Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/2a4e3ad6-f6ba-30b9-a4c5-b4d8db106425.roa
File: 2a4e3ad6-f6ba-30b9-a4c5-b4d8db106425.roa (raw, json)
Hash identifier: tjP7QWuJJDGKrWpZs3mtbCcN7JCOhiruS2LoQ0GN9Ts=
Subject key identifier: 42:E0:AB:3F:CD:7C:4B:62:D3:50:32:09:61:4A:4E:24:9B:56:3F:DD
Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial: 010D0C9F43285848090FB536FE56C67C370BF400
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/2a4e3ad6-f6ba-30b9-a4c5-b4d8db106425.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 13807
IP address blocks: 64.64.144.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:b5:36:fe:56:c6:7c:37:0b:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=9712a87e-f510-4850-b899-e5822bf9f04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5e:e6:97:34:64:05:5c:26:22:cb:43:7d:ce:
7a:05:1f:bc:fc:6f:4d:dc:9e:28:cc:60:ef:6a:b9:
ea:8a:1a:a8:eb:7a:04:7b:28:a7:ba:f8:21:f3:31:
49:e3:74:18:9e:f0:64:dd:f4:e7:75:e5:97:25:54:
0a:a8:3a:77:b8:35:4d:d3:e2:31:7d:80:60:4e:b5:
96:33:e0:1e:cf:80:a7:d9:d0:42:08:21:e8:c8:05:
d5:2f:fd:de:43:1b:af:a1:50:04:fd:72:1f:96:31:
3d:fd:de:40:f0:48:be:e2:c2:05:31:a5:5d:b8:b1:
f7:46:2c:af:d1:b4:c5:ea:c6:da:5c:63:25:98:89:
96:af:d8:e4:e1:1a:46:d2:1c:eb:80:d1:72:10:5e:
ee:ad:03:cd:ca:e7:f8:ee:f4:da:e8:e6:8b:09:67:
e1:d8:97:71:d3:18:75:d7:2b:05:b4:33:3a:bc:bb:
c2:62:f6:c2:ae:31:a5:a0:d2:92:0e:be:b8:41:c2:
95:62:01:37:60:0a:0c:4e:92:69:1f:30:79:bb:8d:
d2:b0:dd:5b:8f:f3:ca:75:29:7e:7b:0a:e0:33:60:
90:c1:c3:ad:67:b9:18:95:ef:a7:75:fa:31:33:38:
e0:9d:2d:76:cb:b4:eb:f0:e6:39:1f:4a:10:f1:d3:
07:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E0:AB:3F:CD:7C:4B:62:D3:50:32:09:61:4A:4E:24:9B:56:3F:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/2a4e3ad6-f6ba-30b9-a4c5-b4d8db106425.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
X509v3 Authority Key Identifier:
keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
sbgp-ipAddrBlock: critical
IPv4:
64.64.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:cf:75:55:9c:7e:e6:b2:03:91:02:87:90:86:4a:c0:6d:17:
19:7b:92:d1:3c:87:c0:79:42:d1:12:dd:60:f8:af:5f:5c:94:
76:be:72:02:62:0b:d9:9a:4a:06:06:ca:9e:2e:2e:1e:b7:75:
83:3a:88:c4:4f:4a:51:39:40:0a:24:fb:f7:1e:da:25:39:11:
3b:c7:2e:97:a8:8e:7a:c1:50:fa:04:f0:e0:5d:b3:70:10:fa:
b0:11:74:37:e3:fd:b8:5e:99:f6:de:c7:9d:c6:c3:a3:6d:5e:
00:9d:31:ba:f1:e3:40:a0:09:5c:0b:77:af:c0:8c:7f:dd:b7:
64:7b:7a:71:da:4a:68:a8:0f:e5:ec:8e:5d:5d:de:5a:76:f4:
5e:d8:22:17:9f:a8:27:a6:a3:3e:79:5b:46:5b:37:56:28:da:
48:c2:5c:97:69:8f:80:1b:df:5c:1b:bf:86:2b:1a:a0:cc:74:
58:b5:ad:a8:cb:42:aa:27:d6:82:eb:e2:79:6d:20:48:c8:6e:
b7:29:b6:4d:15:ea:27:78:4a:b1:51:ad:ac:7e:86:a5:40:7a:
5a:75:eb:f5:21:ed:9f:87:2a:eb:2c:d8:8e:08:7c:41:73:0b:
0f:cb:ae:69:f5:76:31:cf:e2:37:1f:f0:64:69:b0:53:5c:37:
89:f4:70:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:35:43 2025 by rpki-client