Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7f2b3f46-2dd5-381e-b122-d7c2ad660070.roa
File: 7f2b3f46-2dd5-381e-b122-d7c2ad660070.roa (raw, json)
Hash identifier: FvdcTkkXDShJ6OGNF533tuOFoH2KtyMIMBLw+DiHJik=
Subject key identifier: 62:33:BB:15:D0:C7:E1:58:55:40:1A:7D:28:CA:74:C7:5C:10:6E:DC
Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial: 010D0C9F43285848A29B4E2A50BC46C2417AB780
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7f2b3f46-2dd5-381e-b122-d7c2ad660070.roa
Signing time: Thu 23 Jan 2025 02:00:40 +0000
ROA not before: Thu 23 Jan 2025 02:00:40 +0000
ROA not after: Wed 23 Apr 2025 01:00:40 +0000
asID: 13768
IP address blocks: 65.39.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:9b:4e:2a:50:bc:46:c2:41:7a:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Validity
Not Before: Jan 23 02:00:40 2025 GMT
Not After : Apr 23 01:00:40 2025 GMT
Subject: CN=957d0696-6172-45de-a825-5b5350d66319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:17:cb:a2:00:d3:c6:d0:c0:36:ce:c3:8f:1a:
45:79:c9:28:ae:8a:e7:f9:02:04:b1:45:51:15:1e:
20:27:95:b0:fe:ce:d4:4d:0e:89:b6:30:89:ad:e6:
62:c2:44:ba:ff:49:6f:53:4f:f0:a5:ad:38:5f:38:
ec:fe:41:ce:cc:6b:c7:79:41:f0:7b:bc:cc:14:36:
18:83:fa:d5:6d:14:b6:87:de:f8:d8:ec:dc:a5:fa:
c4:3d:c8:89:2b:ef:cb:28:d8:60:0e:ee:53:df:ea:
3a:eb:5c:33:0e:f7:3f:df:60:ee:79:8a:01:18:1d:
f3:b0:ee:80:0a:50:1f:a1:0e:34:72:0d:c4:04:71:
7d:f4:fa:f7:07:e8:66:70:ce:1e:54:41:95:13:de:
a3:cc:8d:f9:d2:94:da:ce:fa:1c:d9:65:9c:1f:e2:
91:90:db:d7:a6:cd:d1:26:cd:ca:7a:23:2c:e7:d1:
1b:1f:57:56:e0:aa:50:9c:68:a3:78:fa:85:1b:ce:
6a:76:5a:52:80:b3:d0:6b:89:d6:35:c9:9f:83:fb:
70:9f:c1:93:ad:51:ac:7a:c5:02:21:8c:b2:ce:37:
c3:84:e5:96:00:78:bf:28:94:26:18:ec:d5:14:be:
47:84:9a:91:ef:4d:cf:e0:e0:74:4b:7f:73:61:99:
65:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:33:BB:15:D0:C7:E1:58:55:40:1A:7D:28:CA:74:C7:5C:10:6E:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7f2b3f46-2dd5-381e-b122-d7c2ad660070.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
X509v3 Authority Key Identifier:
keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
sbgp-ipAddrBlock: critical
IPv4:
65.39.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:aa:7d:ef:c9:09:24:d4:28:78:8f:01:5e:5f:4f:20:5f:6c:
79:18:09:b1:36:bd:91:42:9a:4d:3f:04:cf:6c:b0:0b:f3:e5:
6b:1e:e4:a4:66:c9:87:00:6b:b5:36:18:af:5f:df:40:3a:a6:
92:53:5c:ac:76:cd:c0:32:bb:47:1a:f0:40:01:fd:a2:42:f7:
af:01:72:7c:8c:ad:86:9a:f2:78:5b:d4:0c:11:ec:db:4a:30:
b6:de:ad:04:aa:85:ac:c8:f5:a4:0e:bb:30:9c:64:db:04:fa:
44:29:59:24:65:4e:31:15:71:2d:89:51:bd:59:7d:a8:00:a8:
ef:f2:7d:95:50:5d:20:c6:6b:ea:19:f8:a6:9b:cb:85:dc:f0:
cf:70:9b:52:37:b3:a8:d5:86:6c:55:c1:ff:75:ee:df:b0:00:
f7:73:1b:45:1e:f6:84:41:1d:e6:c1:f1:6a:ae:ce:53:9d:a5:
b6:01:e5:2e:16:6c:0c:69:26:df:1f:80:bf:d2:26:7c:fd:23:
65:26:05:df:37:fb:b2:e3:eb:52:90:b6:36:37:69:dc:41:de:
b8:e6:1f:05:cf:3b:68:60:72:de:9d:26:80:95:e3:99:ae:2e:
fc:5f:65:b8:64:81:6c:48:f8:8c:d8:51:6c:11:e1:8a:69:21:
39:ad:25:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:29:45 2025 by rpki-client