Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/0c81b412-1728-3c09-a57f-f32ba7256940.roa
File: 0c81b412-1728-3c09-a57f-f32ba7256940.roa (raw, json)
Hash identifier: JKaQpNCJNeGmj+UFFtaV/XFAOOS6iBtuXbd/dwVDw2Q=
Subject key identifier: 8C:68:03:0C:82:F0:4A:37:CF:AB:7F:14:C9:AC:81:DE:88:1A:D8:49
Certificate issuer: /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial: 010D0C9F432858487FB5D854EDB03656F5AC4E00
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/0c81b412-1728-3c09-a57f-f32ba7256940.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 32133
IP address blocks: 64.99.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:d8:54:ed:b0:36:56:f5:ac:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=c1e7c9ba-b34b-460a-b0e4-e2fa3424e0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6f:d0:52:c9:91:57:6a:a3:48:72:38:fb:e2:
05:cf:4d:42:87:53:75:35:36:07:94:32:09:08:9f:
eb:36:a2:a8:5f:67:0c:87:df:7a:51:a3:3f:5c:2b:
41:f8:c9:46:74:f1:70:de:5a:31:2b:a3:99:11:21:
58:bf:79:bd:8c:ea:ec:10:71:e3:e3:34:55:15:70:
fb:ab:76:60:9c:f8:4f:83:1d:ab:f3:f1:73:dd:cd:
8e:24:79:cc:64:06:65:66:57:4e:e8:e3:f8:44:b0:
3d:2e:52:c5:3a:6e:23:2b:c2:8f:18:ed:8f:6f:93:
37:b7:c8:13:61:b1:99:6d:de:d8:76:75:bd:d1:9f:
25:3e:26:fe:98:de:d9:d6:91:99:72:f7:be:54:de:
e1:30:e7:26:e9:b4:8e:8b:65:a8:83:03:d0:77:1d:
ca:2d:2b:3c:66:cc:a9:1f:40:71:c5:5e:f7:21:91:
66:3b:64:59:01:fc:4a:09:d8:d7:48:e0:3f:cb:61:
37:a0:00:b8:02:f2:80:45:5f:5e:1f:89:27:4b:8a:
ff:7f:5a:5b:c4:78:91:ae:a2:53:c3:8c:ac:59:ff:
ed:28:81:2a:a8:e2:4f:c1:90:f0:7c:b2:0b:64:2a:
1a:f8:e5:4a:b7:3e:b9:d6:cf:dd:f6:e3:2d:12:67:
a1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:68:03:0C:82:F0:4A:37:CF:AB:7F:14:C9:AC:81:DE:88:1A:D8:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/0c81b412-1728-3c09-a57f-f32ba7256940.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
X509v3 Authority Key Identifier:
keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
sbgp-ipAddrBlock: critical
IPv4:
64.99.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:1f:2d:86:f5:76:55:17:35:f8:1a:1d:36:e1:84:7d:2d:86:
7c:1c:aa:0d:1a:43:43:b4:8e:22:74:42:34:70:d5:1a:75:13:
b9:04:4c:21:a6:08:17:b2:85:ce:2c:b4:99:b5:ec:b8:18:2d:
4e:4d:e3:18:e5:5f:b9:ea:d4:d4:63:88:6d:68:74:03:d6:9a:
da:02:7a:43:1f:95:9e:b4:2f:d1:a5:28:36:2e:de:49:4e:a8:
43:6e:51:d3:b8:04:9f:34:f1:8a:71:da:07:4d:3b:ce:74:92:
00:16:e7:1e:3b:66:6a:80:e4:69:42:9d:30:1f:52:f1:00:04:
1c:aa:f0:46:b4:ca:23:b1:dc:80:2e:26:ac:76:eb:7d:27:94:
95:a5:55:57:cd:6b:74:cf:dc:49:31:9a:7b:a9:a2:6b:51:dd:
df:ee:2f:f1:ad:b6:71:12:0f:b5:dc:08:54:25:b8:09:9d:00:
38:ec:0d:f6:c0:b6:91:db:1c:dd:ad:28:12:83:d4:13:82:77:
85:8b:5c:86:91:b1:6c:b4:aa:e4:bb:da:69:91:34:f3:ff:12:
37:4d:53:7a:97:94:5b:c0:a1:e3:f0:b7:e6:a6:66:7b:6f:e7:
59:2e:93:f6:ce:94:80:2b:f2:3b:d5:79:ed:0e:22:b3:9e:30:
85:eb:12:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:40:59 2025 by rpki-client