Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/4df6fcae-809c-334c-948c-a1db49d80779.roa
File: 4df6fcae-809c-334c-948c-a1db49d80779.roa (raw, json)
Hash identifier: IvAGqfusQH7tPZ3x6gOgfYHGWoZxudZCK4HSZAwJbq8=
Subject key identifier: 57:94:5B:99:09:87:52:BE:AE:19:A0:BF:85:AF:B5:F2:EF:54:90:AC
Certificate issuer: /CN=60af319e-0c74-40e2-b93c-daa51c45791e
Certificate serial: 010D0C9F4328584878BB0396EA715EBE189BDD00
Authority key identifier: 11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/4df6fcae-809c-334c-948c-a1db49d80779.roa
Signing time: Wed 08 Jan 2025 02:00:39 +0000
ROA not before: Wed 08 Jan 2025 02:00:39 +0000
ROA not after: Tue 08 Apr 2025 01:00:39 +0000
asID: 62952
IP address blocks: 172.82.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:78:bb:03:96:ea:71:5e:be:18:9b:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60af319e-0c74-40e2-b93c-daa51c45791e
Validity
Not Before: Jan 8 02:00:39 2025 GMT
Not After : Apr 8 01:00:39 2025 GMT
Subject: CN=8194f452-7545-4e49-ab7b-f603e7ef163b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:18:a3:d8:78:31:6d:2c:45:c3:ac:f4:e4:da:
05:64:3f:6a:82:73:c5:ae:fb:ee:ab:d0:6a:80:aa:
0b:b7:7a:4f:de:ee:19:42:bf:ef:f0:1a:9e:5f:4e:
88:d2:5b:e3:3b:f2:91:59:6c:a5:b6:3d:14:14:1c:
88:f4:74:0c:b6:c3:d0:84:b4:ee:f6:8e:22:83:0d:
00:48:bf:da:17:aa:ce:22:59:3e:8d:5d:cc:45:39:
7f:d6:ae:0f:32:fe:65:f5:2f:ff:cf:04:3f:fb:55:
5b:2b:83:92:c5:18:34:86:49:bc:ea:01:ed:42:3f:
8c:0b:21:3d:9b:71:43:46:64:f0:36:28:91:8b:99:
35:d1:08:cd:59:ef:f0:82:68:0c:86:28:5e:96:25:
70:19:cf:77:80:12:98:5d:7c:0d:bf:89:9f:3b:50:
00:80:e8:48:d1:d5:e6:f7:04:22:f8:0d:55:e6:af:
66:80:cd:9d:82:06:3e:4b:59:ed:6a:fe:5d:0f:57:
e7:a5:47:61:58:55:ef:28:9d:28:4f:5c:6d:25:78:
71:7b:08:be:f7:dc:cf:a5:a9:70:2c:74:47:dc:ad:
dd:cf:ce:f7:6b:34:11:f7:b7:6a:47:98:d7:1f:77:
3a:84:30:88:13:7a:5d:7c:28:48:0e:f0:14:9e:31:
1d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:94:5B:99:09:87:52:BE:AE:19:A0:BF:85:AF:B5:F2:EF:54:90:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/4df6fcae-809c-334c-948c-a1db49d80779.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl
X509v3 Authority Key Identifier:
keyid:11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer
sbgp-ipAddrBlock: critical
IPv4:
172.82.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:22:d6:a9:29:8d:2d:b8:73:57:cd:42:06:18:aa:36:ab:55:
9b:25:88:65:86:6b:9a:3c:99:66:67:b9:13:f9:b1:49:e6:8a:
9b:a7:0d:95:9a:68:93:7e:df:54:f5:f9:ea:bf:44:e6:9b:df:
05:00:8d:57:6b:1c:34:3d:98:96:b4:e6:ae:73:63:82:15:ed:
dd:c4:c0:e5:a7:38:a9:f4:f8:fd:82:5d:9b:41:98:84:dd:a3:
7b:a6:23:28:7a:7f:8d:4b:da:27:e5:ef:72:49:9d:8e:a7:c9:
ed:20:5c:af:54:76:22:2c:b4:27:05:19:35:f8:8f:3e:a3:a6:
ef:89:6e:bf:7b:92:17:b3:99:31:83:5d:ea:1a:85:98:92:33:
b6:c6:c0:3d:8d:d0:ec:53:14:24:f6:6e:a2:82:69:bf:2f:56:
e6:8b:63:e0:f4:4c:5c:90:33:e2:e1:0b:44:95:7e:9a:1b:e9:
fe:6e:ea:b6:5c:d6:db:3d:4e:94:e2:05:64:d9:f1:2b:08:4a:
50:3c:b1:1f:c5:87:1a:cf:7c:f9:5c:57:d6:51:5e:d7:7f:96:
fa:62:60:78:85:67:bf:54:ae:b5:c2:3f:01:63:74:74:13:a9:
5a:c8:f6:54:b4:e6:8d:67:da:a9:ca:60:c6:fd:f9:e3:4f:6e:
02:7b:d7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:13:20 2025 by rpki-client