Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/75e13cac-3e49-3f00-80d3-c005db4df7e8.roa
File: 75e13cac-3e49-3f00-80d3-c005db4df7e8.roa (raw, json)
Hash identifier: 7ga7tOTBSYe1ob5JFFs81DQXUe+gCrbZfjJfSn8Tzx8=
Subject key identifier: 73:81:4B:8C:35:95:58:F4:0C:2C:E9:0B:94:BA:A7:2C:9A:86:F5:F9
Certificate issuer: /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial: 010D0C9F432858488815E7D5CC29EDF729343D80
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/75e13cac-3e49-3f00-80d3-c005db4df7e8.roa
Signing time: Mon 13 Jan 2025 14:00:52 +0000
ROA not before: Mon 13 Jan 2025 14:00:52 +0000
ROA not after: Sun 13 Apr 2025 13:00:52 +0000
asID: 32133
IP address blocks: 64.98.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:15:e7:d5:cc:29:ed:f7:29:34:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Validity
Not Before: Jan 13 14:00:52 2025 GMT
Not After : Apr 13 13:00:52 2025 GMT
Subject: CN=3fae43a2-43e2-4798-848c-0092dea2b479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2c:02:15:da:b9:2c:69:63:03:55:7e:c1:10:
de:25:c0:0a:e9:0b:d4:6a:ac:81:af:c7:26:90:d1:
08:df:26:98:15:46:61:ec:e3:a8:0b:31:8a:8a:d8:
2f:fa:8c:36:96:f0:0a:39:68:42:b0:64:6f:55:b0:
4e:6a:5b:40:52:0c:36:c3:c9:b4:79:64:5c:7a:d8:
1a:39:f7:e2:d4:a5:fb:97:cd:84:fb:15:c6:32:fc:
bb:85:26:84:4c:7e:e3:10:14:34:55:dc:90:ed:fb:
6c:02:16:af:b3:5a:ae:4e:9f:f4:21:4d:61:79:ac:
17:aa:aa:28:b1:2d:7a:11:76:ea:6d:bc:41:c3:15:
11:b7:0c:dd:28:60:b8:b8:c5:d0:84:8f:f8:c3:8a:
f6:6c:61:78:1e:3a:23:a5:e1:a7:c8:62:d3:c4:70:
65:4d:f5:aa:e4:9f:e7:e6:4e:81:60:71:d9:9c:a0:
fa:12:32:d9:6e:81:a9:b5:1f:a3:6c:ae:ea:6f:89:
53:a6:41:6d:7d:cd:61:13:e7:9b:90:d3:00:e0:86:
01:2f:0c:a0:e1:f8:1d:2b:f4:d7:8b:d8:42:08:e2:
d5:27:64:2b:3b:de:97:7d:68:c4:54:b2:6e:17:34:
47:c8:ad:15:43:a7:29:51:0f:ac:2d:a9:4c:76:e0:
d8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:81:4B:8C:35:95:58:F4:0C:2C:E9:0B:94:BA:A7:2C:9A:86:F5:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/75e13cac-3e49-3f00-80d3-c005db4df7e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
X509v3 Authority Key Identifier:
keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
sbgp-ipAddrBlock: critical
IPv4:
64.98.98.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:fb:af:1e:23:45:f2:f2:b4:aa:34:0e:ae:a1:91:74:37:35:
18:50:d8:8a:e7:5a:45:22:e2:1b:77:d0:b7:78:46:c3:18:6e:
f3:04:81:3a:bd:3d:0a:1c:66:86:b7:47:50:d8:f7:7d:0d:2c:
87:42:8d:ef:e7:65:36:cd:ec:72:d7:64:62:52:c6:83:86:c2:
23:fd:5c:b7:66:cf:f4:82:58:ea:cb:2b:36:47:7d:e3:f4:97:
97:f5:d4:2a:81:8a:3f:42:cf:5c:d8:dc:f5:db:9b:e2:0f:b5:
b8:f5:e2:07:d3:f3:08:ca:35:be:b0:be:78:a1:5f:37:73:e5:
03:b2:49:84:8f:b5:d1:f4:c8:77:55:f4:a9:84:cb:00:f9:f5:
95:a5:d0:a8:0e:cf:10:73:a1:ac:8f:c4:54:eb:77:57:6e:79:
41:ef:c3:c7:50:6e:6f:df:7c:6c:b0:e3:7a:05:7f:e5:23:9f:
18:57:a4:f8:fe:95:99:4a:1d:51:ad:0e:83:79:b7:68:86:44:
e3:95:f9:f4:2c:c7:c3:28:fe:be:ec:f9:4e:83:5d:2a:3e:46:
88:03:25:ef:02:57:d9:9e:27:53:3f:70:fa:da:c1:36:09:8e:
e6:d9:0b:e8:09:8b:bd:d2:b0:b0:6a:e9:ab:63:7b:e7:7f:30:
bd:c4:ba:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:15:01 2025 by rpki-client