Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/1c64bc7d-a302-3320-bca5-35577df76424.roa
File: 1c64bc7d-a302-3320-bca5-35577df76424.roa (raw, json)
Hash identifier: 6DRBXCAa0uV3Lazibz1Q6jshFyblE2EPaXRc1Jshc2M=
Subject key identifier: 0A:54:17:57:2C:B8:E0:51:91:C3:BD:BB:E5:49:1E:B0:99:24:3D:26
Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial: 010D0C9F432858492CB223FA0CCAF2D16B2A26C0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/1c64bc7d-a302-3320-bca5-35577df76424.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 13768
IP address blocks: 64.34.176.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b2:23:fa:0c:ca:f2:d1:6b:2a:26:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=48cc0485-515f-4bfa-8b88-d55087c0199c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e2:a9:95:e4:c0:7a:e0:a8:8b:79:ae:19:14:
0d:a9:37:6e:1a:22:f4:78:37:3f:0d:a9:44:80:9d:
bd:f0:17:42:5d:5e:ad:6b:91:fb:3d:2e:d8:47:a0:
80:fe:07:ea:1d:24:c4:73:60:cf:d7:56:04:62:20:
2e:51:7c:69:08:a3:36:cb:8c:c4:e8:69:e9:13:e8:
a7:d0:f5:2f:28:42:17:02:f9:0c:56:22:63:5d:fb:
11:b2:23:3b:a1:05:72:34:b7:10:29:0a:ef:3c:db:
42:25:cc:9d:58:e7:e9:f7:b9:58:b2:09:92:f6:e0:
c4:3e:f4:ef:52:8b:9d:63:3e:a4:90:e1:15:5c:74:
f9:26:fc:0c:9e:a0:c6:f8:b6:56:fb:aa:ef:e4:ce:
64:2e:64:c2:a3:5b:7d:83:56:3a:df:14:99:bb:80:
37:17:99:ba:8a:41:9d:89:50:24:e7:12:67:1c:b3:
2d:80:17:bf:5e:6e:aa:15:4d:ba:fe:d3:e9:69:c1:
8a:7a:2b:b4:09:b6:86:2d:19:0e:7f:1d:a2:74:fb:
b7:b4:e2:7a:97:f3:28:10:f6:9f:d3:2b:b2:8b:42:
82:8a:73:73:7a:b4:0d:e1:ff:9f:4c:e1:29:13:72:
64:6c:22:4e:01:f3:15:bd:3e:f5:6e:35:6a:e2:57:
62:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:54:17:57:2C:B8:E0:51:91:C3:BD:BB:E5:49:1E:B0:99:24:3D:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/1c64bc7d-a302-3320-bca5-35577df76424.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
X509v3 Authority Key Identifier:
keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
sbgp-ipAddrBlock: critical
IPv4:
64.34.176.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:94:c8:4e:dd:7f:00:b4:94:ba:5c:33:94:e1:9e:c8:bb:41:
45:08:46:5c:9b:05:80:5c:82:a8:01:01:1b:b7:b5:29:1d:fb:
11:ea:b6:1c:4b:51:fe:98:dc:a6:90:47:fe:7d:8c:84:04:15:
95:9e:36:dc:e5:89:b8:b1:03:2f:85:5d:b3:c7:36:51:55:9c:
ec:e8:38:6c:d3:50:1f:43:3f:b1:b8:9c:b9:98:8e:34:e4:7c:
b7:b0:ef:e4:75:5f:dc:76:bc:93:26:89:6e:96:1a:ec:6d:d0:
13:93:4a:31:2c:95:55:1f:06:4a:a9:78:f8:1f:d2:9e:3e:c9:
7d:1a:ce:80:b6:25:3f:85:28:16:fe:0b:51:4f:fa:08:8f:32:
a5:76:3b:7a:ff:d8:db:12:c0:ad:e7:6b:95:ef:f7:dc:3d:7a:
b6:15:33:6b:0f:40:db:91:9a:53:01:9f:13:5b:90:94:78:18:
c9:b0:3a:4e:0a:27:ed:e5:9b:8f:f4:19:c0:18:9c:f9:81:50:
03:71:19:8b:1e:e1:df:be:43:5d:77:68:c1:d7:42:80:b6:99:
b2:43:f8:c1:77:82:61:0e:b4:d8:37:8f:4b:0e:81:d7:f6:90:
e4:b9:13:6b:d6:ab:41:3b:23:93:d4:7c:a1:33:55:ed:81:84:
2b:d1:51:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:11:00 2025 by rpki-client