Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/97af0cfb-35d5-37fc-a9de-ab97821c0309.roa
File: 97af0cfb-35d5-37fc-a9de-ab97821c0309.roa (raw, json)
Hash identifier: hEz0JBYLO58iu9SrmRJxCrDbihWCtFa61ZfU1+pR70Y=
Subject key identifier: 41:37:76:9D:3D:7C:D2:43:C9:81:53:9E:44:D4:B4:F4:5F:42:2C:3D
Certificate issuer: /CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
Certificate serial: 010D0C9F4328584819CFD4F18CAB199043AF6C80
Authority key identifier: C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/97af0cfb-35d5-37fc-a9de-ab97821c0309.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 18530
IP address blocks: 64.38.128.0/18 maxlen: 24
66.114.128.0/19 maxlen: 24
207.115.64.0/19 maxlen: 24
216.9.0.0/19 maxlen: 24
2001:560::/32 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:d4:f1:8c:ab:19:90:43:af:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b93e99c-9b42-4e7b-a72c-9676e6733c16
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=6a7e746d-6ce1-4510-9d40-d69d2f1f9b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d1:57:4f:2b:c0:07:98:0e:0c:b3:5a:f2:f3:
f6:8f:96:42:1b:8e:47:07:ca:3a:36:b6:64:1a:91:
fb:86:ed:b2:cd:64:34:e3:b2:e8:9f:ef:6a:7b:7d:
c5:f3:9b:48:7b:98:72:5d:c9:a7:4b:b4:69:86:4d:
58:45:27:c3:8b:52:ac:d2:8a:4b:7e:3c:46:8a:da:
bd:1a:b6:c1:23:9a:ca:3c:1a:77:ae:c9:76:d8:3b:
76:f2:bd:78:39:ed:c1:68:28:e9:81:f5:7a:04:cf:
a3:02:1a:b9:a4:ef:88:1b:35:56:92:4a:fd:5c:d6:
fc:68:9c:16:7e:c0:e3:e6:51:6e:3f:29:e3:1d:bb:
02:28:cc:36:0b:f5:4d:81:7b:49:13:da:0b:15:ed:
db:c4:67:dc:7f:e9:4e:15:b9:73:8e:ed:57:2f:32:
97:f5:02:04:df:37:50:b8:76:96:9d:07:3b:b9:0b:
cb:e5:65:76:9b:eb:f6:bb:ec:11:74:0e:fa:ee:44:
bc:41:5d:26:00:d0:a7:7a:08:5e:01:3e:24:17:ef:
5a:4f:c4:37:ca:06:ff:a5:30:bb:98:36:a5:a4:fc:
86:a1:a0:e5:38:97:32:1c:8a:1d:20:7f:07:c4:fd:
fe:14:24:50:1f:9d:e1:a8:09:9c:0e:a4:7e:7e:66:
46:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:37:76:9D:3D:7C:D2:43:C9:81:53:9E:44:D4:B4:F4:5F:42:2C:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/97af0cfb-35d5-37fc-a9de-ab97821c0309.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16/7b93e99c-9b42-4e7b-a72c-9676e6733c16.crl
X509v3 Authority Key Identifier:
keyid:C7:1D:6D:6A:C9:BD:3A:73:1C:5F:2C:45:DA:56:3D:BC:D9:60:73:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7b93e99c-9b42-4e7b-a72c-9676e6733c16.cer
sbgp-ipAddrBlock: critical
IPv4:
64.38.128.0/18
66.114.128.0/19
207.115.64.0/19
216.9.0.0/19
IPv6:
2001:560::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:a8:79:90:64:7a:af:4f:f8:2c:8e:7a:ad:53:c9:15:3f:0e:
29:08:6b:8d:53:01:d4:95:bc:73:6c:39:c0:7b:3c:7e:b5:72:
5d:6f:8e:3f:ad:64:4e:9a:1f:e4:90:a5:ed:9c:bd:ec:d0:a3:
cb:43:6d:45:88:a2:2d:4b:09:ba:8e:11:b2:03:65:cc:12:38:
13:de:fd:8b:a9:14:f0:8f:51:4a:10:e2:fd:b9:e2:82:b1:7b:
fe:e3:38:5e:33:03:18:bc:e2:02:8a:2e:68:d9:c1:2b:2c:72:
52:1c:2b:61:9b:a4:1a:f3:22:58:bd:4a:72:85:cf:ee:62:e9:
24:6e:6b:ae:ea:e8:92:96:11:d1:01:8e:ed:18:1f:af:7b:a8:
c7:05:27:70:e5:d3:e2:a4:e0:22:53:11:f9:31:e6:a3:97:b1:
ca:db:17:39:a4:8f:ab:a2:e6:ee:f8:f0:0e:62:d8:2f:7a:45:
ba:1c:7a:ae:ba:16:44:4a:c9:00:98:b3:e1:36:e3:5f:e9:26:
b0:79:69:a0:58:af:6d:35:3e:12:fc:94:7b:b1:18:fb:d2:0a:
29:35:c3:6d:f7:01:4b:24:82:a0:d7:b2:ae:09:5f:05:15:43:
6d:bf:27:0e:04:6f:2b:2f:e0:06:66:80:90:69:a0:a4:16:26:
fb:26:5b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:13:25 2025 by rpki-client