Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ab8beb59-0797-3e00-ae40-2eb60021983c.roa
File: ab8beb59-0797-3e00-ae40-2eb60021983c.roa (raw, json)
Hash identifier: kPasixZZMHGuyH/JrLV4GTxCkMGTkCmZgoiZajUXEA8=
Subject key identifier: 64:F6:E1:12:B3:A9:13:FE:2C:75:66:A3:A9:54:62:F8:BE:83:D2:B1
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B5445636E49FAFBF74B3A0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ab8beb59-0797-3e00-ae40-2eb60021983c.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 855
IP address blocks: 70.31.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:44:56:36:e4:9f:af:bf:74:b3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=ec4de819-eee0-4eec-9c17-bd758e9ee3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9b:53:4d:9d:62:15:6b:2b:82:c2:ee:1d:2a:
96:d1:c9:95:da:43:50:20:c0:39:75:b6:1d:e2:46:
d3:d0:4b:e6:d1:cd:79:b3:f9:67:8d:13:c1:10:6a:
16:ea:7b:06:64:fc:06:d8:52:02:67:ec:da:71:90:
e7:14:8c:2e:95:78:a1:8a:28:a5:e7:7f:79:42:94:
a6:0b:17:da:23:0c:11:78:4a:9c:7e:68:fd:76:51:
c1:78:4b:a5:80:1b:30:38:f3:a9:2b:dc:51:5c:18:
da:66:3c:04:c4:84:80:e1:a4:58:e2:68:0e:21:f5:
a6:ac:a8:e8:b3:99:ca:13:f6:ec:a2:38:5b:db:6e:
fc:5d:6e:69:25:da:03:5c:e9:0d:b6:f1:5a:3f:d5:
a6:3f:b5:36:6e:b4:01:e5:4f:4d:84:59:03:72:de:
29:b4:e4:b1:b7:61:b2:40:19:20:f5:04:98:3b:68:
05:6a:48:13:df:0b:ba:fa:5c:3b:0b:a3:62:c0:53:
92:f8:ed:7c:d0:88:45:6c:c5:7c:05:8e:13:5c:76:
64:81:04:6d:01:77:23:06:51:fd:55:59:55:f6:ce:
41:57:47:3d:03:cc:8d:f0:e6:c1:1c:3f:e9:66:20:
87:4f:15:db:ae:35:44:a0:d4:fb:83:cf:d5:02:8c:
a7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F6:E1:12:B3:A9:13:FE:2C:75:66:A3:A9:54:62:F8:BE:83:D2:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ab8beb59-0797-3e00-ae40-2eb60021983c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
70.31.12.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:3a:0c:0f:7c:40:41:22:8b:2d:a6:e3:f5:26:4b:f2:b6:81:
b4:6e:de:24:75:8a:a3:38:ab:96:02:34:3a:8c:e8:8b:8b:24:
99:ed:cf:68:37:9e:39:43:de:bb:0d:d3:78:c9:e0:fb:3b:51:
d0:95:01:0c:61:39:72:23:67:11:5c:ab:05:46:e2:41:bd:88:
43:e2:93:46:2b:3f:f6:5e:1a:fb:d9:9d:44:10:92:04:fd:86:
b5:87:95:6a:89:84:01:ad:7a:0e:9c:b9:44:9c:d0:60:78:37:
8a:c2:71:25:cd:76:ba:5f:fc:16:f2:98:c0:e4:90:0b:38:ef:
d5:2e:20:58:d7:0c:2d:20:2f:70:d3:9b:bd:6e:71:b7:c4:30:
63:c7:fa:be:27:e2:e0:d9:d7:59:72:e4:59:c1:d2:a9:55:d0:
1f:74:1f:02:b7:3a:8a:c9:18:bc:67:ce:00:1a:e4:34:a0:ea:
0b:59:b7:99:f3:a6:db:67:4a:b6:37:e1:89:7e:e7:bc:5a:13:
b5:83:40:de:3e:c3:78:bc:2c:2f:49:10:da:ec:90:ed:54:62:
83:3d:59:f5:b6:4b:d8:ff:48:b1:f6:b8:44:b6:65:db:91:1b:
89:76:f9:74:ae:f6:9b:48:10:b0:a2:89:ae:0d:9a:8d:42:52:
85:55:33:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:47:13 2025 by rpki-client