Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/20e21523-7867-3e6d-bd2a-f4ba5558ced0.roa
File: 20e21523-7867-3e6d-bd2a-f4ba5558ced0.roa (raw, json)
Hash identifier: VqvQ4A9mCIAa/Z313jKZvbM/tsMzX+o+cIz3fvbjaVA=
Subject key identifier: A3:4E:BB:DE:DA:BB:C3:36:BB:B6:90:55:25:E9:D8:7A:DF:3C:C7:A6
Certificate issuer: /CN=95e29289-6f1c-4c2f-84f4-c944e9e54940
Certificate serial: 010D0C9F43285848239543C288C5646FF1591D00
Authority key identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/20e21523-7867-3e6d-bd2a-f4ba5558ced0.roa
Signing time: Sun 08 Dec 2024 14:00:51 +0000
ROA not before: Sun 08 Dec 2024 14:00:51 +0000
ROA not after: Sat 08 Mar 2025 14:00:51 +0000
asID: 36329
IP address blocks: 64.58.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:95:43:c2:88:c5:64:6f:f1:59:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e29289-6f1c-4c2f-84f4-c944e9e54940
Validity
Not Before: Dec 8 14:00:51 2024 GMT
Not After : Mar 8 14:00:51 2025 GMT
Subject: CN=360ee2cd-38aa-4883-b693-35bccce32cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1e:13:7b:36:ee:f9:df:58:15:7a:d7:ee:db:
1f:7c:15:86:5b:38:dc:c8:8a:1f:07:60:df:9a:b4:
a6:7b:eb:97:d7:93:5d:da:c8:7c:b8:26:95:e5:4e:
38:d5:a6:0f:14:74:9e:05:70:f9:5c:35:e0:fe:49:
71:56:6d:83:0a:04:32:c8:60:a3:7f:02:cc:95:d3:
18:3b:ef:08:1b:5d:15:dc:19:de:0a:d6:4c:19:99:
1d:69:4e:ee:3e:c6:01:b7:94:ce:68:0f:f3:1d:c9:
81:ec:ad:02:58:0b:84:fd:e5:ef:1c:ab:48:68:df:
84:83:46:51:a2:70:6b:e1:04:fb:ed:9e:52:53:08:
73:d5:69:29:58:33:8d:8d:8f:27:8e:9b:90:0d:93:
24:bd:9f:d2:c8:ec:1c:5f:d6:83:55:39:bf:e0:0f:
eb:53:98:69:7b:b3:45:cf:f3:8b:26:06:dc:47:7d:
4b:e6:9c:45:7a:f8:f0:01:f7:c4:18:10:5a:79:f9:
ce:3b:23:cf:93:f4:37:ef:94:e4:22:bb:8c:b2:bb:
a7:38:68:0a:cb:8c:9d:bd:c0:c9:4e:f6:6f:98:83:
76:7f:cc:92:a8:0b:8c:bb:5a:96:41:3d:93:8a:c5:
20:b2:b3:b0:68:22:db:f0:93:7d:89:40:fd:40:ed:
96:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4E:BB:DE:DA:BB:C3:36:BB:B6:90:55:25:E9:D8:7A:DF:3C:C7:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/20e21523-7867-3e6d-bd2a-f4ba5558ced0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl
X509v3 Authority Key Identifier:
keyid:4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer
sbgp-ipAddrBlock: critical
IPv4:
64.58.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:2e:57:47:2f:0e:c5:d3:f2:40:21:8a:00:9e:cb:cd:61:a5:
fb:c5:82:40:d5:c7:4d:15:91:b0:5c:6f:cc:b5:14:ff:f4:f7:
aa:00:6a:9b:51:ec:11:7d:ff:38:8d:31:a6:b9:04:8e:ff:3a:
e1:49:ac:dc:67:73:96:a9:2e:74:b0:4f:e7:73:75:6b:36:ff:
b3:96:cd:19:68:18:e8:f8:93:26:d3:37:07:be:18:6c:a3:fd:
8a:26:b7:52:d0:b1:ec:fd:5d:09:3a:20:22:59:df:28:20:ff:
5c:ee:bb:7b:d7:04:62:f3:37:5a:76:06:0a:c4:ad:5d:24:07:
83:72:3f:9c:a8:c2:33:5a:ef:6e:10:a1:45:ad:70:2d:8c:75:
3a:d6:bf:30:f0:21:49:07:48:8f:53:cb:b3:9f:84:b2:a4:60:
73:32:55:17:5b:05:aa:bd:1f:0e:10:5f:21:62:38:17:2b:a4:
89:17:1c:cf:2e:35:56:cf:8f:00:ec:0d:92:f0:2d:12:6c:53:
63:f0:5b:88:a5:85:bf:2e:99:cf:2d:3a:4e:eb:26:15:8f:6e:
08:c0:81:58:67:41:9a:b3:d9:f8:ab:1b:55:93:aa:ba:82:f6:
a4:e0:0c:74:60:64:89:d4:c4:c6:a0:63:f9:0a:85:3b:f0:a6:
b0:2c:fe:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:09:41 2025 by rpki-client