Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/8f632fa5-1ad1-3706-a558-8ac46d2f2710.roa
File: 8f632fa5-1ad1-3706-a558-8ac46d2f2710.roa (raw, json)
Hash identifier: yRo70OsU3oTQj0znTRngfYPJcdw/gKf2ir2Fz6ea780=
Subject key identifier: 98:9E:A0:57:A6:37:74:1B:C8:D2:07:21:14:28:FC:27:D5:C5:68:9C
Certificate issuer: /CN=1e536701-e40c-420a-abd0-993bf8e0eac8
Certificate serial: 010D0C9F432858485B6AF3047C2E773AD1153D00
Authority key identifier: 4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/8f632fa5-1ad1-3706-a558-8ac46d2f2710.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 397373
IP address blocks: 64.29.80.0/23 maxlen: 24
66.180.130.0/23 maxlen: 24
66.180.142.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6a:f3:04:7c:2e:77:3a:d1:15:3d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e536701-e40c-420a-abd0-993bf8e0eac8
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=48c351ce-61d5-4f13-8d82-d45e08a6f1d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:49:4f:b3:93:02:85:ba:69:7e:9b:d6:3b:9e:
30:7e:bb:1f:6d:09:3d:83:70:86:5c:d6:61:70:eb:
b8:52:27:98:47:72:40:6c:8e:c7:2e:1b:23:9e:26:
ca:7b:d2:f1:83:51:c4:c8:7e:61:38:4a:c8:c5:64:
ca:a3:75:bc:15:03:9e:73:c9:3b:88:97:e5:7e:f9:
55:74:6b:29:b7:1e:14:eb:10:84:1c:ad:f0:05:29:
83:9b:de:b8:b0:66:ab:2b:d2:bc:78:6d:55:ab:be:
cf:35:63:6c:96:ae:d2:c6:3f:8e:15:f8:ca:7a:8b:
bb:eb:0f:c7:6a:ea:33:66:df:f9:b2:3b:cd:2a:e0:
d2:95:67:b5:98:6a:d6:ef:ea:85:85:3e:fd:97:2b:
b7:50:80:8a:94:d3:1a:0a:1d:5a:05:c6:e0:af:39:
33:ee:9d:dc:1e:9d:0d:88:d5:81:64:96:d4:0e:73:
87:6b:90:6b:66:ae:48:4c:74:4a:09:29:19:b2:f2:
11:14:5f:d4:03:d4:df:a1:46:e7:d1:0d:ed:de:30:
6a:ec:f9:6c:f3:bc:96:42:6e:45:e8:f2:e0:e6:11:
fa:e2:9c:14:02:37:79:a0:92:d1:cb:dc:2f:fc:07:
e9:6b:ee:23:12:99:ad:c9:9e:15:57:2f:c7:e0:af:
98:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9E:A0:57:A6:37:74:1B:C8:D2:07:21:14:28:FC:27:D5:C5:68:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/8f632fa5-1ad1-3706-a558-8ac46d2f2710.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.crl
X509v3 Authority Key Identifier:
keyid:4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer
sbgp-ipAddrBlock: critical
IPv4:
64.29.80.0/23
66.180.130.0/23
66.180.142.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:01:8d:9e:8c:1b:bb:02:11:bb:9f:49:fe:22:7f:25:0d:57:
d8:29:39:11:4f:74:f0:2b:33:06:36:d0:5e:a2:ee:65:30:14:
93:0f:b3:e5:10:44:14:57:13:94:89:fc:81:12:6d:05:c2:dc:
d4:1c:f0:c9:c0:86:9e:d0:14:be:85:26:73:ad:19:66:3c:17:
db:08:c0:7c:0b:26:da:a0:d5:35:ef:71:c3:e3:cd:f6:0f:bd:
33:f2:73:e3:6a:e5:48:4e:e8:30:e4:e8:a7:f8:b5:5a:a5:16:
5e:44:7e:e9:a1:12:08:b4:d7:69:0a:78:72:a2:fc:66:7a:40:
47:dc:08:09:8d:de:b4:f0:f0:b5:be:f0:2b:86:50:00:a7:4f:
7f:d8:27:5c:fb:91:1c:8b:fa:d7:43:f8:ba:91:c3:0a:2c:53:
22:91:00:69:f8:2d:39:80:84:f5:40:53:af:c4:a0:31:ff:24:
ad:4b:e6:0e:dd:fd:ab:81:be:ec:8b:8f:6a:37:a5:9d:ae:a2:
2e:dd:66:53:78:77:c3:a3:2b:22:12:ac:31:86:c7:30:fa:2d:
dc:a7:3f:40:65:4a:d6:57:08:7b:2d:c8:f7:d4:7e:48:1a:53:
25:7d:b5:58:86:b0:f4:13:6d:66:d3:4d:dd:f3:f5:a6:f4:d9:
85:73:07:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:58:42 2025 by rpki-client