Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/2951e8ad-8636-3403-831f-0d15984794b4.roa
File: 2951e8ad-8636-3403-831f-0d15984794b4.roa (raw, json)
Hash identifier: 72Iem2P6n9DUjrl0JD+qnSVaP6cF/BPfPpiT5n2yDSc=
Subject key identifier: 94:E0:F2:79:2F:38:A0:BD:29:E0:BF:CC:85:10:36:0D:75:2C:53:0F
Certificate issuer: /CN=29c10060-705c-45ae-937b-544864b670d7
Certificate serial: 010D0C9F432858480644FF186010400879C915C0
Authority key identifier: 7A:BB:A3:47:4B:89:BD:BD:31:F7:17:B2:DC:02:B2:94:A1:2E:0B:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/2951e8ad-8636-3403-831f-0d15984794b4.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 16509
IP address blocks: 64.71.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:44:ff:18:60:10:40:08:79:c9:15:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c10060-705c-45ae-937b-544864b670d7
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=d2bbfe39-8824-4b8d-9ebb-e74b34d2ba2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:54:b5:79:1d:ad:65:40:95:9a:aa:4e:6f:e0:
21:5c:de:2a:ef:d5:da:87:e1:04:02:ab:0c:66:74:
e7:f3:f4:00:89:8e:c7:64:88:29:25:06:90:ef:46:
3b:75:56:1a:19:59:1a:5e:14:7c:d5:d5:88:9c:84:
5c:77:e1:97:68:b9:4e:61:04:db:b9:0a:82:52:c0:
77:af:d7:7e:2c:70:11:b4:bb:31:80:6e:39:fd:a8:
8a:f4:36:9b:94:21:47:0c:99:96:88:27:4f:1f:46:
39:da:06:f7:0e:5e:4e:fe:8c:44:e3:62:e5:43:e4:
83:13:39:f2:88:3f:ac:c0:7d:c6:2b:15:a0:fa:ca:
f3:24:3b:5e:19:12:44:20:c9:26:94:2e:28:85:7f:
03:c5:46:0f:30:ee:74:ff:f4:ed:30:9c:1b:75:17:
21:31:72:96:52:e1:f2:cf:59:dd:16:cd:68:39:8c:
37:ac:0d:d4:7c:d3:43:92:16:0f:bb:5e:d9:60:df:
87:b8:2a:ce:46:57:44:88:9e:53:07:44:42:a4:e1:
30:a9:ce:ba:a9:e8:0f:59:49:12:08:24:22:70:d5:
ab:13:74:7c:b9:2a:97:20:76:74:5f:b8:83:84:d0:
7d:1a:0c:ae:39:b4:5f:f1:7b:fa:97:7a:52:12:16:
2c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E0:F2:79:2F:38:A0:BD:29:E0:BF:CC:85:10:36:0D:75:2C:53:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/2951e8ad-8636-3403-831f-0d15984794b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.crl
X509v3 Authority Key Identifier:
keyid:7A:BB:A3:47:4B:89:BD:BD:31:F7:17:B2:DC:02:B2:94:A1:2E:0B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer
sbgp-ipAddrBlock: critical
IPv4:
64.71.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:96:af:ee:7b:35:ae:f8:39:8a:a0:8a:fe:c6:69:42:e8:b5:
9e:dd:f9:d9:26:28:4a:4b:b5:02:ec:7c:64:a2:39:28:0c:9c:
28:da:2a:ba:81:38:55:44:f9:6e:dc:27:c0:9d:e5:af:e7:fa:
7a:17:b1:c5:42:8b:ed:0f:6c:52:1b:fd:07:43:27:8e:e6:28:
12:86:28:84:39:1b:46:26:6b:14:28:a9:0b:ae:db:d4:ce:29:
d6:14:57:1a:18:76:8f:70:f1:06:f7:22:f3:de:16:56:5d:a5:
2b:0d:fe:fc:38:19:c9:35:39:b0:08:45:0f:54:ef:f6:82:e9:
dd:2f:38:43:72:4f:2d:26:7e:10:8e:a0:34:26:dd:67:78:a8:
f9:2e:36:36:2e:4f:01:06:8c:6f:fb:59:2c:46:19:21:bf:34:
17:14:da:36:93:e7:ba:c1:77:20:86:56:f7:6d:c1:b1:6e:ca:
e5:75:ec:7b:cb:6d:78:f6:32:cc:f0:df:bd:2a:52:28:14:08:
c4:ab:cc:8f:1e:c4:53:6f:82:77:20:dc:df:18:92:57:ef:75:
52:10:83:49:ca:e5:97:3f:fe:29:91:b0:0f:7b:ea:d1:51:bf:
fc:55:7b:d1:18:2a:e0:1e:c0:1a:a3:33:d9:e1:8a:62:eb:7e:
b5:94:d4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:36:46 2025 by rpki-client