Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/d0192a55-432f-3594-81cd-d16e7579e4e8.roa
File: d0192a55-432f-3594-81cd-d16e7579e4e8.roa (raw, json)
Hash identifier: VKcuv9n97m54nTairXzc/QDJziUkJKJCt87W9vZW2fI=
Subject key identifier: A1:B0:46:79:27:BC:DD:7A:A5:9A:4A:4A:C4:1F:AD:7E:83:5F:08:F1
Certificate issuer: /CN=378928e8-c134-40aa-9858-3838053cbbe9
Certificate serial: 010D0C9F432858486695BBAC35BB00F96D021240
Authority key identifier: 05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/d0192a55-432f-3594-81cd-d16e7579e4e8.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 12261
IP address blocks: 64.253.208.0/22 maxlen: 22
64.253.212.0/22 maxlen: 22
64.253.216.0/22 maxlen: 23
64.253.220.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:bb:ac:35:bb:00:f9:6d:02:12:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=378928e8-c134-40aa-9858-3838053cbbe9
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=64b9ecf7-b2ac-45d0-b9a3-9c675aeff01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:95:63:39:8c:d2:e9:2e:0d:f7:5b:72:b9:1a:
9c:d6:2b:f4:fa:7c:fc:4c:66:db:22:10:18:00:6a:
e4:a7:0a:87:00:aa:74:88:db:70:ba:d6:fc:41:f7:
af:17:3b:46:e7:66:56:a6:be:3e:de:52:aa:18:8f:
16:1e:2f:b5:62:e5:18:e8:ff:04:8e:6c:4a:3c:a9:
93:90:be:c7:01:ca:25:5d:1d:bb:f9:c8:e5:38:28:
2d:ea:d1:e1:9b:75:d3:83:fc:59:7c:46:d6:b0:27:
36:d8:dc:42:c6:b3:ab:b1:c8:c5:e2:7b:60:bb:a5:
10:69:c9:2a:ed:6a:58:8b:f7:4a:34:0a:16:4e:a6:
9b:2c:5e:c9:06:29:94:fe:25:35:22:44:8e:59:48:
fb:64:99:6f:07:b7:62:6c:88:73:26:39:d9:d0:30:
38:83:ce:92:65:59:76:78:16:2e:2e:b4:f1:a5:58:
8e:51:18:ce:73:a9:5d:36:80:65:35:bc:12:f3:3c:
1f:2a:d5:24:c8:50:75:40:17:1a:b3:5d:a2:b3:24:
3d:e3:ea:c3:e8:9d:41:61:14:55:d3:3c:6a:f3:ee:
f3:cb:fe:a3:d3:53:9c:ca:1c:cd:26:a4:8a:75:1b:
3e:4f:c8:7d:4c:0a:96:e0:0d:70:63:45:5e:a8:55:
b2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B0:46:79:27:BC:DD:7A:A5:9A:4A:4A:C4:1F:AD:7E:83:5F:08:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/d0192a55-432f-3594-81cd-d16e7579e4e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.crl
X509v3 Authority Key Identifier:
keyid:05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer
sbgp-ipAddrBlock: critical
IPv4:
64.253.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:a4:b6:d0:6d:8c:82:29:89:98:a4:a6:05:51:5f:01:17:2a:
1e:81:f3:fd:49:68:ab:5e:bd:1e:fc:b3:7e:ee:77:08:02:dc:
ee:94:63:31:bc:45:e7:1a:f6:be:a0:33:83:fb:10:1f:c3:13:
f8:38:db:f6:68:39:6d:a8:08:3e:c2:13:e5:ec:8b:ff:cc:84:
e8:76:16:81:a2:47:d5:7d:b1:5a:5f:5b:53:96:f8:36:8f:f7:
b4:a0:2b:51:aa:6e:37:2f:56:86:7f:5c:99:56:0f:58:1a:4d:
41:ab:fb:7c:da:43:c2:17:16:1a:b2:d9:39:25:c1:16:f1:94:
59:68:4c:51:7e:43:81:1f:8a:ef:4e:98:bb:2a:17:11:70:69:
0f:96:e8:0d:a0:b9:32:1c:8d:03:68:01:0b:f4:b1:70:58:74:
3f:9d:ed:6e:1f:33:27:19:42:80:1e:5a:fd:ab:21:e3:31:7a:
e0:d3:89:73:0a:a5:fa:81:32:4c:8a:ea:3d:25:16:c2:af:98:
6b:88:45:2a:fd:52:45:e6:24:95:9f:db:0f:91:ce:e8:7c:d2:
42:33:84:57:ed:4a:39:45:b9:c8:c8:b8:83:17:37:2c:26:c4:
16:3d:5b:0b:25:c5:35:5d:5b:9b:48:9a:23:41:68:f5:c7:59:
1d:60:58:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:54:04 2025 by rpki-client