Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/e90997aa-9441-3fdb-86ea-2b02d2fd3271.roa
File: e90997aa-9441-3fdb-86ea-2b02d2fd3271.roa (raw, json)
Hash identifier: Vj6uJ2/DAMdSmkovW32VC/PCKh3NMIlaLESirX9vNcI=
Subject key identifier: 31:E2:26:12:5B:15:50:68:07:70:A3:BB:60:1F:19:6E:9A:05:1C:7C
Certificate issuer: /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial: 010D0C9F432858488815E91744DB016DB054B700
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/e90997aa-9441-3fdb-86ea-2b02d2fd3271.roa
Signing time: Mon 13 Jan 2025 14:00:52 +0000
ROA not before: Mon 13 Jan 2025 14:00:52 +0000
ROA not after: Sun 13 Apr 2025 13:00:52 +0000
asID: 32133
IP address blocks: 64.98.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:15:e9:17:44:db:01:6d:b0:54:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Validity
Not Before: Jan 13 14:00:52 2025 GMT
Not After : Apr 13 13:00:52 2025 GMT
Subject: CN=71f07913-4fd1-4d00-88a5-ee6a06dd2660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:35:a4:e3:c6:f6:a5:76:13:22:2a:c2:43:73:
54:6d:9c:eb:75:35:fc:b6:bd:b2:4d:6c:6a:9b:33:
2c:90:c8:cc:86:6d:14:39:f7:a7:26:73:c7:81:33:
aa:35:9f:86:d2:3d:36:f4:6f:52:9b:65:6b:b3:a2:
04:48:90:eb:a4:62:15:a5:0d:46:64:15:e2:e4:c4:
a4:78:b7:e5:3f:6b:56:de:08:56:13:b7:3b:ad:07:
72:ed:ba:fb:c0:a1:29:49:4f:a6:78:0e:8f:83:0b:
d9:03:f7:1c:76:12:8b:77:5e:33:c9:9b:72:97:fd:
0d:1f:7a:88:a7:37:ac:6d:a3:cc:83:83:f7:b5:af:
af:5b:f1:b1:d1:4a:55:13:a7:d7:05:07:21:6b:32:
8d:fb:08:96:51:23:42:02:56:d0:c2:40:75:86:e8:
33:ce:b3:d0:45:0e:50:cd:66:03:6f:0a:b2:98:7e:
4f:76:b6:ef:e0:01:89:fb:c4:bf:38:ea:93:21:7d:
86:3e:67:4c:5d:bd:bd:fc:7d:33:c8:c9:0a:d6:c8:
ba:70:71:ae:d2:89:50:ec:87:70:f7:22:1d:de:26:
ad:a9:41:cc:69:11:5a:85:ed:55:af:2b:d6:6d:67:
c1:61:ba:19:68:ac:a5:bb:75:fc:0c:83:ea:42:e9:
df:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E2:26:12:5B:15:50:68:07:70:A3:BB:60:1F:19:6E:9A:05:1C:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/e90997aa-9441-3fdb-86ea-2b02d2fd3271.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
X509v3 Authority Key Identifier:
keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
sbgp-ipAddrBlock: critical
IPv4:
64.98.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:96:2b:22:17:8d:a7:18:01:68:f0:d7:1c:cc:e7:95:4f:d4:
f3:2f:ca:a2:8d:f1:94:3c:a4:9d:48:c0:53:e3:d7:e5:7d:30:
fc:d4:cd:9f:90:f9:f1:ea:31:e5:b8:06:4f:cf:32:05:38:4a:
ac:3c:0f:db:db:19:ac:3f:e3:dd:e2:9b:ff:8e:3a:a7:89:e4:
c0:79:c9:85:cf:67:9f:e6:61:69:a0:0a:d8:13:c5:06:be:c6:
6d:2a:b8:c6:52:9d:3d:22:8b:03:16:5d:a3:3a:f1:bd:4b:49:
9e:a0:7c:ee:2e:5b:4f:02:0c:93:02:dd:33:a6:aa:ba:64:ab:
6b:76:51:36:33:ab:34:3a:11:e1:43:f5:cc:09:06:5a:b9:35:
05:05:5f:ef:a0:e3:a3:6a:08:a3:ea:8a:a4:ee:d1:6f:89:47:
bd:3a:b2:12:6e:e8:0b:b7:26:28:9a:e0:a2:af:26:66:70:4e:
a8:8c:5f:56:59:3f:6b:cb:92:eb:44:a7:4b:69:cb:ee:fb:1c:
34:77:e0:02:f9:e7:8e:e0:0c:fe:ad:67:e9:65:f2:4e:ce:a5:
71:a9:f9:d2:a7:9d:53:6a:9d:ac:8a:ad:a3:db:3b:13:e7:ec:
b8:e3:15:29:b6:cc:dc:f3:37:2e:b8:15:58:b8:69:19:ab:a5:
6f:05:3a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:41:51 2025 by rpki-client