Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/29a3c843-7335-3c62-b072-fc83d998005e.roa
File: 29a3c843-7335-3c62-b072-fc83d998005e.roa (raw, json)
Hash identifier: SIN53P6+PA1s/ibvsgZQKVCgHHH+VYa2H6bUGl+KPXY=
Subject key identifier: F4:6C:C1:C2:11:39:89:51:BE:B4:D3:33:29:3B:87:33:40:07:23:21
Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial: 010D0C9F43285848A29B5179A1DF500CAC8A1380
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/29a3c843-7335-3c62-b072-fc83d998005e.roa
Signing time: Thu 23 Jan 2025 02:00:40 +0000
ROA not before: Thu 23 Jan 2025 02:00:40 +0000
ROA not after: Wed 23 Apr 2025 01:00:40 +0000
asID: 13768
IP address blocks: 65.39.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:9b:51:79:a1:df:50:0c:ac:8a:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Validity
Not Before: Jan 23 02:00:40 2025 GMT
Not After : Apr 23 01:00:40 2025 GMT
Subject: CN=4d16ac56-4b34-420c-b496-6b38097f0b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c9:cf:12:15:70:72:74:37:24:10:da:5f:c4:
11:68:05:08:a2:5b:cf:ad:7c:d4:df:a1:37:ee:9b:
a7:48:a4:02:e6:06:d1:21:d8:30:8b:25:a2:73:f2:
0c:c8:66:4b:20:54:ce:e2:60:71:8a:4c:3d:ac:9c:
62:a9:46:c0:25:ae:80:50:13:60:b9:20:db:ea:47:
de:a7:63:46:90:ba:8b:69:0b:34:6d:41:1e:d9:7e:
d7:64:30:57:5b:a1:62:65:8e:0a:6b:67:f2:bd:f8:
82:33:49:e5:e0:b0:ed:99:6d:79:42:cb:00:a5:c2:
f2:2b:54:f4:55:17:8b:8b:ca:19:cb:50:12:23:31:
f0:70:ce:f5:8c:12:de:65:b0:34:8a:00:3a:21:b2:
51:d6:00:2a:2c:76:58:81:56:ca:cf:4d:5a:2a:ef:
01:e3:a6:39:83:e2:37:33:3d:dc:c4:22:80:7f:df:
b9:bc:a5:e1:a0:4a:bf:07:cb:55:af:a9:50:c9:f3:
dd:7a:d0:5b:6d:4e:35:39:b8:b1:9c:2c:fb:aa:0e:
d4:b9:8a:85:49:06:ab:fd:ae:ff:68:53:f5:51:ec:
4e:2a:1c:40:f5:f9:9b:c2:53:91:02:52:b2:73:83:
34:c4:f2:3f:c7:5f:2b:4f:1e:02:84:14:32:30:c3:
80:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6C:C1:C2:11:39:89:51:BE:B4:D3:33:29:3B:87:33:40:07:23:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/29a3c843-7335-3c62-b072-fc83d998005e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
X509v3 Authority Key Identifier:
keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
sbgp-ipAddrBlock: critical
IPv4:
65.39.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:f3:1c:77:7b:4d:ce:65:20:76:02:dc:9b:0b:6b:ae:a2:58:
ff:57:c2:39:02:1d:b5:d0:ee:c5:9e:1b:97:83:3a:2b:2c:ca:
d3:45:0f:e3:b8:cd:83:91:75:4e:2a:29:10:bd:0e:ae:2c:f0:
8d:57:6e:41:f4:fb:55:f8:04:fe:19:c4:e9:10:49:29:bf:3c:
f2:0f:6b:7b:d6:9c:56:bd:09:56:95:4e:47:63:10:e9:30:f9:
ce:b4:6e:ea:18:e7:c7:2a:89:65:e5:48:cf:84:bc:9b:57:64:
24:e0:4e:1a:38:01:62:93:6a:f0:2b:b8:13:2b:7e:55:77:13:
de:db:c8:55:18:80:0c:c8:bd:ec:3c:ab:47:7f:38:84:d8:32:
ed:43:f6:62:1f:d0:9a:61:02:98:42:4f:ed:25:84:f0:92:0c:
e5:ee:6f:28:41:0d:45:02:a2:27:f1:7b:44:95:31:f4:6a:08:
0c:3a:e4:38:43:cd:9b:55:c9:3a:5c:36:4f:a2:c8:c2:6b:e9:
d8:4c:b4:b4:32:3d:43:3a:a0:f4:21:55:0f:95:dc:81:6e:b1:
7e:08:cb:8d:79:51:99:67:4d:cc:a7:c5:ef:b4:ce:2f:20:a3:
d4:a4:2e:8a:90:13:4b:e6:c8:58:95:a2:4c:fb:4a:74:03:a4:
3c:41:a6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:00:04 2025 by rpki-client