Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c/1b223cca-1417-3066-b397-805664ddda0b.roa
File: 1b223cca-1417-3066-b397-805664ddda0b.roa (raw, json)
Hash identifier: ZDMwRsm8bFVoS8COuy/arhIeM7I/JhDRWfm7UmS9Tz8=
Subject key identifier: 16:14:DF:F3:F9:9A:8B:C6:37:F5:17:FE:0D:09:2D:0D:16:0B:6C:33
Certificate issuer: /CN=836bd820-5504-47bf-baac-f0d3a943c97c
Certificate serial: 010D0C9F432858481C9A94028B1F00E22E6AA680
Authority key identifier: 45:EF:F4:68:07:3E:9B:CD:7B:59:64:3B:49:F3:9F:84:F8:68:2A:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c/1b223cca-1417-3066-b397-805664ddda0b.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 36419
IP address blocks: 64.239.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:94:02:8b:1f:00:e2:2e:6a:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836bd820-5504-47bf-baac-f0d3a943c97c
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=fb161c10-0e0e-4193-8ee8-33c1fd3a024a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bd:e2:2d:e4:fe:8f:fa:af:9d:e1:03:41:c7:
92:a1:5c:28:83:82:02:64:36:a6:51:c2:6b:77:2c:
20:cb:41:bb:e8:a7:dc:27:93:37:2a:09:30:ae:fc:
6f:1a:79:4f:96:4f:d4:05:0b:91:8d:64:57:f0:81:
91:8b:88:1a:c9:1c:3b:0c:71:c6:61:a6:c3:cb:30:
44:da:2d:b9:b5:fd:86:76:e1:17:37:00:f3:22:0e:
70:c5:0c:8c:84:96:89:b2:b1:d6:81:87:0e:06:aa:
68:77:44:71:bc:72:c3:d1:f0:70:18:13:93:44:86:
64:fd:b6:be:6a:55:de:bd:bc:f8:ab:f8:49:74:31:
ed:84:29:4d:80:39:79:68:23:9f:96:d4:30:84:9b:
d7:d7:07:03:51:66:28:4b:18:bf:20:8f:c1:68:05:
fa:ac:0e:33:2b:df:56:06:e8:76:c0:53:a2:da:8e:
74:1c:14:cc:fb:b2:c7:c4:1c:5f:a3:b0:c1:a0:9e:
e4:72:95:d1:9d:bd:48:0d:82:27:d8:4e:be:b3:b4:
30:b1:af:27:cd:ee:2e:4a:51:52:85:dc:00:4f:32:
1d:cc:b9:fd:00:51:94:f6:0c:28:b0:0d:08:e3:fa:
a4:02:eb:16:35:7a:be:04:6c:8b:55:a2:6a:00:5b:
4d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:14:DF:F3:F9:9A:8B:C6:37:F5:17:FE:0D:09:2D:0D:16:0B:6C:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c/1b223cca-1417-3066-b397-805664ddda0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c/836bd820-5504-47bf-baac-f0d3a943c97c.crl
X509v3 Authority Key Identifier:
keyid:45:EF:F4:68:07:3E:9B:CD:7B:59:64:3B:49:F3:9F:84:F8:68:2A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c.cer
sbgp-ipAddrBlock: critical
IPv4:
64.239.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:92:c5:f6:cd:07:99:2f:da:ab:34:f9:19:22:d7:d2:9c:65:
40:4e:53:1b:da:6d:c7:b7:95:5f:f2:b0:5c:4f:b9:73:a2:b4:
e1:42:26:dd:dd:b0:08:2a:53:61:de:4b:8a:34:12:79:d9:a8:
c0:1b:ff:ce:40:18:0c:d5:95:36:67:cd:ba:4b:dd:1c:1e:62:
51:91:f2:f0:16:10:bf:02:0c:c7:32:06:0e:e2:db:04:2c:02:
0f:85:38:bc:f4:78:6c:d8:89:41:7c:e4:20:12:33:21:d4:fc:
4d:d9:3f:ec:87:3a:63:06:a5:1c:ba:cb:50:ee:fd:30:d3:df:
e0:98:80:16:56:f9:6c:b5:5a:53:30:8a:1b:c6:68:b7:28:2a:
3a:dd:9b:54:fe:9d:12:dd:72:88:73:15:95:4a:b9:a0:78:b5:
6b:ab:94:46:26:4f:1f:d3:cf:bf:b2:17:79:99:94:f4:0d:d3:
5e:78:c8:78:4e:98:45:a8:7d:f8:1b:ed:ae:e2:43:2a:a5:82:
e3:6e:97:2f:56:cf:34:2f:ee:9e:5c:78:8e:75:9d:ae:ed:48:
82:c0:4e:ae:a2:70:c8:af:dd:6f:2d:f9:0b:ed:c4:94:0e:34:
5e:7e:6e:6b:68:bf:db:80:38:80:e6:15:a3:9b:18:c8:0e:82:
d9:0d:eb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:51:26 2025 by rpki-client