Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/2f809b7b-f911-3964-a13f-d283caa3fbbc.roa
File: 2f809b7b-f911-3964-a13f-d283caa3fbbc.roa (raw, json)
Hash identifier: Z9gDlNeQchdLhInBR3Qlu8rEwzogXDuL4YrtkLM4ITY=
Subject key identifier: C0:3A:34:33:76:F8:87:B3:6B:47:B1:10:E1:39:78:29:4F:CE:E4:CD
Certificate issuer: /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial: 010D0C9F4328584882808CA36FF27D1E3D4C0A80
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/2f809b7b-f911-3964-a13f-d283caa3fbbc.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 32133
IP address blocks: 64.98.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:8c:a3:6f:f2:7d:1e:3d:4c:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=c902fe25-6140-49aa-af34-f2e35f732624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ed:e9:0a:7a:88:f6:da:f4:e4:c8:e4:49:ed:
4f:7b:c9:0a:ff:59:08:60:75:4f:19:46:b6:88:dd:
c5:30:0c:b3:d8:5b:c8:b4:32:33:5d:5d:37:72:9e:
83:db:a3:57:14:fc:4d:b0:16:54:43:54:90:8c:83:
5f:95:d6:46:7a:66:70:b4:5e:83:61:c5:30:9f:94:
42:eb:d8:1a:64:65:2f:c8:55:22:05:65:11:3e:3b:
36:e3:64:db:d6:1e:a2:56:65:f2:7a:5f:be:f2:cf:
2e:03:79:08:f7:72:1a:26:0a:24:ff:12:6e:47:1c:
47:99:63:55:a7:68:5e:e0:bc:9c:9f:3b:12:94:71:
3d:49:2d:b2:f2:86:c1:57:fb:0d:3e:9d:c6:14:e5:
83:ce:23:61:40:8a:c4:b2:aa:91:a7:de:81:79:98:
09:eb:74:b5:36:c1:22:a5:fe:e7:fd:94:da:09:4b:
65:6d:3d:d8:fc:05:b3:3f:24:b8:88:ec:ef:0c:57:
7f:43:c8:bd:c3:7f:10:2f:2f:e7:e8:33:95:6f:31:
ae:15:b5:19:67:b0:b4:47:30:4c:99:25:8c:c4:3f:
5c:5c:a3:a2:c9:4f:ea:5d:d0:10:f0:32:3f:cd:cf:
e6:8c:ac:70:76:b7:93:ed:af:3d:a3:e9:d2:45:f1:
50:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3A:34:33:76:F8:87:B3:6B:47:B1:10:E1:39:78:29:4F:CE:E4:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/2f809b7b-f911-3964-a13f-d283caa3fbbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
X509v3 Authority Key Identifier:
keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
sbgp-ipAddrBlock: critical
IPv4:
64.98.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:67:11:cd:a2:f1:ae:08:37:62:f5:37:8d:e6:dd:00:60:2f:
bf:46:2f:80:ff:f8:00:a0:0c:8a:47:ad:36:43:30:3d:9c:8a:
27:36:a9:61:21:b6:3d:91:86:d4:e5:7f:bd:48:e8:32:42:97:
2c:4a:05:5e:f6:77:40:41:c0:22:9c:e6:6a:33:73:93:09:11:
23:5d:e2:0a:de:5b:7a:4c:3d:96:9e:d5:9b:9a:43:6b:39:8f:
6c:87:83:fe:22:dc:ed:3c:69:d0:f3:fb:6d:1c:11:c7:11:f9:
57:56:43:89:71:dd:95:4c:be:e4:d3:77:6c:4d:05:12:62:45:
20:67:7f:98:fb:6b:52:95:0a:b2:35:3b:4c:47:be:dc:c7:66:
13:2b:41:a7:80:59:f7:e0:5a:a7:fe:67:c8:bb:09:77:fa:c7:
e7:2d:4d:f9:59:10:4c:41:d1:4a:bb:22:d2:ff:5a:d9:9d:00:
8b:80:e8:7e:1e:be:9a:5e:c5:80:0a:c4:cc:f5:db:a7:3a:1d:
ea:9e:71:15:72:fc:33:09:11:0c:44:9f:34:b6:8b:98:6c:dd:
a4:12:97:9f:3c:37:77:bc:89:d0:97:c7:30:32:5e:f2:6b:c5:
33:c2:7f:37:2c:75:9a:80:0e:e0:cb:88:ed:6b:c6:5f:6f:78:
65:8d:37:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:40:59 2025 by rpki-client