Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/9bec768c-da8a-394a-9c6f-2cee7025dd7a.roa
File: 9bec768c-da8a-394a-9c6f-2cee7025dd7a.roa (raw, json)
Hash identifier: GT/ScLxUIsqI7wOe10+HawgA0ow+vfUhBFlaxCt7L9U=
Subject key identifier: 32:FE:10:58:D2:D9:75:90:37:FD:8D:2E:BD:19:A1:8D:56:9E:FF:CD
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F43285848345564FF2452A011C6E18D80
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/9bec768c-da8a-394a-9c6f-2cee7025dd7a.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 209
IP address blocks: 64.213.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:64:ff:24:52:a0:11:c6:e1:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=1c8d4381-4f31-4b94-a02e-5218a0d426e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c8:42:1c:ff:11:78:f4:43:d1:b1:eb:98:2e:
f4:27:d9:70:9c:70:5d:f0:90:ab:cc:99:2c:e3:9f:
e3:a4:7d:22:73:cc:9e:8d:4b:a3:c3:8f:58:c1:b3:
42:58:b9:0a:b9:00:70:f8:ce:3a:06:f4:2a:32:6f:
b5:ae:3b:8e:f2:ec:74:14:ed:5e:17:fa:72:0e:ff:
fd:6d:f8:0d:6d:32:d2:48:61:23:cb:b8:d7:9e:44:
99:17:60:a7:64:5d:7a:fb:d5:8a:ef:e1:fc:cf:69:
4c:cc:b6:11:f3:a2:6b:72:b1:8b:67:8d:a9:51:37:
ec:b5:b3:b4:b9:28:db:fb:48:12:5d:73:d3:19:fc:
01:f2:8c:93:8f:53:07:1f:e7:de:d1:03:f0:b5:0c:
22:5d:77:7c:37:19:fe:6d:68:d3:af:b7:03:b9:2e:
b2:5b:b9:95:e1:62:46:25:32:26:9a:48:a5:20:a2:
c9:b8:8b:a1:d1:bb:7a:77:9f:5e:5a:ea:e5:60:7e:
46:26:58:12:7a:08:7d:73:c1:4c:fb:de:67:ea:2d:
22:04:80:3e:ac:38:f3:42:1f:85:8e:11:c7:01:48:
dd:db:eb:9f:2b:f3:da:17:aa:ac:fb:fa:a3:49:42:
0e:b9:37:d4:ea:5a:ff:c2:cb:dc:74:0a:8e:e3:d5:
cf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FE:10:58:D2:D9:75:90:37:FD:8D:2E:BD:19:A1:8D:56:9E:FF:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/9bec768c-da8a-394a-9c6f-2cee7025dd7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
64.213.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:7b:bd:ed:d4:ec:20:f7:93:9b:a5:e4:e0:af:ec:4c:4c:dc:
91:f3:94:2a:f1:95:15:e5:e0:68:1c:62:62:88:84:b7:48:ae:
1c:c3:8a:63:54:56:7d:91:de:44:c3:75:08:0f:89:c2:e5:05:
ad:42:93:70:f5:0b:6f:cc:1c:51:fb:46:a5:85:b7:20:e6:6e:
df:36:b6:5a:7d:d2:95:e9:29:2d:2b:dd:2f:25:7b:20:82:f8:
f4:37:82:b8:18:1c:ab:f4:68:eb:35:47:6e:8c:18:b1:42:d2:
9a:a7:ed:59:80:b0:1e:ae:b0:18:c0:ab:da:23:b1:05:ed:81:
1f:96:88:25:d0:d9:8c:83:43:40:ac:6f:2b:96:49:71:20:57:
0a:b4:0c:7a:1c:b1:1d:e5:60:41:d7:1d:04:3c:a5:92:21:b8:
42:ab:5c:dd:8a:b1:c7:96:65:13:07:7e:04:b8:7f:93:39:3c:
f0:51:c4:8c:10:22:ab:78:24:9e:1a:5c:7a:df:a6:9b:6c:c5:
aa:91:a7:23:7d:c5:f4:ee:87:0e:d0:b7:2c:86:e9:03:62:77:
25:18:6f:2f:bd:34:36:e1:0d:7d:a2:e0:e7:b7:47:64:fc:9d:
12:d0:b0:e2:c4:a7:6c:a2:41:42:4b:b8:43:00:e2:9a:63:1b:
50:19:7e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:13:18 2025 by rpki-client