Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/d0192a55-432f-3594-81cd-d16e7579e4e8.roa
File: d0192a55-432f-3594-81cd-d16e7579e4e8.roa (raw, json)
Hash identifier: ZaUq4Zorm3zNTOPBKbTYmfzkw0xp5KkHPwrodXsOjns=
Subject key identifier: 3C:B3:F3:51:F8:03:8E:CE:DF:F8:1A:E2:09:1A:85:51:B9:4F:B0:E2
Certificate issuer: /CN=378928e8-c134-40aa-9858-3838053cbbe9
Certificate serial: 010D0C9F432858494733E65E97B1A3C00D550430
Authority key identifier: 05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/d0192a55-432f-3594-81cd-d16e7579e4e8.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 12261
IP address blocks: 64.253.208.0/22 maxlen: 22
64.253.212.0/22 maxlen: 22
64.253.216.0/22 maxlen: 23
64.253.220.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:e6:5e:97:b1:a3:c0:0d:55:04:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=378928e8-c134-40aa-9858-3838053cbbe9
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=96bf85ce-e868-40d7-8c95-7fe477cd64f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:91:68:58:01:ea:c3:3f:34:f7:29:31:bd:48:
bd:32:b2:03:7d:ee:41:71:f0:ce:cd:67:98:d4:a7:
9c:e5:36:06:c3:5b:a6:76:65:ba:dc:d3:77:59:9c:
bc:1b:e6:c3:da:36:f0:34:94:0b:9a:b2:22:b3:60:
f0:e8:cb:36:24:42:d8:6f:3d:51:d5:fc:7b:55:c5:
ba:4d:d7:69:62:17:0b:7a:35:98:7a:4c:af:b8:06:
6e:d1:66:96:da:81:a0:86:12:3c:57:88:c5:ae:14:
cb:c4:24:c7:ba:72:27:45:74:98:7a:88:3e:3d:18:
54:ee:40:07:16:d8:be:86:9c:28:48:c1:b2:d0:97:
34:88:38:9c:35:e2:f2:93:21:ef:77:4c:70:61:c1:
a1:f3:0b:da:89:15:1f:c1:17:65:16:4d:ca:99:0e:
a4:51:54:84:08:db:d8:13:ed:cb:e2:72:9d:8e:9f:
d2:d2:db:55:c7:81:6b:77:3b:e5:f7:ef:c2:c8:a6:
de:c4:22:e5:61:5f:cc:a7:47:71:b4:24:b2:5f:19:
44:d1:4a:84:4a:d3:a5:b4:87:dd:83:e2:f2:19:41:
22:93:ae:4a:01:ba:03:ca:64:40:2c:1b:48:ca:05:
65:93:f4:79:2c:87:62:80:6e:54:52:db:d9:ec:c8:
4f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B3:F3:51:F8:03:8E:CE:DF:F8:1A:E2:09:1A:85:51:B9:4F:B0:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/d0192a55-432f-3594-81cd-d16e7579e4e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.crl
X509v3 Authority Key Identifier:
keyid:05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer
sbgp-ipAddrBlock: critical
IPv4:
64.253.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:5d:ee:a5:a7:58:3f:62:18:7b:09:8c:b0:c8:fc:f4:ac:39:
a3:c3:fd:22:a1:7d:52:b8:54:db:d5:1b:d8:3d:4d:5b:26:13:
75:12:a0:47:3a:bf:7c:2b:e8:56:a8:e0:d4:62:2b:5b:b6:3a:
a4:e3:cf:20:c0:bb:d5:78:26:4e:fd:f7:d3:88:42:4c:f9:1d:
ea:4f:1f:43:71:e9:3b:b2:13:8b:93:38:c4:4a:db:06:2b:d6:
3f:a5:8a:29:6d:64:98:b5:41:a9:8c:00:09:55:83:ce:b7:3c:
44:1b:21:98:c8:2d:b2:5e:de:ab:b6:ca:ad:88:3f:26:20:57:
75:1a:e3:b8:3b:a6:59:58:c5:54:74:5c:8d:c5:0d:1a:39:b6:
37:af:7b:b7:57:4e:34:5e:29:06:1e:2f:be:d3:4f:a1:94:24:
a2:a0:fe:2e:56:61:a3:31:12:34:0e:5f:ae:59:04:9c:79:d0:
79:83:c5:77:b4:93:d9:cb:02:1f:b2:38:e5:df:46:de:57:0d:
83:19:d2:d9:46:f3:8f:be:95:ec:00:93:f8:a9:91:6e:d2:0f:
68:d8:7c:a1:24:8e:6b:a1:56:d6:68:ab:21:39:b5:13:f8:a9:
fb:ad:9a:a2:25:15:10:66:1d:8a:60:f4:77:6d:d1:95:eb:93:
4a:b4:af:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:22:02 2025 by rpki-client