Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/cca081ba-a79d-3a72-bfc5-6de5fe9e3628.roa
File: cca081ba-a79d-3a72-bfc5-6de5fe9e3628.roa (raw, json)
Hash identifier: ZqX8sA6Q/np1Vhw2EKAdyRgvvsq+5YKMCjv2S+hVC9Y=
Subject key identifier: 66:40:44:55:55:CA:B5:79:0D:C0:34:6C:35:E0:F7:EF:50:26:D7:F6
Certificate issuer: /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial: 010D0C9F432858488815E7FB2A0992E690ECE2E0
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/cca081ba-a79d-3a72-bfc5-6de5fe9e3628.roa
Signing time: Mon 13 Jan 2025 14:00:52 +0000
ROA not before: Mon 13 Jan 2025 14:00:52 +0000
ROA not after: Sun 13 Apr 2025 13:00:52 +0000
asID: 32133
IP address blocks: 64.98.80.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:15:e7:fb:2a:09:92:e6:90:ec:e2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Validity
Not Before: Jan 13 14:00:52 2025 GMT
Not After : Apr 13 13:00:52 2025 GMT
Subject: CN=a633cc07-601d-4ff8-a7dc-ca75d8dd8612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f0:74:6c:8f:c4:83:d8:50:39:01:9a:71:8f:
72:53:51:22:54:20:86:00:47:76:69:2c:98:df:57:
d3:e5:3b:7b:c6:61:b1:7e:3c:8b:8b:95:df:64:1a:
0a:94:d8:e5:6f:d5:2b:6e:7d:1b:b2:f2:22:1d:b8:
7a:6a:3c:73:6a:3d:cb:af:49:a6:a7:e4:3a:b2:56:
b9:dd:e5:97:8e:fe:f1:51:da:37:5e:f5:45:63:4f:
a8:a6:4c:df:f9:a3:b8:d6:99:dc:44:e2:7e:a3:49:
4f:5c:07:8d:8d:0b:01:1d:d8:81:83:48:60:34:93:
58:c8:b4:eb:66:ed:3f:2d:7d:b7:39:b0:91:c6:30:
02:7b:51:ca:60:30:16:65:c8:cc:f9:88:59:c9:8d:
e5:cc:5e:05:81:54:01:f2:21:bd:a9:fc:80:0e:a8:
fb:2c:f0:e8:0c:c0:ca:5b:c6:bd:bf:e6:9c:54:74:
51:19:cd:94:79:04:41:67:d6:bf:c9:e3:aa:a1:4c:
c6:99:f2:b8:47:48:cc:a0:7f:2a:55:af:a3:d1:28:
bb:a6:f1:07:42:95:39:90:34:3b:8f:1a:c1:41:b3:
b0:01:19:a4:d8:9c:5a:05:66:d9:64:5c:c7:7c:59:
a4:c1:96:97:f2:aa:3f:75:26:71:7f:32:ea:73:31:
bf:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:40:44:55:55:CA:B5:79:0D:C0:34:6C:35:E0:F7:EF:50:26:D7:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/cca081ba-a79d-3a72-bfc5-6de5fe9e3628.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
X509v3 Authority Key Identifier:
keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
sbgp-ipAddrBlock: critical
IPv4:
64.98.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:5d:3d:fe:ef:9d:4a:7d:6a:5b:66:69:d5:35:47:d6:9e:47:
ca:aa:b9:39:02:a1:74:21:26:df:10:62:d8:1b:1b:49:5f:41:
94:b3:ef:19:d0:f7:b1:d7:f9:24:d9:41:08:82:dc:2f:b0:6c:
81:66:c7:58:de:f6:a3:f0:1b:cc:80:02:a1:d9:87:2d:5c:f0:
f2:31:da:3e:25:af:52:12:87:44:41:c7:14:41:aa:9b:10:3f:
22:68:09:a7:3e:3c:a1:95:60:2b:7c:d7:2a:de:6a:ef:de:dc:
6a:2c:65:58:fb:2b:92:59:f7:ae:52:17:3a:38:69:ab:ac:43:
94:e9:25:1e:4a:84:f2:3c:45:f2:a0:41:14:7f:2d:64:d5:26:
06:2c:dd:a6:7f:23:03:fb:50:43:93:2f:69:2e:dd:1c:e8:b3:
c1:05:33:8d:58:6d:7b:e6:ea:b2:bb:79:9d:d2:b8:e4:84:61:
33:ec:e9:f0:d7:cd:e1:01:9d:f7:fa:96:5a:99:71:bf:fa:90:
13:7b:ad:2f:2f:25:27:00:a4:14:03:34:75:3c:b4:ea:c6:ca:
1f:1d:ec:3c:52:06:a0:f7:a0:30:7e:d1:ba:b4:58:12:2a:26:
9b:5b:69:52:24:00:32:bc:7f:33:c0:06:aa:6a:5a:29:72:3b:
01:91:73:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:58:27 2025 by rpki-client