Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/65b1ad36-cbe9-3771-9c96-e700744e68f2.roa
File: 65b1ad36-cbe9-3771-9c96-e700744e68f2.roa (raw, json)
Hash identifier: ebxAjrQj0fB5nDfNfmfgYYvbtLPlLW0JTJaLxq81+k8=
Subject key identifier: F3:B4:C0:91:06:E2:71:2E:AF:4C:0E:AD:E5:7A:CA:DE:92:A8:53:88
Certificate issuer: /CN=a1e8ecad-d5af-414e-8573-f698bbb23263
Certificate serial: 010D0C9F432858487CEB33D1E72AE4C1DC6FEA00
Authority key identifier: FE:90:EE:79:8B:35:2E:08:3B:AE:AC:67:F0:01:CC:A7:C6:FB:07:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/65b1ad36-cbe9-3771-9c96-e700744e68f2.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 21902
IP address blocks: 64.110.16.0/21 maxlen: 21
108.163.68.0/22 maxlen: 22
216.189.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:33:d1:e7:2a:e4:c1:dc:6f:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1e8ecad-d5af-414e-8573-f698bbb23263
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=4dbe92ea-6d19-4906-85c4-3f4efeb1e9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0e:d0:55:eb:6e:8d:35:21:0b:04:cc:23:cf:
c5:79:c8:fa:60:3b:03:ac:51:fd:04:cf:80:9d:07:
0a:ad:dd:33:f7:86:16:c8:1b:27:02:03:7b:5c:8d:
78:eb:4c:98:89:7a:7f:b2:92:fb:41:c6:41:e7:87:
3f:c4:65:4d:ae:aa:66:d8:51:e0:a7:d9:78:56:1f:
16:a6:2a:1e:9b:ff:44:77:ba:33:85:d8:92:c2:1f:
75:51:69:35:88:9e:1a:4b:96:21:de:1f:18:80:d2:
79:7b:96:99:2d:79:06:a9:f3:56:1b:30:38:6f:16:
0a:1c:5c:38:38:b3:fc:97:a5:a9:d7:d4:c9:a7:22:
4b:e6:1b:2b:41:ac:7b:8d:d9:02:0e:5f:16:a5:05:
4c:82:35:40:56:e6:d5:ef:f8:2b:b9:90:bd:de:f8:
8a:9a:d0:53:87:4d:f5:16:52:b6:2b:a8:37:d8:c3:
46:d0:6d:ae:9a:fe:1f:75:27:c5:7d:cf:4e:3f:0c:
02:b2:f5:37:41:a6:03:50:eb:f9:eb:1c:49:b0:34:
8d:4c:c8:69:30:60:26:28:53:25:48:35:f4:bf:11:
1f:22:80:97:74:36:7e:25:25:aa:5f:6e:96:23:78:
71:f5:3f:97:c4:a7:b4:ea:ea:f3:47:a1:df:47:48:
35:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B4:C0:91:06:E2:71:2E:AF:4C:0E:AD:E5:7A:CA:DE:92:A8:53:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/65b1ad36-cbe9-3771-9c96-e700744e68f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.crl
X509v3 Authority Key Identifier:
keyid:FE:90:EE:79:8B:35:2E:08:3B:AE:AC:67:F0:01:CC:A7:C6:FB:07:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer
sbgp-ipAddrBlock: critical
IPv4:
64.110.16.0/21
108.163.68.0/22
216.189.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:e7:98:25:bc:93:fc:ed:23:4f:56:fc:5e:61:69:3d:30:2a:
44:07:ae:c6:84:24:41:26:42:6c:20:c1:bf:61:43:f0:f2:f1:
15:a6:c1:ef:1e:98:34:0d:20:94:8e:c4:1f:88:75:e1:a8:61:
58:d1:d2:2a:eb:9a:89:9c:ac:f5:f3:47:0b:2d:e5:33:6a:c5:
03:5c:5a:a6:c0:b5:ae:00:29:29:0a:be:da:fb:3e:49:3a:11:
7d:46:69:4f:0a:e0:63:1e:8c:01:71:c7:3a:d8:2a:84:e5:07:
dd:00:65:c0:7a:cf:05:55:e2:2d:d5:9e:b0:9f:32:40:7e:7a:
2e:71:a8:77:f1:38:8a:84:2c:54:64:85:b6:58:8e:6d:bc:bb:
5d:76:cc:d3:6b:9c:50:28:d7:23:4d:3a:a7:b2:59:89:32:9f:
62:55:ec:79:98:5b:be:5b:b5:66:0f:d4:19:e8:d2:59:ba:83:
91:8a:db:68:a3:68:71:01:97:1d:70:b7:2e:86:e8:40:59:61:
cf:65:b5:4e:ce:d2:5d:cd:52:c8:ac:3d:cd:17:06:c6:cd:17:
97:71:6b:75:f4:d5:78:c2:e5:41:19:2f:c0:9e:d3:63:d6:bc:
73:29:3f:f5:50:70:ef:e6:a0:43:55:c1:64:54:0b:8a:9c:60:
dd:ac:e6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:43:17 2025 by rpki-client