Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/3aed086a-aa65-3eac-93fe-dd3de7053d48.roa
File: 3aed086a-aa65-3eac-93fe-dd3de7053d48.roa (raw, json)
Hash identifier: 0ILJhXDSfX9UZqwpOk2MTQA7eIx45iStC2hahRmCRp8=
Subject key identifier: 73:D3:A1:6D:AF:06:AB:9A:AE:64:A7:50:8C:1A:29:B4:E2:AB:76:80
Certificate issuer: /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial: 010D0C9F432858488815E7661BAFCBA72F1F35C0
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/3aed086a-aa65-3eac-93fe-dd3de7053d48.roa
Signing time: Mon 13 Jan 2025 14:00:52 +0000
ROA not before: Mon 13 Jan 2025 14:00:52 +0000
ROA not after: Sun 13 Apr 2025 13:00:52 +0000
asID: 22070
IP address blocks: 64.99.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:15:e7:66:1b:af:cb:a7:2f:1f:35:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Validity
Not Before: Jan 13 14:00:52 2025 GMT
Not After : Apr 13 13:00:52 2025 GMT
Subject: CN=58c2579f-d4d2-4864-9d06-5ed82c66ac67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:72:6b:e0:4e:b4:07:68:ac:97:2c:82:8f:e7:
c0:06:fe:a5:a0:a1:41:56:44:2d:b6:b4:6b:09:ad:
00:ba:46:c4:a1:2c:00:e5:e1:0d:3c:1e:d7:15:1f:
b0:d4:79:7b:fc:41:e9:31:2a:d1:74:cb:92:d6:0d:
0e:a3:ce:6e:13:5b:8e:81:47:f6:aa:0b:f3:77:c8:
18:a0:77:11:51:00:2b:98:10:85:70:f1:17:59:80:
d4:fd:20:be:6a:19:20:46:7f:86:f4:ab:3d:0e:d4:
7f:78:61:7e:7d:b5:70:83:01:1b:ed:a8:64:f6:36:
e7:d5:01:82:b9:1a:e8:50:05:68:55:48:f8:56:d2:
38:47:6c:1a:10:ea:e1:c9:f1:ba:36:14:78:f8:12:
6e:ac:0e:68:dc:bc:4b:42:93:27:94:79:da:0b:f1:
7b:d8:12:f6:55:da:3b:99:04:79:a5:f7:75:bf:2e:
32:96:1f:29:5d:3f:62:64:37:27:51:89:d8:27:8b:
49:3e:a0:c1:1b:37:63:3a:36:17:37:f2:bd:b5:c2:
b2:ed:eb:e0:b2:9a:17:bf:d2:b1:17:ef:db:8d:6a:
fc:35:1c:ef:02:dd:f1:9a:cf:3c:49:f1:96:e4:09:
4f:08:64:6f:47:65:85:e3:21:32:a6:cb:df:e5:3a:
ec:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D3:A1:6D:AF:06:AB:9A:AE:64:A7:50:8C:1A:29:B4:E2:AB:76:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/3aed086a-aa65-3eac-93fe-dd3de7053d48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
X509v3 Authority Key Identifier:
keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
sbgp-ipAddrBlock: critical
IPv4:
64.99.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:80:1c:8a:ae:ea:12:42:c4:2c:07:dd:56:e0:fa:b8:10:3f:
df:77:08:5a:01:2f:81:1e:b6:cf:4f:90:0f:3f:3c:b3:ee:86:
62:f4:68:33:c4:cc:74:50:3e:89:f6:67:1f:0b:19:71:ce:f2:
97:50:23:db:18:73:5f:d1:76:97:e0:83:df:ce:dc:7c:7f:d9:
22:60:b5:e5:78:92:80:6a:8d:24:43:f4:46:b7:d2:5d:44:6d:
55:20:13:04:02:dc:dd:0c:b7:54:7f:33:52:18:3b:f7:6a:3b:
99:93:b2:83:1d:28:97:ee:12:8e:c6:fc:7f:bf:21:53:59:be:
ca:f9:5f:ba:ec:6e:22:a0:2c:a6:08:a5:03:c3:c7:72:ff:fb:
86:68:1d:70:ae:67:96:f0:88:c5:b9:9b:3e:fa:c1:ea:97:b7:
e7:65:71:6e:13:4c:ce:3c:8c:62:78:6d:fe:c6:cd:c0:71:79:
c8:b8:95:47:4f:20:88:f9:4c:a2:13:0f:23:6b:8f:2e:a1:82:
15:d6:0a:06:4a:ba:de:b1:9a:c0:f1:78:34:45:d5:1b:d8:7d:
1e:4f:18:2c:6c:9f:0b:5c:8e:68:84:b8:ae:d2:75:7d:6a:60:
72:48:41:0f:39:a3:dd:c6:bb:77:ea:9e:cb:96:87:c2:bd:7c:
95:ee:f9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:46:33 2025 by rpki-client