Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/50f8033b-7669-3cdf-a7c4-6d5d79b7e589.roa
File: 50f8033b-7669-3cdf-a7c4-6d5d79b7e589.roa (raw, json)
Hash identifier: yIzB/YjpiLMyLe28erN4llS4vHUMh8EYxs+NNRePFLQ=
Subject key identifier: 09:70:08:06:38:7C:81:60:5F:33:5B:B5:AB:9E:00:AF:86:18:D6:18
Certificate issuer: /CN=95bf95d5-1c9b-4cea-8142-cc1a4699c7a6
Certificate serial: 010D0C9F43285848186217C30259C7368E835960
Authority key identifier: 2D:1D:DA:46:69:82:E9:F8:0F:75:BE:05:B0:1D:D6:EE:83:AC:62:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/50f8033b-7669-3cdf-a7c4-6d5d79b7e589.roa
Signing time: Wed 04 Dec 2024 13:43:56 +0000
ROA not before: Wed 04 Dec 2024 13:43:56 +0000
ROA not after: Tue 04 Mar 2025 13:43:56 +0000
asID: 22018
IP address blocks: 69.64.96.0/20 maxlen: 24
209.25.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:62:17:c3:02:59:c7:36:8e:83:59:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95bf95d5-1c9b-4cea-8142-cc1a4699c7a6
Validity
Not Before: Dec 4 13:43:56 2024 GMT
Not After : Mar 4 13:43:56 2025 GMT
Subject: CN=52d9c248-075a-4b88-96b7-3a7616e63405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b6:fc:7e:7d:70:69:5b:72:6f:89:12:6e:bf:
6c:54:66:aa:e3:17:b7:0f:c8:32:23:50:5a:67:81:
cf:c3:e4:0a:5d:5a:13:64:56:2a:31:73:c2:8a:72:
00:38:a1:75:83:7a:dc:61:8b:77:1e:6a:db:3f:a1:
06:eb:42:68:cc:fd:ef:74:85:03:90:a3:8e:08:2f:
e3:41:8e:07:cc:e1:55:52:f6:51:76:b9:1f:93:a4:
c2:55:45:7c:89:f2:c0:b5:5a:74:38:ef:d5:9d:51:
5b:a8:44:66:8c:66:14:33:86:5c:b4:6c:8e:f0:98:
8b:68:c4:8f:24:98:82:f0:cf:47:ba:b7:2b:f6:18:
9e:a7:20:d5:00:88:33:f1:de:52:4f:25:c9:c9:c4:
fa:2f:f7:74:95:06:87:05:65:17:e7:e3:1f:ac:05:
ec:ea:52:2e:98:17:fc:05:eb:29:6d:f8:7a:d7:87:
38:b2:7a:19:a3:e4:c5:07:c1:bd:f4:4e:02:94:ca:
fc:bc:42:8f:d5:13:d0:97:73:69:d6:b4:b2:03:68:
c9:8c:96:b2:04:07:f9:ae:24:7c:12:12:24:ce:55:
1f:ce:05:57:40:ef:f2:69:6c:e6:79:97:f8:41:ad:
fb:d0:47:a4:c8:16:3a:fd:b6:6b:dd:f9:f8:09:ab:
5d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:70:08:06:38:7C:81:60:5F:33:5B:B5:AB:9E:00:AF:86:18:D6:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/50f8033b-7669-3cdf-a7c4-6d5d79b7e589.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.crl
X509v3 Authority Key Identifier:
keyid:2D:1D:DA:46:69:82:E9:F8:0F:75:BE:05:B0:1D:D6:EE:83:AC:62:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.cer
sbgp-ipAddrBlock: critical
IPv4:
69.64.96.0/20
209.25.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:1e:d7:c4:24:44:e7:74:1b:4d:80:9a:05:14:48:fc:b8:fb:
5d:4c:1c:a7:e0:af:3d:75:11:c6:83:86:85:5e:aa:61:35:1f:
55:1e:73:22:78:d9:cb:3d:7f:ea:3c:6d:99:e1:c2:a7:f4:79:
96:d0:05:38:33:e9:ad:8c:d0:f9:18:0a:1f:c7:2e:ed:9d:74:
25:06:c0:47:a2:27:24:95:74:20:25:71:ed:c9:6e:89:02:32:
d3:b5:a0:eb:73:fa:87:20:28:dd:a6:c3:87:80:6a:e3:2d:5e:
44:4a:21:c5:d0:5b:03:fe:6a:a5:ce:91:93:46:07:d0:84:65:
a0:3f:b8:4b:16:33:e5:e7:51:1c:fa:08:a0:cc:0e:50:9b:9e:
42:8b:e5:e9:e7:3d:4c:f6:79:ca:ba:98:8a:47:f5:c4:04:6a:
18:31:ae:b1:be:3f:15:4a:63:49:bb:5b:6b:3b:a5:e9:f4:b7:
d8:06:1f:3d:75:ea:7c:70:10:11:11:3b:17:ca:da:4d:ff:f5:
d7:a0:db:82:7e:ec:aa:9b:30:b7:9a:a7:b6:21:b4:1d:b4:58:
64:91:e4:3c:6d:76:c0:39:af:37:0f:0d:6d:eb:aa:46:01:68:
48:d9:73:d8:01:36:98:ba:4b:04:87:af:08:48:2d:bc:54:49:
e2:59:74:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 19:21:10 2025 by rpki-client