Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/4e7d8a90-78e9-308a-898b-13d40c2410ea.roa
File: 4e7d8a90-78e9-308a-898b-13d40c2410ea.roa (raw, json)
Hash identifier: ep3piqbiWkm9UlWhxrgqpyWrfh2erlnUkZe6FxuVKuM=
Subject key identifier: 53:1E:90:A0:3F:37:4A:77:8E:04:4D:8B:98:24:71:93:14:67:A9:34
Certificate issuer: /CN=aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85
Certificate serial: 010D0C9F432858480644FAB86E59F17B32EBF980
Authority key identifier: 76:0D:14:91:F7:E0:4E:1E:FA:F0:00:8F:64:2B:3A:8C:9E:0F:CE:46
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/4e7d8a90-78e9-308a-898b-13d40c2410ea.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 6327
IP address blocks: 64.59.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:44:fa:b8:6e:59:f1:7b:32:eb:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=d4739a0b-3be9-4670-944d-b582ae1c52ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f5:c2:97:7f:0c:6f:da:ce:02:4e:ac:b9:35:
25:a1:c5:37:67:19:b9:ae:8d:d0:ec:e4:5d:41:6e:
0f:d9:fd:d8:16:66:e1:ec:c3:b6:11:97:6a:58:f5:
50:5b:17:85:b9:79:6d:e0:49:38:49:6b:a3:cd:bd:
5c:5b:ee:95:ef:df:5b:f8:19:58:3c:e9:6d:44:63:
47:6f:99:c9:29:0a:ab:09:83:4a:dd:c4:83:a6:d5:
33:09:ce:39:1c:92:93:42:5d:ce:a2:05:e0:a5:b4:
c9:eb:a2:f5:9c:2b:25:23:43:e7:39:79:46:7f:ad:
a5:70:4f:5d:0d:de:98:34:a2:27:39:7b:92:d8:22:
0e:36:7e:b3:ff:6a:28:d8:4e:93:b6:22:1b:4f:db:
3f:2c:00:e4:56:21:19:ff:b5:38:3d:50:40:2c:e1:
ff:21:67:e7:8d:01:08:ae:04:96:9e:74:f2:02:80:
1b:e7:c7:21:e4:bc:ed:e4:5b:65:62:9f:9e:30:81:
5e:2b:d0:a9:0b:c2:1b:7c:90:4b:a1:87:f7:06:90:
aa:f6:e3:20:24:e3:9c:fe:e7:40:15:c6:0f:62:a5:
45:84:70:ad:2d:d7:52:a7:80:bc:c8:7c:91:5e:03:
08:6f:0a:ab:0b:88:fd:79:fe:c3:15:83:36:0f:37:
1d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1E:90:A0:3F:37:4A:77:8E:04:4D:8B:98:24:71:93:14:67:A9:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/4e7d8a90-78e9-308a-898b-13d40c2410ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.crl
X509v3 Authority Key Identifier:
keyid:76:0D:14:91:F7:E0:4E:1E:FA:F0:00:8F:64:2B:3A:8C:9E:0F:CE:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer
sbgp-ipAddrBlock: critical
IPv4:
64.59.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:6d:33:47:29:e8:ce:be:a6:55:7f:50:6f:b3:78:bf:3c:24:
86:98:de:f0:e5:44:45:8a:df:e7:6f:1e:5a:00:2b:c7:ad:a5:
0d:90:bf:47:7e:8a:fb:0a:5c:83:c0:f9:67:b7:fc:0c:43:f5:
3b:5c:70:fd:df:19:30:11:a1:96:4e:ef:56:ef:1b:d7:57:05:
aa:3b:d2:da:35:a7:bd:3d:09:f6:6a:c9:eb:9e:be:7a:5b:ba:
fb:89:77:76:df:07:d7:41:02:cb:9f:aa:b9:96:02:41:94:a3:
64:bd:8c:b1:b0:dc:e5:cf:c1:7e:33:a5:01:8c:81:37:90:62:
38:14:63:a6:61:55:e1:07:f8:b6:25:49:f5:00:07:d9:3b:85:
3a:3f:36:89:05:94:aa:4c:05:b0:4d:c1:01:57:86:2e:79:c2:
bf:4c:85:c5:73:a1:47:75:7c:4e:35:be:41:87:ac:39:4f:7a:
57:e9:ed:19:35:73:7e:46:bf:af:61:34:00:9e:91:60:7c:31:
6e:7b:d3:35:88:38:cb:74:3d:f6:4d:a7:df:f1:50:03:50:1d:
e0:a6:e5:21:44:dc:bd:d0:dc:fb:b0:2b:d2:a7:27:7e:69:6a:
17:cc:08:05:1a:19:15:93:da:c4:3d:4e:40:69:74:fd:b4:a0:
53:e7:f3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:31:48 2025 by rpki-client