Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/541ab674-14b2-3b2e-80e5-618bee482529.roa
File: 541ab674-14b2-3b2e-80e5-618bee482529.roa (raw, json)
Hash identifier: qObVHE84LTY7VLJzApNkwt6MMryPkIpXi6mMdAqfw0I=
Subject key identifier: 14:85:B9:E4:A7:80:DD:99:AE:2B:1D:FF:FD:D1:66:E9:7E:77:CE:39
Certificate issuer: /CN=1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a
Certificate serial: 010D0C9F4328584817050E09BD585A3469EBAD00
Authority key identifier: 41:7C:7B:A8:34:ED:81:03:82:86:EE:D9:97:FA:70:1C:5B:6F:27:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/541ab674-14b2-3b2e-80e5-618bee482529.roa
Signing time: Wed 04 Dec 2024 02:00:39 +0000
ROA not before: Wed 04 Dec 2024 02:00:39 +0000
ROA not after: Tue 04 Mar 2025 02:00:39 +0000
asID: 394177
IP address blocks: 64.20.216.0/22 maxlen: 32
170.39.176.0/22 maxlen: 32
209.112.76.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:17:05:0e:09:bd:58:5a:34:69:eb:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a
Validity
Not Before: Dec 4 02:00:39 2024 GMT
Not After : Mar 4 02:00:39 2025 GMT
Subject: CN=fffe9c76-0818-42b1-af1c-7d4adccaa4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8a:26:fa:c6:f0:15:a1:72:88:03:81:d1:0a:
6b:71:1d:a1:e6:20:af:d7:0d:67:94:d6:7a:b5:d3:
15:af:8a:9a:02:52:45:bc:41:bb:04:bb:54:1f:b1:
ab:d2:d4:d5:5d:67:60:d9:e7:de:8a:db:f8:36:81:
1c:44:5f:2d:df:b8:82:63:47:c7:4e:79:10:e1:b5:
e3:6a:dd:1c:12:5b:13:48:c9:fc:88:8c:d3:c1:f6:
fc:6b:a6:f3:93:8a:0a:da:27:93:74:6b:5b:c8:ca:
b8:df:57:4c:46:eb:50:48:c1:e1:ab:0a:da:5d:9b:
36:d4:58:6b:77:db:1a:a8:66:ab:85:6b:20:96:96:
ec:cc:8b:d3:55:60:43:bc:0a:87:24:88:9f:22:ee:
9e:fb:e7:88:76:30:7c:e6:fd:ee:09:02:62:2b:d9:
0f:e7:ea:60:72:fe:84:bd:08:83:5e:4d:ab:f4:f2:
a9:89:24:d9:61:8c:6b:dc:1f:c8:88:4c:64:e3:7a:
6b:58:27:c6:00:03:ae:98:15:df:8b:00:54:37:c7:
95:a3:6d:2f:62:4f:4d:fe:84:72:77:c3:a7:9c:ed:
1a:24:6f:ac:3d:00:18:fe:df:cc:02:9a:49:73:e7:
84:10:44:8a:34:4d:e0:d1:ba:cb:e0:cd:7b:ea:c0:
56:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:85:B9:E4:A7:80:DD:99:AE:2B:1D:FF:FD:D1:66:E9:7E:77:CE:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/541ab674-14b2-3b2e-80e5-618bee482529.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.crl
X509v3 Authority Key Identifier:
keyid:41:7C:7B:A8:34:ED:81:03:82:86:EE:D9:97:FA:70:1C:5B:6F:27:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.cer
sbgp-ipAddrBlock: critical
IPv4:
64.20.216.0/22
170.39.176.0/22
209.112.76.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:09:f9:67:1a:2c:51:61:9f:47:67:9c:3a:48:c8:f0:ba:eb:
d4:8a:fe:7f:84:e5:9d:42:ed:f1:f8:b2:ba:80:99:a6:36:3a:
39:30:91:96:09:df:9d:5f:0d:b7:93:e5:98:8c:67:7c:fc:f3:
0c:86:ce:5a:6a:3b:25:53:94:00:3a:76:8b:43:ba:0d:9b:3c:
d3:4f:74:8f:f7:1a:33:47:d7:7a:d6:b9:3b:76:4f:21:84:5b:
a0:de:96:29:10:16:42:ad:d2:f9:e1:58:14:01:01:2a:05:52:
e6:fe:8f:7f:49:3c:91:ce:46:ab:d8:b6:ae:ed:7c:4a:1d:f6:
35:59:11:88:68:1e:a1:85:0d:d3:02:a2:72:8e:7a:c6:f7:9a:
ab:c3:91:df:fc:dd:2b:c5:7b:c6:76:21:63:a2:77:54:dc:43:
43:76:aa:ab:73:28:96:95:24:57:c1:75:94:5c:ce:ae:19:e8:
7d:48:f9:0f:fb:29:0e:ad:88:b0:b1:84:f2:16:57:ea:d0:c1:
c6:7d:cf:be:b9:32:5a:33:b7:ca:56:cc:dd:32:d6:1f:99:18:
3b:eb:43:a9:0b:25:29:f3:80:f0:77:ba:ca:0f:b5:97:48:43:
84:3f:01:cf:6b:a9:b3:90:bd:2a:af:bf:3f:eb:05:17:ba:b9:
86:2b:30:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:35:37 2025 by rpki-client