Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/8bc8986a-ac26-339e-8cf9-423e085dee63.roa
File: 8bc8986a-ac26-339e-8cf9-423e085dee63.roa (raw, json)
Hash identifier: 0cZ5A9uPZQHx+UJKv2+HXYkJbpMhMO3V/ngyEbTfPi4=
Subject key identifier: F0:A2:08:80:76:3F:F0:11:CE:48:15:62:1B:00:D9:74:21:3C:CD:0F
Certificate issuer: /CN=291133eb-e436-4803-adab-f37835fc18e3
Certificate serial: 010D0C9F432858482A8FD8694BACD7F7AB315D80
Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/8bc8986a-ac26-339e-8cf9-423e085dee63.roa
Signing time: Wed 11 Dec 2024 02:00:38 +0000
ROA not before: Wed 11 Dec 2024 02:00:38 +0000
ROA not after: Tue 11 Mar 2025 01:00:38 +0000
asID: 4913
IP address blocks: 64.49.128.0/18 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8f:d8:69:4b:ac:d7:f7:ab:31:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3
Validity
Not Before: Dec 11 02:00:38 2024 GMT
Not After : Mar 11 01:00:38 2025 GMT
Subject: CN=522d53e6-7cc3-4149-b91f-8d40d4a8216a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0c:df:8a:c9:aa:06:9e:d5:88:4f:10:4c:34:
ee:03:0e:8f:a8:a8:8e:fb:ad:8b:d0:5d:3e:6d:ab:
da:6c:0a:f1:47:94:94:8e:99:d8:49:7f:52:22:00:
52:11:e1:7d:a6:91:47:ca:ac:df:20:4d:b5:ad:e1:
f6:6a:f8:31:db:f1:37:bf:ae:cd:ad:c1:04:bb:09:
c7:92:0c:8a:47:4b:55:51:fb:40:50:30:e9:01:49:
73:08:7a:3a:6c:e8:62:81:b7:d6:a9:1d:ad:bf:e0:
bb:48:17:dd:7b:29:87:54:59:cf:53:61:a0:6e:65:
93:37:03:98:ab:9e:6e:63:70:6b:b7:39:ab:05:ad:
76:78:87:1b:51:9d:aa:46:ad:4b:3f:cd:1c:0a:af:
50:29:cd:9c:18:f9:d6:73:c1:e8:71:93:82:b7:db:
1f:40:b3:0b:14:ad:df:bf:aa:e9:6a:99:ad:81:45:
07:49:8d:14:22:04:cc:55:eb:e2:2e:6f:5b:e1:6c:
a0:29:0e:c4:47:fe:fa:ed:06:cc:6e:3d:04:0e:76:
3d:85:c4:7c:f4:97:d2:89:64:4a:f2:79:b4:b0:ec:
d3:3a:3e:6e:a1:7e:2d:7f:0a:f6:83:11:de:0d:c5:
f6:60:34:d1:62:e6:a9:a0:41:4c:02:ed:e8:13:6f:
7f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A2:08:80:76:3F:F0:11:CE:48:15:62:1B:00:D9:74:21:3C:CD:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/8bc8986a-ac26-339e-8cf9-423e085dee63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl
X509v3 Authority Key Identifier:
keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
sbgp-ipAddrBlock: critical
IPv4:
64.49.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:34:9c:32:29:34:73:46:78:c5:a8:74:09:6f:de:5b:70:20:
37:61:b9:56:07:8f:07:69:24:dd:03:b3:ae:c6:a8:dc:4e:8b:
f4:1d:ed:33:56:1f:53:d0:ce:45:ef:38:af:b4:c0:f7:d9:6e:
f8:d5:3b:b0:51:8b:0c:0e:f5:1e:ff:79:c4:45:75:e0:ab:aa:
31:bb:8c:1b:fc:69:58:cf:0a:b0:1e:8a:a2:52:4b:74:e7:06:
64:1e:aa:cc:6d:fb:47:cd:38:30:a6:d4:a3:a6:8f:72:ad:12:
29:f7:46:bf:97:c3:f1:22:4f:40:6d:a0:0f:f6:7d:10:fd:e9:
72:39:67:10:75:ca:b0:68:b8:65:98:12:5b:d3:22:12:ec:a6:
2a:33:6b:3f:fa:08:f3:95:00:14:81:62:23:8d:d7:91:62:0a:
d4:47:c4:aa:b4:9b:e2:dc:f4:42:64:c8:bb:ec:4a:47:cd:4b:
34:ce:6b:56:3e:d8:92:dd:c3:e6:17:13:19:11:80:b0:40:d1:
8b:83:dd:5e:16:b8:f7:75:0a:43:f3:05:29:20:10:b0:7b:54:
4b:da:2b:f5:a5:b2:d0:07:74:26:07:a1:2d:fb:d2:ed:1d:0c:
ff:e8:d1:15:82:0b:43:ee:5b:f3:1c:00:3d:4c:af:c8:44:1b:
0c:34:5d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:45:07 2025 by rpki-client