Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/14a95db4-f488-33a6-a50e-3c5fecedab24.roa
File: 14a95db4-f488-33a6-a50e-3c5fecedab24.roa (raw, json)
Hash identifier: AJkSOSbr2f8fB/64gnJqhE0QQZ9VqdF4MFG3OmXwQZE=
Subject key identifier: E1:CF:99:35:AE:21:17:15:2C:3F:EA:0A:78:25:A6:CD:20:B9:E4:EA
Certificate issuer: /CN=54ace249-bf6f-423c-93c6-7cc74d8a1acb
Certificate serial: 010D0C9F432858484515946D683E0D84EBF44C00
Authority key identifier: BF:BE:CF:95:64:53:39:46:28:49:B7:00:59:5C:17:D2:6F:7D:7C:1B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/14a95db4-f488-33a6-a50e-3c5fecedab24.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 16509
IP address blocks: 64.95.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:94:6d:68:3e:0d:84:eb:f4:4c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ace249-bf6f-423c-93c6-7cc74d8a1acb
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=9cd09b88-64a7-4323-9327-c7c2ab698c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a3:2d:a8:9c:a0:cb:ed:25:03:85:59:99:c8:
6e:a6:55:11:35:fc:31:ff:1a:5d:8a:ed:2a:a5:29:
e7:c4:64:04:51:65:72:76:2b:03:6f:7e:95:51:e2:
14:60:52:0e:f4:1f:71:51:aa:9b:72:ff:0b:1a:9b:
1f:0f:fc:8e:de:40:6a:5a:dd:33:26:51:eb:96:99:
c4:c6:b8:69:76:78:48:72:5f:91:cf:67:e8:cc:7e:
4a:dc:7c:11:40:f7:5f:10:99:40:a2:17:35:34:0b:
f0:a7:9f:93:a2:41:64:9e:dd:b9:12:6d:f4:e6:1f:
e4:88:1b:60:e0:fa:81:a6:de:d0:c5:1f:d5:47:cd:
45:34:1d:b8:54:d7:2b:32:31:29:74:69:34:51:04:
aa:e2:fe:f3:22:f5:d1:95:ba:54:9b:bc:b4:05:fb:
89:03:a5:01:29:13:c9:37:b5:a9:5a:76:e2:47:cf:
ff:99:59:6a:8e:6b:2f:66:6f:af:2d:20:23:32:db:
f2:d1:c7:46:2b:5e:5e:ac:79:14:b0:39:52:72:bb:
bb:00:6f:93:5c:36:2e:6e:9a:9c:1c:c8:a6:78:01:
90:5e:11:ea:ed:28:42:5b:f8:9d:7d:55:bb:ef:37:
ca:01:db:3b:d3:5e:10:23:91:07:ea:5a:9a:2c:31:
46:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CF:99:35:AE:21:17:15:2C:3F:EA:0A:78:25:A6:CD:20:B9:E4:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/14a95db4-f488-33a6-a50e-3c5fecedab24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb/54ace249-bf6f-423c-93c6-7cc74d8a1acb.crl
X509v3 Authority Key Identifier:
keyid:BF:BE:CF:95:64:53:39:46:28:49:B7:00:59:5C:17:D2:6F:7D:7C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/54ace249-bf6f-423c-93c6-7cc74d8a1acb.cer
sbgp-ipAddrBlock: critical
IPv4:
64.95.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:a9:a0:71:61:6e:d1:29:be:65:fa:fe:fa:6a:22:96:a9:37:
25:71:93:0a:a4:75:91:e7:e0:d2:ae:1d:cb:ad:0d:ea:09:53:
2f:b2:06:3a:a1:6d:b5:79:72:74:4d:2b:8a:71:11:3c:d8:91:
df:87:2e:fc:3e:e5:aa:0f:c5:e2:b1:85:de:20:1e:52:1d:b6:
66:8d:13:e5:94:d4:7a:64:3f:f4:34:07:de:1a:18:f8:ce:0b:
86:d7:03:f5:0b:61:2e:57:34:4d:e7:02:af:aa:38:47:ab:49:
8c:40:72:a0:f3:1d:21:9f:68:bc:d2:74:54:1b:88:6b:18:e8:
08:eb:4e:a8:48:21:f1:9d:3a:0b:ae:85:26:a0:db:36:2a:da:
9b:4b:0f:45:3c:16:4f:d6:a7:1b:db:d0:8d:94:34:14:67:cf:
b5:50:20:88:86:00:e3:56:01:ec:0b:b7:6f:dd:1e:55:52:04:
a6:75:d0:ed:c3:1d:99:00:e2:67:ac:91:30:6b:bf:dc:7b:a9:
ea:86:2c:b2:ec:f8:40:3a:b5:88:41:eb:66:03:30:e7:53:89:
00:56:73:ca:81:d6:61:db:ff:b7:7b:88:07:f4:64:db:2c:63:
1a:29:c8:05:24:60:31:76:f0:f1:eb:e8:f9:f4:6f:cb:45:bc:
da:bd:e8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:14:22 2025 by rpki-client