Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/a5aebc3b-9575-38dc-9c39-c4f45972d657.roa
File: a5aebc3b-9575-38dc-9c39-c4f45972d657.roa (raw, json)
Hash identifier: 8mxSfDNBvXFyFhE/jfQ9QNabIAtYxEJdRG7SczIX5NM=
Subject key identifier: 97:E6:AC:56:70:D0:A4:CF:F2:87:D7:81:8D:5C:F0:E8:CA:37:27:F9
Certificate issuer: /CN=1e0f0616-6e03-49de-b5f8-4b874e6d8539
Certificate serial: 010D0C9F4328584863CB07B46B6119F240C16500
Authority key identifier: 76:7B:57:64:B0:C8:12:01:60:AE:B6:F3:E4:B4:F9:B6:73:7A:8F:98
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/a5aebc3b-9575-38dc-9c39-c4f45972d657.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 6327
IP address blocks: 70.64.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:07:b4:6b:61:19:f2:40:c1:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0f0616-6e03-49de-b5f8-4b874e6d8539
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=2838c372-6dfe-448d-9614-96df412f5c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e6:06:14:34:99:8a:bc:0b:7d:cc:0e:b6:4e:
3b:ad:ce:91:30:cb:71:85:fc:10:b4:ad:81:50:52:
4c:6e:c6:14:df:f4:70:9b:ce:5c:89:c8:7d:e5:fc:
c8:59:2d:f7:49:b5:19:7e:78:b8:69:60:02:8f:ff:
81:3d:bc:d0:e4:18:06:88:b1:f5:08:47:5f:a5:27:
87:37:49:bb:b6:59:a3:9d:da:33:9b:73:3a:d8:65:
3e:e7:83:d3:2c:da:ff:ef:63:96:85:e7:02:58:3a:
0c:b1:51:1a:1e:f6:0a:cf:13:b2:3d:72:cf:0b:da:
ff:fc:f0:af:ec:e4:b5:ba:7f:ff:0a:c4:0d:2b:c1:
8f:d0:fd:47:d2:ac:01:a0:80:18:fe:b8:f5:e5:03:
92:ea:50:fa:b4:03:00:b8:fa:63:4f:35:a9:4b:a1:
7a:43:c1:b3:07:6d:e3:38:da:c1:ec:4d:db:14:f2:
c6:a8:a9:c5:0e:c1:fa:6f:98:83:f6:06:2a:51:21:
f3:c5:06:6b:04:3f:46:79:44:3c:67:07:4f:3c:3c:
d8:8c:72:62:2b:a5:e7:19:42:00:07:cf:1a:31:a2:
80:0b:25:4c:e5:5d:c0:02:b6:70:d2:d8:09:57:58:
2a:6d:0a:df:f7:9d:8e:b0:11:1e:d4:00:ee:7f:88:
b9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E6:AC:56:70:D0:A4:CF:F2:87:D7:81:8D:5C:F0:E8:CA:37:27:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/a5aebc3b-9575-38dc-9c39-c4f45972d657.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/1e0f0616-6e03-49de-b5f8-4b874e6d8539.crl
X509v3 Authority Key Identifier:
keyid:76:7B:57:64:B0:C8:12:01:60:AE:B6:F3:E4:B4:F9:B6:73:7A:8F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539.cer
sbgp-ipAddrBlock: critical
IPv4:
70.64.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:7c:07:da:9d:3b:ca:c7:a5:3d:7b:5e:21:be:23:45:03:77:
20:e3:ea:8b:3f:f0:ee:c2:1a:57:35:de:b9:f1:48:1f:4b:b7:
c9:03:43:c0:1c:76:4b:75:18:bf:a2:4e:30:18:d1:be:61:50:
1c:71:31:07:6d:d6:ba:f1:34:16:da:c2:5a:10:03:22:24:71:
36:40:c1:f1:c9:05:21:01:92:7e:88:d3:c5:15:68:09:86:a3:
39:d6:b2:96:1e:9a:c2:1a:0c:11:53:fd:24:a1:6f:e7:2c:77:
aa:00:f5:ef:85:2d:3d:b1:04:88:df:30:d2:94:44:da:bc:34:
1b:2f:9a:26:4f:70:e0:06:34:4d:fc:ad:cc:a4:0b:7e:ea:a1:
94:5a:91:85:a0:99:fa:0d:b7:7a:6f:f6:98:b8:23:8b:14:00:
e0:25:d1:03:ad:a9:ac:b8:0c:06:ac:82:24:f0:5e:68:99:9a:
db:ba:e0:7f:6c:ff:64:27:e3:d1:84:2e:c0:11:99:c0:70:c6:
87:a0:2e:b6:ef:2b:ba:e2:e3:67:bb:d2:dd:92:49:a8:bc:74:
9b:ca:a8:49:f7:85:93:30:be:1d:df:86:09:05:6b:cf:c0:d2:
1e:77:a5:ed:47:1a:c4:8c:31:ae:db:3a:fb:8c:d3:60:9c:d4:
89:d8:da:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:11:31 2025 by rpki-client