Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a8d5b59e-ad2b-3191-a4ea-fb717810b2a0.roa
File: a8d5b59e-ad2b-3191-a4ea-fb717810b2a0.roa (raw, json)
Hash identifier: HcrL4J2yrSqSJyieQaXcDR+s+AAQrvWRkMr3G7OFYNk=
Subject key identifier: E0:47:F6:1C:9B:AA:A2:5F:5F:4A:40:FF:89:D6:85:D3:98:64:A7:02
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848573ADC34E3BE984FF2AC0D00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a8d5b59e-ad2b-3191-a4ea-fb717810b2a0.roa
Signing time: Fri 27 Dec 2024 02:00:40 +0000
ROA not before: Fri 27 Dec 2024 02:00:40 +0000
ROA not after: Thu 27 Mar 2025 01:00:40 +0000
asID: 6939
IP address blocks: 64.71.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:57:3a:dc:34:e3:be:98:4f:f2:ac:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 27 02:00:40 2024 GMT
Not After : Mar 27 01:00:40 2025 GMT
Subject: CN=4e2aa1ea-20aa-44f3-b7d7-bed6d0073684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8a:ce:8d:74:0a:5e:a5:3a:85:55:b2:a5:d4:
d1:45:1e:12:45:6c:e9:62:06:ca:b7:b6:e0:44:6f:
69:61:30:b2:d7:95:ef:69:57:b0:a3:f3:4a:1e:a3:
fc:6f:e1:8d:1b:75:b0:f2:35:af:e2:d6:6d:f6:69:
0a:94:7a:aa:1b:24:d1:ec:8b:c5:58:b5:41:8d:ff:
ac:42:cb:28:a3:a1:4d:9f:65:e6:ff:0c:ef:8b:86:
7c:dd:38:5d:79:d5:c7:c2:c7:96:36:1b:65:90:31:
df:b7:15:63:cd:39:09:8e:93:d3:c7:94:6b:86:83:
95:ca:29:dd:37:4c:4a:48:40:57:17:e5:44:e3:9f:
d7:69:6c:d6:84:95:c5:1c:12:88:2e:c7:39:1d:36:
f3:4d:a4:b2:fc:3d:ed:c5:94:2f:7e:03:9f:a2:32:
6b:84:b7:5c:c0:53:48:53:26:df:d3:ba:2e:af:c3:
85:9d:26:08:37:68:db:c6:da:92:d5:a9:52:bf:6a:
8f:74:1b:28:20:46:15:81:45:72:90:f9:a9:00:e3:
08:0e:2c:74:00:56:b4:44:c9:91:d6:df:59:b3:3b:
a9:f8:62:31:28:c3:7d:65:25:82:7a:c6:c7:b6:56:
12:f1:c9:62:11:8c:f7:fd:b2:c8:fd:6e:cd:72:e1:
38:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:47:F6:1C:9B:AA:A2:5F:5F:4A:40:FF:89:D6:85:D3:98:64:A7:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a8d5b59e-ad2b-3191-a4ea-fb717810b2a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.71.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:01:be:26:b1:67:d6:98:30:74:46:5d:b5:26:e8:00:7a:29:
79:ab:d9:6f:b7:5a:8b:af:dc:a8:fa:2f:eb:fd:27:5b:93:b0:
a8:57:76:d0:c5:73:bd:0c:aa:f0:28:38:a9:21:78:e2:5c:aa:
70:e1:f2:6b:b6:80:19:c4:b7:4f:00:36:25:0f:a6:35:fe:71:
e8:70:c2:ac:1c:97:0e:93:e7:12:9d:01:e1:86:75:0e:ac:4d:
ce:73:9c:84:cd:7a:7d:cb:69:af:e4:7b:42:a1:5e:95:d2:e1:
08:cb:3a:de:27:93:54:c8:9e:5c:86:91:76:ad:1f:22:fa:f5:
d6:4f:e6:76:ba:f0:d5:67:08:60:d0:14:79:29:60:47:5a:de:
70:9e:b1:b2:b3:f8:ab:89:f0:41:41:5f:f9:1a:ef:48:16:97:
11:9a:91:a1:29:99:aa:2a:f1:5d:82:38:76:f6:31:aa:2d:0d:
42:9d:ae:47:12:54:97:54:b9:b3:13:33:dd:07:d7:7b:20:52:
ae:28:57:93:b2:dd:25:e5:46:f1:37:47:b5:39:30:70:54:89:
9c:b9:97:f5:55:ca:6b:7c:94:78:94:f9:06:b6:34:29:74:32:
8d:4f:53:92:71:d9:97:67:39:b5:f8:19:7e:ed:88:05:92:42:
52:4b:33:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:34:53 2025 by rpki-client