Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/5ae09803-7cc5-3d9d-8450-61da66accef1.roa
File: 5ae09803-7cc5-3d9d-8450-61da66accef1.roa (raw, json)
Hash identifier: BBIk+G5+UWh9skvbPmJoPZdX3c3L2M7AzAXL1c2FOVc=
Subject key identifier: EE:50:96:7A:79:FB:8B:12:F5:D7:06:F3:AF:3D:86:F9:E3:10:B8:F4
Certificate issuer: /CN=731a926c-9fe5-4269-8549-a15eec9d00d2
Certificate serial: 010D0C9F432858487FB5E6C12DF518A5E8962000
Authority key identifier: FE:3A:18:6C:95:56:43:00:70:F0:A4:7E:48:D4:23:44:5B:9E:CD:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/5ae09803-7cc5-3d9d-8450-61da66accef1.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 834
IP address blocks: 64.72.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:e6:c1:2d:f5:18:a5:e8:96:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731a926c-9fe5-4269-8549-a15eec9d00d2
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=6173f6e3-e821-4011-b0f3-6e687b835e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:19:cc:a1:26:b8:3a:86:a7:ba:0a:89:74:5b:
c7:ae:33:e3:84:17:14:5e:c6:96:2f:f0:0e:29:c9:
09:cb:87:26:3a:85:82:95:4c:cb:52:56:2d:01:da:
d4:39:f6:88:eb:27:c7:4f:90:78:7d:44:45:bd:57:
a2:ec:b0:46:3b:2e:0c:6a:c1:72:35:ff:b0:ff:38:
73:d2:df:74:97:59:e6:45:a2:b2:b5:1f:b3:1d:08:
64:1c:a2:75:f3:2b:bd:f7:a2:62:00:ba:e5:ec:7a:
7a:47:a8:e8:65:64:3c:3c:fa:57:ff:3d:da:f4:a4:
f0:71:7d:89:09:55:4e:28:eb:67:32:70:44:9f:e6:
5e:1c:36:33:52:02:eb:f6:6a:73:fa:5b:68:0c:6d:
fd:da:3d:e1:83:53:fa:44:20:73:b5:3c:55:c5:36:
26:5b:8d:1e:74:5d:29:ee:9d:93:2d:37:91:e1:6e:
a3:fb:3a:ba:a1:50:ce:ec:2b:2e:cb:51:0d:da:a1:
d4:03:3d:72:0c:f0:12:52:7f:8d:0f:60:62:7f:ee:
2c:ba:75:ac:82:d5:c6:5f:71:78:68:96:0d:c8:49:
e4:2a:58:99:b1:83:4b:73:57:b1:14:b3:e0:13:55:
31:76:8d:30:c2:68:c3:52:15:27:26:b3:da:8f:5f:
cc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:50:96:7A:79:FB:8B:12:F5:D7:06:F3:AF:3D:86:F9:E3:10:B8:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/5ae09803-7cc5-3d9d-8450-61da66accef1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/731a926c-9fe5-4269-8549-a15eec9d00d2.crl
X509v3 Authority Key Identifier:
keyid:FE:3A:18:6C:95:56:43:00:70:F0:A4:7E:48:D4:23:44:5B:9E:CD:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer
sbgp-ipAddrBlock: critical
IPv4:
64.72.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:7c:ee:c0:8f:e6:3c:63:aa:ad:4a:82:16:d6:d3:1c:2b:bf:
cf:4b:77:55:53:bc:b4:5b:f0:b6:90:4f:2d:74:20:20:40:6f:
84:08:38:0e:3f:b3:51:63:69:a7:f1:81:bb:21:fe:87:bf:e5:
c1:43:08:af:3c:82:4b:3c:66:e3:11:9e:1b:14:87:de:27:b0:
9b:29:5d:cd:cb:44:3b:35:b9:ea:ac:a8:c4:49:ec:a9:91:64:
be:32:57:98:10:6a:c1:e1:1a:77:a6:9e:40:7e:4f:85:d1:4d:
8a:2b:be:3e:c4:e3:63:98:1f:a7:12:63:5e:51:5f:2e:b5:89:
61:b7:90:8a:43:ae:2d:78:9b:dd:23:a6:f6:21:79:a7:e9:a4:
4c:d2:fc:52:33:7c:18:e3:60:d4:36:3a:87:53:9d:4f:01:1a:
3e:ef:f1:11:f4:bc:cc:4b:7d:d4:39:62:9e:90:d0:0b:7a:6f:
ed:27:99:4a:b0:a5:a4:59:95:62:cb:8e:7d:59:47:3a:64:b1:
1f:3e:45:39:61:57:13:b2:2f:3d:12:c1:17:31:cb:eb:d2:d5:
a5:84:ed:95:38:37:b2:e5:c1:8a:57:61:a1:07:06:f0:74:95:
f5:2e:e4:41:21:7b:90:0c:5d:09:07:d5:f5:07:ba:42:9b:a1:
ff:af:a1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:05:17 2025 by rpki-client