Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/fbcbc979-508c-3817-875e-b09290cd0752.roa
File: fbcbc979-508c-3817-875e-b09290cd0752.roa (raw, json)
Hash identifier: ubxWS+T9kvAJ0fmHdo9GPyJ6m4VZ+xX/RszVEi+bem8=
Subject key identifier: F3:5B:E8:4B:DD:4F:BB:80:20:6B:A9:E8:89:8C:39:6C:A5:16:A2:20
Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial: 010D0C9F4328584897708D1B1299E00DC9BCC000
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/fbcbc979-508c-3817-875e-b09290cd0752.roa
Signing time: Sun 19 Jan 2025 02:00:39 +0000
ROA not before: Sun 19 Jan 2025 02:00:39 +0000
ROA not after: Sat 19 Apr 2025 01:00:39 +0000
asID: 13768
IP address blocks: 64.226.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:97:70:8d:1b:12:99:e0:0d:c9:bc:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Validity
Not Before: Jan 19 02:00:39 2025 GMT
Not After : Apr 19 01:00:39 2025 GMT
Subject: CN=06b1f141-4349-4b60-a277-381b6c964c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4a:5c:9f:2b:96:e1:cd:b3:d7:0a:4c:d8:d2:
83:93:f0:ab:93:2b:ab:9f:33:8e:16:8d:09:4f:20:
7d:f7:cf:3a:3f:c1:4a:2d:d7:c7:9f:a2:73:e3:78:
a0:3f:24:74:7a:9e:ce:81:b3:a0:25:59:27:7a:75:
39:a1:0c:8a:b9:0c:9a:ba:3e:d8:93:a3:0b:a1:4d:
51:74:f5:08:18:52:bd:6c:2d:35:b9:88:6f:7b:36:
2a:65:63:f5:54:97:ce:ae:c2:64:84:d0:9f:e9:5c:
d9:c2:f0:2b:ea:36:57:f2:1e:4c:4b:32:da:29:2d:
b8:d2:5f:53:07:78:b2:a0:d0:c1:48:13:41:6d:ac:
b6:11:24:37:aa:77:ce:3a:21:7f:01:f2:d9:dc:f6:
94:06:d3:07:11:cc:d9:97:d8:7d:8d:74:7c:6d:4e:
c5:68:91:e7:31:d6:1c:77:ba:57:cf:2d:8c:d8:5a:
80:71:43:15:bf:07:93:61:dc:07:b7:49:cf:96:c8:
90:e0:19:35:32:b4:46:9f:78:a7:c7:62:ff:dc:f7:
ea:11:e5:36:59:8b:53:fe:6a:97:5c:b0:fb:2b:41:
02:8a:bb:7d:4b:cd:4f:e2:83:9b:fe:f6:cf:f9:42:
72:c1:c0:f1:f4:c4:15:ef:0b:d5:66:c9:be:07:52:
73:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5B:E8:4B:DD:4F:BB:80:20:6B:A9:E8:89:8C:39:6C:A5:16:A2:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/fbcbc979-508c-3817-875e-b09290cd0752.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
X509v3 Authority Key Identifier:
keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
sbgp-ipAddrBlock: critical
IPv4:
64.226.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:0d:8d:6d:1e:82:13:9b:eb:5c:2a:b0:b5:a9:e2:fd:be:ad:
d3:e3:e1:82:db:7e:b8:77:d6:08:93:a7:9b:55:a8:93:9a:13:
1e:d6:2e:7a:fe:7f:9b:ab:b1:af:ff:52:f1:2d:ff:03:e7:90:
fa:cd:19:55:89:d8:e9:1f:98:9b:61:0e:58:44:65:ec:96:16:
c3:31:fd:cf:3b:8d:12:42:71:14:cc:d7:2a:87:ff:b1:af:dc:
35:88:6f:34:c9:b9:9f:6f:c3:0f:c6:d3:9f:84:e7:73:ac:82:
b1:41:32:65:a2:3e:4b:8b:6b:b7:97:38:a1:56:af:66:78:02:
8a:1a:bb:63:bb:04:71:a4:b4:da:c7:65:1e:16:9e:c8:61:54:
bb:16:a7:2e:f2:b9:dd:db:47:15:b7:6d:ae:e9:cc:33:a8:73:
41:8f:cd:c2:41:3c:4d:98:fb:47:c7:84:23:71:c7:57:f7:c1:
38:02:6a:60:cb:61:f7:3c:e4:eb:5b:8d:a5:9f:1f:a8:cc:2a:
71:73:9b:90:4d:c6:b6:c7:9d:57:a1:74:45:ff:d9:96:a3:6b:
fe:87:73:17:7b:74:11:49:66:89:0e:3c:9b:14:c7:82:17:d0:
43:78:7a:eb:51:bd:c8:21:55:ad:f7:7a:5c:d3:92:bb:7f:d8:
59:41:f5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:22:04 2025 by rpki-client