Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e/43763c7f-21a8-34a3-a77c-63042ab10e40.roa
File: 43763c7f-21a8-34a3-a77c-63042ab10e40.roa (raw, json)
Hash identifier: 3a7G14czbFrlLzt9CZPkhPJ7UTchNBfPXSnRWVfS+N4=
Subject key identifier: 36:22:77:96:28:6F:C5:3F:CA:72:FA:15:83:F5:1C:CE:B8:01:C5:FA
Certificate issuer: /CN=1e1775ba-ce9e-4791-8e12-e05afbb9713e
Certificate serial: 010D0C9F432858486695BBFD00D2E283B7D7A500
Authority key identifier: DD:A2:87:E5:BF:D3:2F:D1:0F:AC:E8:2C:49:1E:FA:B1:2E:C7:82:FD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e/43763c7f-21a8-34a3-a77c-63042ab10e40.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 27372
IP address blocks: 64.250.144.0/20 maxlen: 22
2607:5006::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:bb:fd:00:d2:e2:83:b7:d7:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e1775ba-ce9e-4791-8e12-e05afbb9713e
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=fb2176ba-0fd9-4ddc-970e-50c5b93399a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d5:f5:e7:b2:69:e7:22:f8:1c:ea:ec:1a:7b:
a2:f7:c0:f9:31:08:21:65:23:58:fc:43:05:c3:76:
97:07:6d:9a:71:29:30:75:71:22:9e:91:d8:0e:2f:
da:5e:e7:45:92:74:ab:ca:2c:55:aa:d3:17:25:e3:
06:c2:67:93:f8:fb:a3:9b:49:6d:ad:c5:a1:ab:cc:
ef:3a:32:af:e3:c6:06:12:1b:21:66:c1:84:e1:d6:
72:25:90:30:94:21:1f:a3:d4:3c:bb:cd:17:ef:d4:
dd:8d:09:1a:a1:5d:bd:50:c7:95:44:83:8e:22:f0:
77:eb:0f:e4:1a:83:b6:2c:87:28:eb:04:78:e1:14:
4e:b5:80:f5:93:88:92:3e:8f:d2:66:3b:57:3e:1f:
39:37:6f:70:b5:c0:07:35:f8:33:af:42:a3:67:a0:
7d:c4:32:81:0e:11:a6:b2:e6:c7:0c:64:7c:5c:1a:
b8:6f:af:ee:f0:2e:59:fe:4e:4f:41:eb:4b:e0:b5:
42:47:d0:cc:4e:d2:0d:da:c4:17:1e:80:ed:31:20:
db:79:39:16:30:89:5e:d1:78:10:6f:b1:fb:a0:27:
92:59:1f:69:3b:3a:48:5d:4b:b2:e3:cf:13:67:4e:
7a:d5:86:33:be:73:b2:77:98:5e:6c:19:a1:0b:42:
97:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:22:77:96:28:6F:C5:3F:CA:72:FA:15:83:F5:1C:CE:B8:01:C5:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e/43763c7f-21a8-34a3-a77c-63042ab10e40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e/1e1775ba-ce9e-4791-8e12-e05afbb9713e.crl
X509v3 Authority Key Identifier:
keyid:DD:A2:87:E5:BF:D3:2F:D1:0F:AC:E8:2C:49:1E:FA:B1:2E:C7:82:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e1775ba-ce9e-4791-8e12-e05afbb9713e.cer
sbgp-ipAddrBlock: critical
IPv4:
64.250.144.0/20
IPv6:
2607:5006::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:bc:78:e1:54:d4:2b:06:79:03:9c:74:cd:df:06:8b:53:1f:
a7:17:e7:0a:35:1d:f1:63:fa:27:12:c1:cc:ec:00:a4:84:77:
c0:a6:58:4f:6f:a2:81:a9:2f:3f:3d:2f:6d:6c:21:07:58:f6:
9c:22:15:9f:22:bc:f2:19:13:9d:9a:24:00:a5:0e:cc:c0:76:
e5:9c:75:1c:77:f6:f2:70:30:db:0f:82:3a:ee:e0:08:c3:20:
d6:cf:80:16:7f:9c:73:93:1e:5b:29:64:7a:40:0a:bf:10:e7:
4d:95:0e:ce:39:f3:31:f1:41:15:0c:e9:7f:26:b8:ec:42:a4:
0c:04:f9:7a:e3:99:bf:d4:c5:9e:ea:d7:be:de:dc:ad:2c:f6:
a1:6e:02:0a:53:4b:f7:15:b7:0f:cf:31:d4:92:ea:78:c8:69:
b0:08:a3:da:51:69:03:41:7e:fd:1a:9a:c7:b0:81:98:de:f1:
cd:7d:2f:90:35:6c:56:01:c2:4c:a7:ef:b4:92:06:84:27:5b:
d0:8a:e0:77:60:99:d2:26:37:48:4b:0b:be:fc:ba:2a:ba:df:
d0:ef:0e:2c:4c:6a:b2:bd:cb:55:da:05:92:72:2e:43:58:3f:
54:31:3d:96:dc:a8:b6:5c:e9:9a:2b:86:0d:35:8f:a3:29:00:
c0:43:8d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:12:16 2025 by rpki-client