Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/c43a7a77-2533-3db9-8bef-1b34f492b3e2.roa
File: c43a7a77-2533-3db9-8bef-1b34f492b3e2.roa (raw, json)
Hash identifier: hoK6qJ2uL8Yf7GGCxEMru+gkVRr4jLJ6lYoqiasACks=
Subject key identifier: 05:4F:B7:44:02:51:E5:DC:8E:56:88:D4:8A:09:D2:10:37:9C:CD:83
Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial: 010D0C9F432858492CB224C55FC1D72D74253200
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/c43a7a77-2533-3db9-8bef-1b34f492b3e2.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 13768
IP address blocks: 64.34.190.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b2:24:c5:5f:c1:d7:2d:74:25:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=cf366a1a-75bc-43c3-9a10-59df47ead9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:6b:98:28:bc:35:ea:fd:e9:3a:38:79:f0:
ba:13:22:2b:dd:40:09:6d:11:12:fd:d9:82:da:06:
53:ff:0a:47:25:80:79:60:2e:20:e1:f9:ef:bf:47:
1d:7c:09:52:68:18:ea:66:a0:5b:f4:d7:09:b2:bc:
f3:00:d0:7e:bb:25:65:1e:2c:4b:dd:fb:20:62:8f:
6b:2f:3a:fe:53:65:75:2d:36:2f:d1:65:5f:30:4f:
d9:19:11:40:32:d7:23:c5:b2:1b:dc:36:31:cf:4a:
5c:ba:f6:3e:0a:de:35:9b:0e:a6:02:fd:bf:6a:d2:
71:50:82:15:e2:a7:c8:55:6f:38:11:0b:69:48:69:
46:4d:1d:ac:7e:e6:2c:fb:b4:c4:4a:0c:17:55:c5:
54:11:18:8c:3e:a3:2b:8a:d5:fd:e5:30:5a:f7:84:
26:dc:7d:f7:c4:59:8c:79:6d:b7:6e:24:7a:b2:e0:
18:53:1c:f8:d0:e3:e5:85:0c:aa:9a:79:4f:66:b8:
21:32:cb:98:b0:94:98:3b:f6:de:10:b8:2b:21:d1:
9e:5e:79:38:30:5d:d7:cb:8f:57:d1:ed:ee:ed:ae:
1f:2f:a1:d2:23:f9:cb:a0:9a:5d:ee:1e:84:5e:2e:
c2:6f:d8:3d:9a:1b:28:19:75:29:84:04:c1:d6:53:
ca:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4F:B7:44:02:51:E5:DC:8E:56:88:D4:8A:09:D2:10:37:9C:CD:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/c43a7a77-2533-3db9-8bef-1b34f492b3e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
X509v3 Authority Key Identifier:
keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
sbgp-ipAddrBlock: critical
IPv4:
64.34.190.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:dc:11:2b:30:87:dc:21:f3:4b:1e:2c:cd:ea:5b:96:c0:75:
f9:c0:b5:68:81:0c:5a:06:fa:3a:9e:4f:b3:66:cb:99:eb:eb:
d0:41:39:30:2e:7e:6a:71:21:54:c5:9a:cd:47:e5:0e:af:85:
ac:28:ec:1b:49:99:6c:86:02:29:91:43:3b:da:0e:a1:49:0e:
46:b5:85:a0:97:3e:28:2b:0a:38:7f:67:8b:35:c4:e0:20:7d:
16:35:8d:8e:b4:bc:6f:dc:14:8f:b5:7a:9b:f1:4c:e9:41:cd:
be:ca:a2:0e:02:85:43:e0:df:7a:f5:4f:48:7f:09:ca:27:4e:
8f:1d:34:a9:6f:13:37:c4:fb:58:15:35:a7:4d:ed:86:d5:f0:
06:43:57:83:db:af:ee:6f:f6:81:82:19:15:e4:27:ee:0f:9e:
25:94:09:29:89:ae:87:8b:85:5e:4b:97:75:e1:e1:20:20:a4:
c4:0d:f1:b0:c8:af:d2:c5:8d:22:4d:99:a4:78:74:08:67:0a:
4c:34:46:6f:6d:39:a1:a1:5e:5c:33:ed:8b:82:d7:c4:44:40:
76:c4:7a:3e:36:b0:ea:90:59:f6:d4:1e:69:13:cf:42:bb:d0:
91:1e:2d:76:4b:e0:c5:83:bd:b9:cd:e1:bd:17:13:e3:51:39:
b7:04:20:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:20:54 2025 by rpki-client