Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/b8ea87f0-d1d3-35bc-9363-c46f54cfe1aa.roa
File: b8ea87f0-d1d3-35bc-9363-c46f54cfe1aa.roa (raw, json)
Hash identifier: lJ2XRflcrVMXsf088pieRWXfPteYxfgL19XMB+8SnII=
Subject key identifier: 6F:B0:77:8A:5E:E6:02:87:77:7C:89:E4:1C:CD:D1:59:EF:DD:5A:38
Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial: 010D0C9F43285848A29B51B1FB2EE8446A7D3500
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/b8ea87f0-d1d3-35bc-9363-c46f54cfe1aa.roa
Signing time: Thu 23 Jan 2025 02:00:40 +0000
ROA not before: Thu 23 Jan 2025 02:00:40 +0000
ROA not after: Wed 23 Apr 2025 01:00:40 +0000
asID: 13768
IP address blocks: 65.39.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:9b:51:b1:fb:2e:e8:44:6a:7d:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Validity
Not Before: Jan 23 02:00:40 2025 GMT
Not After : Apr 23 01:00:40 2025 GMT
Subject: CN=b1fcfc53-55df-4e67-8ef0-4d9621442b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:77:0e:25:b0:1f:9d:7e:b2:06:74:72:11:4f:
25:6d:e6:57:b7:99:2f:3d:51:a1:ab:66:c4:0e:58:
fe:c1:d1:0f:c2:ff:02:f9:08:78:97:9e:08:52:1a:
44:06:61:a6:8d:06:21:4a:e8:84:fe:40:ef:a7:be:
69:9b:86:d2:2a:8d:40:0f:8b:42:c8:b7:46:df:a1:
72:7b:fc:f4:a1:9d:df:07:2a:75:90:e1:a9:e6:f8:
ba:cd:d5:4b:c1:b3:79:b5:50:3c:2c:93:c8:84:94:
fa:b4:bd:35:ce:96:54:e1:13:67:aa:ad:54:f4:1e:
07:ee:56:d5:fe:ca:f3:76:2c:76:91:a5:3a:91:7b:
a1:ab:16:14:0c:01:25:ee:ee:82:ef:89:e6:3a:e9:
c4:82:9c:8d:cd:31:b0:43:9e:fb:b7:33:6d:21:ab:
53:5e:cc:88:91:2a:f6:c0:ec:80:6e:af:42:d6:4f:
59:2c:f1:56:71:5b:f1:03:39:7b:eb:31:61:37:85:
12:97:3c:d4:23:80:c6:bb:a3:3f:84:9e:4d:86:31:
c2:58:83:e2:12:f3:eb:96:1a:bb:cc:52:e4:e8:b7:
ba:6c:0f:e8:c0:f8:0d:d9:14:b3:3d:d4:55:52:b8:
c6:9e:9d:84:e6:86:62:2f:c8:98:d7:82:3c:e5:2b:
7d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B0:77:8A:5E:E6:02:87:77:7C:89:E4:1C:CD:D1:59:EF:DD:5A:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/b8ea87f0-d1d3-35bc-9363-c46f54cfe1aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
X509v3 Authority Key Identifier:
keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
sbgp-ipAddrBlock: critical
IPv4:
65.39.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:09:31:e5:93:b9:e0:d6:3f:a5:4c:b2:cd:5f:67:66:81:b5:
c9:cf:1d:12:27:a1:23:b5:2f:10:35:e4:09:98:25:db:33:45:
d2:a6:9c:3c:44:d5:f0:86:67:e3:b7:64:a5:28:ff:a8:77:e7:
2e:9f:4c:dd:56:db:a5:4d:09:14:5a:7c:b1:55:a0:0e:19:8c:
26:29:2d:34:81:d0:45:a4:43:a4:b1:9e:47:f7:89:ce:0b:d6:
0e:e1:2e:76:16:2c:62:c9:f8:1a:e5:1b:7a:31:b9:58:49:4f:
ca:63:d1:ea:94:26:9f:0c:ab:a7:df:7e:65:74:9c:8b:b4:e4:
35:86:47:1f:fa:04:f8:fc:6a:c8:92:90:aa:9a:19:75:ab:29:
2f:40:0b:c7:29:98:bd:9a:ba:60:1e:da:8c:ee:c9:7d:ee:92:
75:b0:f3:ea:00:6a:01:74:13:aa:4b:9a:e4:ae:8d:36:2b:3b:
ca:8f:62:34:f1:31:b9:10:14:15:6e:ce:c1:0b:ce:6c:5d:ca:
b2:26:32:fe:b9:ac:18:f2:fe:37:1a:b8:ea:10:17:d7:b6:27:
7a:7e:25:3d:80:cc:51:ba:60:ee:0d:5b:69:ea:e2:e5:42:2c:
45:c6:ec:64:be:1e:99:1b:59:17:46:22:56:00:42:36:10:13:
be:02:99:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:14:37 2025 by rpki-client