Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/589e3e61-8fae-384e-99a0-011c39c08dbb.roa
File: 589e3e61-8fae-384e-99a0-011c39c08dbb.roa (raw, json)
Hash identifier: y8wRZsBjk5+C3d3UxBbfdNQpEyygxxUxzVxMb+GbGyw=
Subject key identifier: 74:58:3E:93:69:59:D9:7B:F7:CA:D0:D5:C6:C5:6B:AE:31:58:5E:15
Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9
Certificate serial: 010D0C9F43285848AF2B781C724859B756EAC0B0
Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/589e3e61-8fae-384e-99a0-011c39c08dbb.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 16509
IP address blocks: 64.52.111.0/24 maxlen: 24
192.153.76.0/24 maxlen: 24
199.201.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:78:1c:72:48:59:b7:56:ea:c0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=af9cf41a-6393-4bd6-acc5-eebddd1506e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ab:46:b0:4b:62:f6:e1:d4:f7:50:b0:8a:3e:
f5:84:0d:4f:38:56:37:27:32:91:bf:e2:68:5e:cb:
33:b2:7d:39:d2:37:fd:c8:db:b3:ff:68:da:ee:a3:
bf:cd:a3:03:4b:4f:a1:e9:b0:b3:a5:5f:8c:71:f1:
58:2b:fc:2d:2c:24:1d:69:7f:38:40:57:83:47:7d:
85:71:48:36:36:67:af:c2:7f:67:65:ca:7f:39:b7:
6d:1c:41:35:3e:c1:64:82:3c:30:ef:e7:a8:94:31:
dd:60:6e:fa:62:0d:4d:b8:9c:86:c3:31:d0:86:98:
ed:14:69:69:48:93:38:a3:48:c8:9a:0b:2a:ba:3b:
9a:22:63:b8:b9:e1:d0:ac:d1:0f:f7:ef:00:81:47:
b4:11:da:9e:35:12:2b:d1:7c:5b:91:c5:41:ed:e9:
b3:1a:1a:10:0f:c4:0c:0b:01:c8:7a:86:65:f9:04:
6e:44:fe:37:0a:7b:f0:95:b8:78:20:fa:92:7e:41:
a2:b3:8d:9d:96:60:81:01:e8:fc:4e:fa:17:4c:d5:
e2:fa:79:e9:cd:c9:ab:88:c4:4c:2d:33:db:de:bc:
fc:91:38:ec:f1:ca:27:3d:ab:b8:7e:90:96:73:ea:
6a:ad:98:58:06:65:04:19:8c:39:51:f2:ce:f0:d5:
fb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:58:3E:93:69:59:D9:7B:F7:CA:D0:D5:C6:C5:6B:AE:31:58:5E:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/589e3e61-8fae-384e-99a0-011c39c08dbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl
X509v3 Authority Key Identifier:
keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer
sbgp-ipAddrBlock: critical
IPv4:
64.52.111.0/24
192.153.76.0/24
199.201.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:b7:56:14:7e:99:6a:1a:87:fb:1b:e6:13:bb:a2:33:76:2f:
f1:8d:41:50:3c:ee:bb:36:80:f9:00:ad:30:c8:14:18:06:34:
6a:f1:b4:53:cd:af:0f:bf:fe:90:cc:ac:60:47:37:29:6d:8d:
38:48:dc:0d:0a:e0:6d:1d:85:d8:18:f5:49:86:cf:3e:19:01:
98:fc:71:8b:3f:f7:a6:32:ab:24:d4:ac:0d:f9:32:7f:39:39:
08:da:9a:f7:9c:05:57:0e:10:96:2c:cc:06:ab:67:0c:10:c9:
c6:ed:fd:4a:af:04:b8:50:07:4c:75:98:88:d5:50:47:2d:8b:
8a:17:1d:ec:4a:6c:e7:e2:4e:d7:e7:8c:49:d4:c6:c0:04:df:
5f:6c:bd:41:6a:d0:5d:b3:de:b3:67:5b:fc:75:fe:08:c2:65:
55:d1:6e:64:16:86:59:b5:4d:35:42:eb:33:9a:b5:cb:8d:eb:
d5:1f:40:5e:48:43:05:57:bd:92:ac:9d:c8:6b:88:1a:a5:ef:
70:4a:a0:93:31:9b:d5:d4:eb:36:62:23:5b:06:df:28:7a:d9:
39:83:46:3b:5c:2e:14:a8:f9:5e:7d:a0:72:84:9e:de:f6:69:
47:34:04:2b:87:5c:1d:40:fc:d7:c6:0e:f0:0c:de:43:9d:92:
b6:1b:16:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:32:58 2025 by rpki-client