Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3/09472c5c-b474-3fb1-a065-3b3b2775c1cd.roa
File: 09472c5c-b474-3fb1-a065-3b3b2775c1cd.roa (raw, json)
Hash identifier: AMqn6rDN9AgXphQ6BJLs/dtnPlZnk6vgxQtqn2Adx5Y=
Subject key identifier: 6B:21:A0:7F:80:44:02:EE:CB:ED:16:2F:58:61:AE:8F:35:3B:CF:C6
Certificate issuer: /CN=80798c37-59e6-4f3d-8d45-7e18859c93e3
Certificate serial: 010D0C9F43285847F84F7BE489EA8D4E8EBC9980
Authority key identifier: D5:53:97:C5:37:33:20:43:62:BF:46:62:74:15:77:2C:AF:06:F8:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3/09472c5c-b474-3fb1-a065-3b3b2775c1cd.roa
Signing time: Sat 23 Nov 2024 02:00:28 +0000
ROA not before: Sat 23 Nov 2024 02:00:28 +0000
ROA not after: Fri 21 Feb 2025 02:00:28 +0000
asID: 20419
IP address blocks: 66.133.64.0/21 maxlen: 21
192.132.8.0/24 maxlen: 24
199.21.152.0/21 maxlen: 21
199.96.112.0/22 maxlen: 22
208.92.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f8:4f:7b:e4:89:ea:8d:4e:8e:bc:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80798c37-59e6-4f3d-8d45-7e18859c93e3
Validity
Not Before: Nov 23 02:00:28 2024 GMT
Not After : Feb 21 02:00:28 2025 GMT
Subject: CN=ba6d6fb9-7cf1-4ab2-a35e-4701c6bfdf7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bf:1c:1d:99:0c:0a:23:23:7b:5b:43:0a:34:
9c:bd:8c:2b:4b:be:9d:d1:e7:32:47:e5:78:00:cc:
b9:1a:0b:0b:31:5a:f8:49:bd:c4:dd:10:97:97:e8:
64:45:d9:33:f2:b8:3a:78:3b:4a:51:04:54:0c:8c:
6c:ad:81:a4:38:24:d8:fc:5a:1e:6c:91:b2:34:e6:
65:dc:d5:98:df:c6:2e:cc:50:e6:3a:13:23:7f:63:
53:7c:5e:94:48:c4:8f:7f:7e:5d:4c:9e:57:36:97:
eb:51:f9:9f:01:2c:64:cf:9e:54:b6:9d:58:73:18:
73:bc:c8:48:37:c4:99:98:4e:72:2e:ed:f5:7d:50:
31:0c:79:2c:d0:67:92:60:c0:f6:fb:19:1b:c7:8d:
a3:d1:95:bc:0b:f9:8f:59:b3:08:fa:7c:fd:6b:80:
1f:d3:43:e5:54:02:a4:17:b7:4b:57:5f:e7:6f:d7:
a7:86:5f:72:17:35:85:55:4a:b3:57:a3:e7:e4:21:
5a:68:ef:ab:86:46:35:10:09:17:60:14:4c:5a:08:
63:6a:ec:08:4b:b2:29:7a:11:12:00:04:1a:a8:07:
28:4d:02:11:02:bb:6a:cf:34:51:b4:aa:ea:61:69:
1e:57:1f:b0:c7:d8:41:d9:1f:80:6e:da:d9:9c:c9:
45:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:21:A0:7F:80:44:02:EE:CB:ED:16:2F:58:61:AE:8F:35:3B:CF:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3/09472c5c-b474-3fb1-a065-3b3b2775c1cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3/80798c37-59e6-4f3d-8d45-7e18859c93e3.crl
X509v3 Authority Key Identifier:
keyid:D5:53:97:C5:37:33:20:43:62:BF:46:62:74:15:77:2C:AF:06:F8:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.133.64.0/21
192.132.8.0/24
199.21.152.0/21
199.96.112.0/22
208.92.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:ac:14:e1:a5:a4:1e:86:10:07:b0:be:54:2c:29:09:f5:ba:
44:bf:4c:61:11:47:c9:81:16:db:1d:55:98:d7:ae:95:53:76:
ee:3a:8b:6b:dc:57:d0:c4:7f:74:27:ad:1e:04:a8:6b:d8:af:
a2:a0:5c:63:61:3b:b7:f6:41:7e:f9:51:c8:d4:6a:49:0b:63:
91:b7:d2:de:4c:87:54:6d:33:14:01:a1:db:e9:bb:cb:47:3f:
f8:b6:38:63:60:b6:2e:f8:ba:12:c2:16:8e:13:7a:40:a5:e9:
9e:27:35:4b:16:b3:36:90:7b:7d:cf:f2:30:0a:e1:6f:85:a0:
06:87:70:69:fc:f2:cd:83:e0:cf:85:29:28:88:ed:73:90:27:
b7:6f:0a:8f:c5:6d:d4:86:3f:d3:f5:5d:6e:15:ec:53:48:d7:
31:79:a2:15:98:9c:83:35:62:e2:58:fe:e3:35:63:9f:24:a0:
70:ec:2a:90:e8:09:4b:42:41:84:21:20:3c:65:e5:c4:78:c1:
88:9e:88:fa:bb:8d:01:fb:58:c3:76:c1:2a:dd:22:d3:bd:7a:
35:f8:28:f0:99:bd:3f:fc:7c:9d:a4:f2:1f:f9:db:e4:54:fe:
b9:65:9d:8f:63:88:d7:16:30:89:b7:ac:ad:12:d0:07:c4:e7:
28:3e:d8:36
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:16:26 2025 by rpki-client