifier: 60:B5:91:10:DB:E4:B8:AC:BB:5A:A3:5F:B7:05:6E:D4:C6:32:41:4B
Certificate issuer: /CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
Certificate serial: 010D0C9F4328584839EABD9739112A70BFB63200
Authority key identifier: D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/34af55c9-2b58-3f1a-9296-3ed31b7e8d01.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 20205
IP address blocks: 64.246.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:bd:97:39:11:2a:70:bf:b6:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=d487060e-92cc-4653-a302-dde6b118ffc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6e:3f:e2:74:83:a8:65:c1:ac:37:df:cd:9d:
f9:3f:73:c3:ec:8a:20:33:c0:b1:da:f0:66:dc:d0:
d6:0c:fe:95:e9:83:97:ca:5f:6c:32:7c:fa:7d:ad:
c2:a3:e4:31:8e:57:54:91:da:81:aa:ca:37:fb:ae:
5d:85:3c:c5:dc:d6:6d:78:bc:a9:1d:0a:30:c4:24:
cc:ac:25:6f:65:22:4b:6b:49:84:a2:f3:61:67:c7:
31:f0:de:5d:45:27:20:55:1a:d3:cf:68:96:04:d8:
7d:13:72:f6:2b:0e:d6:bc:50:c5:88:a6:a3:21:f4:
70:34:25:e9:3b:db:f1:b4:b8:67:b2:11:31:d1:45:
68:44:4d:ef:60:22:99:29:9e:c6:50:42:ba:ec:27:
57:76:b5:d3:f2:2e:d1:d5:e4:22:49:db:a6:62:9e:
fb:6c:ef:98:e3:1f:24:20:12:d3:0d:1f:9c:75:2c:
6d:54:2d:1b:ac:ce:d8:09:ae:ac:01:90:bf:5d:7a:
98:98:75:60:2e:25:97:f3:46:63:81:89:a7:a3:b2:
0f:aa:ff:b8:6c:dd:be:d8:ba:cb:4d:8b:b7:e9:5f:
be:75:d1:0d:38:21:09:a6:09:12:a7:63:9d:2a:e4:
21:d9:c5:d5:6f:ce:41:6d:c5:41:40:13:e1:80:4d:
d6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B5:91:10:DB:E4:B8:AC:BB:5A:A3:5F:B7:05:6E:D4:C6:32:41:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/34af55c9-2b58-3f1a-9296-3ed31b7e8d01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl
X509v3 Authority Key Identifier:
keyid:D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
sbgp-ipAddrBlock: critical
IPv4:
64.246.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:9d:a0:12:ad:61:6a:d2:2c:8b:bd:e2:10:0b:1e:de:2e:4e:
56:eb:6b:38:bc:76:f5:ac:de:cc:d0:03:68:85:22:f7:90:58:
14:c9:29:e7:3e:c5:11:d8:02:98:b9:b8:76:03:44:e3:c2:f0:
ff:75:ee:da:d9:1d:75:1f:8c:47:d1:06:09:b6:d2:da:a4:34:
46:35:d1:d0:78:a9:47:4a:9b:49:49:52:66:0a:5a:b8:c2:82:
ab:6f:e1:7f:ce:9c:bb:37:bb:b8:38:62:60:ef:21:e4:2d:c5:
ce:6e:e8:87:bb:d5:ba:be:93:ab:55:74:a1:7a:33:a3:29:e7:
28:43:7a:ff:0a:a3:96:77:b8:de:4d:56:d4:e6:0c:52:24:aa:
37:6e:58:5a:db:16:3f:5e:22:29:03:7d:15:59:36:ac:33:48:
97:ce:01:96:b9:7c:e5:79:bc:12:fb:eb:72:ca:61:1b:58:8f:
f9:67:7f:b2:ef:38:19:13:26:db:ac:88:d2:e4:b1:ea:1a:21:
5d:59:ec:5c:ab:a2:58:4a:c9:3d:75:74:9f:54:c8:f3:db:c5:
b2:90:b4:49:be:2c:07:af:39:1c:2d:e0:cd:36:dc:4a:35:f2:
c4:02:91:0f:db:c9:73:9f:4e:01:56:35:6b:94:d1:3a:01:79:
dd:52:b5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:27:36 2025 by rpki-client