Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa16388b-7603-3adf-ab82-e78d3af96e28.roa
File: fa16388b-7603-3adf-ab82-e78d3af96e28.roa (raw, json)
Hash identifier: 6lWbpVfVpQNat+MnMYv4+RaSk7FJUUU1us+JdoMdFqE=
Subject key identifier: 9C:49:5C:5D:7E:91:3D:DD:92:8F:22:64:B0:AB:18:0B:F9:F5:B2:FB
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858486C2B2C8DA1A7F58CA326E6B0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa16388b-7603-3adf-ab82-e78d3af96e28.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 397227
IP address blocks: 64.6.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:2c:8d:a1:a7:f5:8c:a3:26:e6:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=bfc86e74-61a3-4788-9d9f-9a9c22250ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cf:aa:79:72:93:a2:58:5e:41:1b:0a:d2:69:
a3:69:c8:81:8d:82:da:4b:14:fe:ec:41:55:62:2c:
59:ba:94:8b:fd:3f:8b:e4:c0:c0:6b:7e:db:bf:fc:
82:db:83:6e:d6:33:e5:8b:bc:a0:ad:9c:c9:5f:92:
17:25:91:46:83:d6:f5:78:dd:52:e7:de:26:c6:8c:
df:f2:56:28:34:a0:92:eb:48:c6:32:14:d1:96:f5:
6e:a2:f4:98:ff:15:d9:63:d1:b6:4c:d7:c9:e4:7c:
b2:9b:3b:cc:46:dd:8e:00:e5:e5:8a:92:73:2b:df:
29:88:7b:6e:1b:43:6d:2d:52:ee:ba:64:33:01:cc:
0a:d1:2c:28:91:c8:d7:cc:26:5a:1a:59:b9:b1:ba:
70:48:39:57:34:42:ec:80:b8:19:65:fd:ac:0d:fe:
87:3c:7d:15:d7:0f:68:5a:b6:16:90:f2:81:7a:1a:
88:d5:e9:f7:41:a2:b4:1a:86:b3:78:91:d7:99:ed:
95:85:0c:ac:c3:aa:3b:c0:01:f4:48:e4:53:23:a3:
93:97:36:0e:4f:a1:e7:4e:af:5e:ea:94:9e:21:70:
24:2c:15:0e:e2:2a:34:5e:a4:5d:73:cb:5a:e2:cb:
4f:0b:c1:50:a2:a7:69:1d:0e:3a:a6:d5:a6:35:88:
8f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:49:5C:5D:7E:91:3D:DD:92:8F:22:64:B0:AB:18:0B:F9:F5:B2:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fa16388b-7603-3adf-ab82-e78d3af96e28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
64.6.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:ca:28:38:82:1c:47:34:38:fc:2f:1a:32:6e:84:db:74:37:
fc:58:b3:66:51:77:8c:04:4b:00:be:4d:1c:c8:f2:c5:f9:c3:
ce:eb:b3:6a:fd:4f:0d:5c:ed:5f:85:91:8a:05:7d:e4:40:01:
35:56:06:24:6c:bf:ca:4a:14:e3:cf:86:d1:5f:7d:e3:56:95:
56:1d:3e:f3:5b:48:d3:14:f1:08:2d:09:54:4c:ea:35:48:0a:
fe:cf:75:2b:78:55:23:5a:09:63:f7:e5:c9:d3:c7:95:cb:66:
e4:d4:cc:48:2a:50:1b:4b:08:ba:72:2d:23:32:9d:00:a8:ca:
71:c4:56:73:9a:48:73:84:09:09:c8:d7:d7:67:a2:e5:bf:68:
d2:9d:80:c0:96:fa:a8:00:50:1a:c8:8f:5d:14:88:cc:62:2f:
30:5c:58:aa:9c:d4:82:d4:09:1b:98:22:05:f3:fa:5b:93:b6:
82:48:c5:45:38:f9:c4:ea:0f:08:4b:fb:27:8d:f6:f0:a5:44:
5c:57:80:26:16:f1:16:29:b8:43:80:b3:13:4c:07:70:35:d2:
d5:22:b8:59:db:5f:22:20:08:50:77:02:99:10:17:06:ab:9b:
9c:4a:21:a5:99:f4:ff:21:a1:f3:f5:f3:f1:7a:2d:57:27:c2:
de:1f:7b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:30:47 2025 by rpki-client