Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa
File: 4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa (raw, json)
Hash identifier: zMVTCDqvMnQYy7HRJVNsnyKGeSM9hm4eyFLxoYfpwes=
Subject key identifier: 62:56:47:86:C9:99:60:53:3F:5B:A7:91:09:DB:0D:EE:6B:11:20:46
Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial: 010D0C9F4328584950F9628EF84C08B8F1A17C80
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa
Signing time: Wed 26 Mar 2025 13:00:53 +0000
ROA not before: Wed 26 Mar 2025 13:00:53 +0000
ROA not after: Tue 24 Jun 2025 13:00:53 +0000
asID: 395092
IP address blocks: 64.28.236.0/23 maxlen: 24
172.96.136.0/22 maxlen: 24
2607:a680:3::/48 maxlen: 48
2607:a680:7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:50:f9:62:8e:f8:4c:08:b8:f1:a1:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Validity
Not Before: Mar 26 13:00:53 2025 GMT
Not After : Jun 24 13:00:53 2025 GMT
Subject: CN=86025c3a-fddf-41e8-942b-09a1c95aa0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bd:2f:e1:b1:23:0c:86:a2:2b:ec:b3:8e:32:
4c:55:f8:9f:1f:1b:c8:7a:36:ff:87:c9:14:07:17:
cd:cb:74:e2:05:c3:3b:e6:38:74:71:10:18:7d:6d:
37:ab:52:f2:97:0f:d1:da:6a:c9:b6:14:45:27:ef:
d6:c6:bd:1f:c4:36:6f:98:c6:60:3a:ae:57:a4:3d:
78:51:7b:2f:98:11:91:70:7f:63:c4:e6:0b:f9:5c:
5c:6a:20:b7:79:77:6d:a5:bd:d4:21:5d:b5:cb:e2:
31:f3:51:7a:5c:34:c2:6d:3e:b5:ae:5a:9c:a4:96:
61:4f:33:aa:cd:ee:77:40:60:a6:b8:98:58:73:bb:
80:fa:4f:43:a9:61:0a:97:80:70:09:4d:7d:a3:86:
bf:42:f2:c9:ee:95:ca:09:5a:85:e6:69:54:a0:cb:
81:d3:1f:f5:71:d0:d6:96:20:3f:9f:79:ba:bd:76:
50:08:0a:eb:80:a5:dc:e4:25:3d:4b:bc:44:5a:e1:
1f:50:71:4e:85:b6:bf:46:7d:c1:92:04:ba:98:a5:
23:c6:f2:ca:28:93:7a:ef:fb:90:f3:28:42:1b:8f:
24:e2:67:a7:32:4e:80:cf:35:d6:b9:6a:b5:49:94:
d4:ce:fe:af:10:f3:10:44:1d:36:05:20:59:47:c1:
58:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:56:47:86:C9:99:60:53:3F:5B:A7:91:09:DB:0D:EE:6B:11:20:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
X509v3 Authority Key Identifier:
keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
sbgp-ipAddrBlock: critical
IPv4:
64.28.236.0/23
172.96.136.0/22
IPv6:
2607:a680:3::/48
2607:a680:7::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:24:12:e4:ba:82:34:cf:50:f8:32:89:0a:dc:f9:06:e4:5e:
28:43:ab:da:29:dc:83:28:63:f6:8e:45:1e:14:75:a6:82:14:
9a:2a:1f:40:1c:eb:21:ba:6b:b2:8f:25:db:84:ab:e4:6f:58:
1d:d3:62:7a:23:0f:a1:ab:8f:b5:d5:ca:27:a9:2f:92:d1:6a:
83:65:e1:b9:aa:a7:36:e9:72:9b:a4:37:c9:c7:3d:1f:38:5f:
ed:fc:57:e0:0f:6a:44:a8:38:03:78:2d:8b:da:6f:eb:6a:7b:
7d:24:a6:2e:4a:45:7f:92:34:6c:96:30:d8:36:9f:b0:9d:5d:
8c:08:24:7e:95:98:9a:dc:55:10:8d:e6:5c:c2:90:ac:df:df:
cf:f2:cf:5a:1b:16:4e:ae:20:07:a3:06:70:44:e7:1a:81:c8:
84:dd:1e:c6:89:30:1a:cb:2a:40:37:1c:c1:a4:7d:5d:28:37:
04:cb:66:60:5f:cf:df:97:00:27:2c:11:6f:1d:9e:2d:43:54:
45:87:bc:e8:97:eb:39:d4:a8:43:76:a3:08:95:8c:bd:b7:63:
fb:a6:94:04:c5:41:dd:24:d1:d2:d3:45:b5:41:c8:f7:c8:bc:
e0:e6:a9:81:a4:e5:34:90:55:da:3c:ad:43:a7:cc:29:77:c3:
1f:af:cd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:30:20 2025 by rpki-client