Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33d66f77-23e9-3fba-a372-f0a2d74a3921.roa
File: 33d66f77-23e9-3fba-a372-f0a2d74a3921.roa (raw, json)
Hash identifier: J7KykOXEvI6iPpQB4z0SRv00hwtvZGtbsGrTWsULVto=
Subject key identifier: 9B:D1:4F:D7:86:F4:49:92:1C:39:06:D9:95:83:4E:15:76:9C:C9:36
Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial: 010D0C9F4328584897708D2CF9581D447CCB7F80
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33d66f77-23e9-3fba-a372-f0a2d74a3921.roa
Signing time: Sun 19 Jan 2025 02:00:39 +0000
ROA not before: Sun 19 Jan 2025 02:00:39 +0000
ROA not after: Sat 19 Apr 2025 01:00:39 +0000
asID: 13768
IP address blocks: 64.227.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:97:70:8d:2c:f9:58:1d:44:7c:cb:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Validity
Not Before: Jan 19 02:00:39 2025 GMT
Not After : Apr 19 01:00:39 2025 GMT
Subject: CN=c2ec3b01-0382-4632-b40d-13a649f6dfa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:80:52:45:ee:3e:16:65:ae:31:eb:10:c7:91:
c1:f7:ad:73:26:af:63:b9:72:33:08:d4:32:42:37:
63:76:66:90:3a:ed:d3:08:46:d1:91:ed:cc:c3:ae:
21:2f:00:70:da:ca:83:c3:3b:6c:83:7d:ad:ef:ca:
8a:b1:63:13:8c:88:e2:44:55:a4:af:f7:93:0b:18:
5e:a5:2a:2e:d4:72:fb:5e:b7:4a:a5:3f:3e:ec:03:
c3:35:29:71:c9:28:11:2e:c9:e0:01:d6:bc:61:82:
af:cf:64:02:57:8b:83:5d:74:f0:3e:18:eb:80:c5:
9d:f9:56:12:a2:17:f7:74:80:ad:b9:05:3b:8f:45:
b4:2b:b9:79:15:31:5f:91:b0:1c:d0:a2:31:7f:fa:
4e:c1:55:d7:62:8b:1a:60:c6:72:84:68:b0:54:ee:
de:24:67:27:18:ce:cf:3a:4e:84:a3:e5:6f:5d:24:
59:4f:c3:1b:6a:ff:6c:d2:2b:20:41:bf:d9:d4:fb:
34:eb:0c:2c:4d:b7:51:e2:3a:4b:9a:4f:8e:8d:ec:
19:8c:13:42:1c:a3:d4:16:9d:b6:dd:e3:d7:56:66:
78:1d:c5:35:ff:e9:8d:4c:94:98:d4:69:04:e2:8a:
06:17:d4:5f:b4:6f:55:39:53:bf:12:17:d3:94:22:
c0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D1:4F:D7:86:F4:49:92:1C:39:06:D9:95:83:4E:15:76:9C:C9:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33d66f77-23e9-3fba-a372-f0a2d74a3921.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
X509v3 Authority Key Identifier:
keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
sbgp-ipAddrBlock: critical
IPv4:
64.227.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:2e:65:d7:7b:6b:08:6b:bc:ef:9e:5e:91:9c:a7:f7:aa:65:
5a:84:77:80:89:53:1e:2b:e8:4b:5d:6d:81:fd:3f:1b:31:8f:
5e:c4:ff:dc:35:1a:0a:fa:d4:0a:8b:12:06:06:4c:dc:99:31:
78:28:a8:aa:1c:95:2c:ba:08:33:a1:d7:72:34:42:10:a6:ce:
fc:c9:9f:85:dd:32:95:61:1b:af:d1:6d:64:f8:84:fe:08:6f:
d1:e6:85:fe:7e:80:6b:0c:9c:b5:f0:3c:82:58:6f:08:11:a9:
6f:f7:48:02:89:2d:ff:1b:4b:7d:27:37:c2:a9:2f:c9:d8:5f:
d4:9d:b0:cc:43:3b:1b:98:be:ea:d9:1a:56:b7:42:f7:ac:54:
e0:ce:d0:67:be:79:aa:82:1f:3b:74:71:30:ab:2c:0d:a3:6f:
27:73:52:d4:55:c9:b6:29:81:3c:a6:6e:0c:9b:34:50:66:ad:
27:04:26:9a:1a:2a:f7:16:6a:48:f9:a1:bb:01:c2:80:c5:c5:
3c:8a:88:4f:8d:8f:51:f8:ab:9f:47:9e:fc:cc:e5:89:fb:3f:
ae:33:4a:a0:e5:a6:57:e7:8d:5f:85:89:23:1e:04:3e:ba:8b:
83:f7:f5:1a:79:f3:8f:da:7c:f3:b6:fb:64:ff:87:64:45:b5:
a1:d5:ca:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:28:48 2025 by rpki-client