Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3/09472c5c-b474-3fb1-a065-3b3b2775c1cd.roa
File: 09472c5c-b474-3fb1-a065-3b3b2775c1cd.roa (raw, json)
Hash identifier: lET0iCV5dZCvyapRfwDU8vJFk5twaxiTNRwRd8H4QpU=
Subject key identifier: B8:98:C4:B2:01:3E:68:AF:92:B6:6A:03:53:D9:C2:1D:58:F2:27:C9
Certificate issuer: /CN=80798c37-59e6-4f3d-8d45-7e18859c93e3
Certificate serial: 010D0C9F43285848D7A64E18B2226465274D9780
Authority key identifier: D5:53:97:C5:37:33:20:43:62:BF:46:62:74:15:77:2C:AF:06:F8:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3/09472c5c-b474-3fb1-a065-3b3b2775c1cd.roa
Signing time: Tue 11 Feb 2025 02:00:39 +0000
ROA not before: Tue 11 Feb 2025 02:00:39 +0000
ROA not after: Mon 12 May 2025 01:00:39 +0000
asID: 20419
IP address blocks: 66.133.64.0/21 maxlen: 21
192.132.8.0/24 maxlen: 24
199.21.152.0/21 maxlen: 21
199.96.112.0/22 maxlen: 22
208.92.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d7:a6:4e:18:b2:22:64:65:27:4d:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80798c37-59e6-4f3d-8d45-7e18859c93e3
Validity
Not Before: Feb 11 02:00:39 2025 GMT
Not After : May 12 01:00:39 2025 GMT
Subject: CN=67a1ad84-73b2-4d89-bae3-c69c81e5e1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:fa:95:64:3e:cc:a6:9b:65:3f:d1:34:b4:f0:
62:1f:07:d0:39:f0:b1:7d:df:88:fa:82:22:8f:f0:
d3:45:42:7f:82:ad:af:a8:1c:fa:5d:a3:75:00:89:
6c:7a:9e:c5:0c:f5:3c:54:18:f4:05:ef:3a:b8:9c:
a9:f0:16:60:79:af:b3:84:3c:01:cb:38:1a:79:cb:
2e:91:45:13:e7:3f:21:37:16:a2:c5:b7:6c:3d:9e:
f7:a7:fd:a9:3b:af:c2:b3:eb:71:65:fa:37:d9:43:
67:6b:39:88:2a:81:78:10:de:b3:e7:1b:62:a6:c5:
4c:b5:bd:34:1b:69:6c:ce:49:07:b1:5f:a7:39:59:
92:bb:af:d1:d4:2d:47:e9:a0:d5:3b:04:5d:e9:a6:
f0:c6:9a:43:54:31:ee:e2:5c:55:af:1b:7f:11:0e:
1d:f0:b3:96:be:d0:c6:94:95:57:8e:95:80:f4:d2:
4c:07:bf:b3:1f:8e:e4:bb:8f:2c:fe:b6:2d:7f:89:
c5:13:c6:cf:21:40:db:24:4e:34:55:44:d7:05:cf:
41:c2:ec:27:3e:52:b0:b0:7a:84:11:b9:11:ac:39:
bc:0f:91:24:42:88:28:a2:5a:a2:c6:e3:1c:18:2a:
e8:48:8c:0d:de:87:44:b6:9a:22:b2:aa:2e:25:a4:
ea:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:98:C4:B2:01:3E:68:AF:92:B6:6A:03:53:D9:C2:1D:58:F2:27:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3/09472c5c-b474-3fb1-a065-3b3b2775c1cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3/80798c37-59e6-4f3d-8d45-7e18859c93e3.crl
X509v3 Authority Key Identifier:
keyid:D5:53:97:C5:37:33:20:43:62:BF:46:62:74:15:77:2C:AF:06:F8:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/80798c37-59e6-4f3d-8d45-7e18859c93e3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.133.64.0/21
192.132.8.0/24
199.21.152.0/21
199.96.112.0/22
208.92.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:74:f5:eb:f9:00:bb:a8:8a:b7:0e:a8:fd:6f:e5:e5:16:03:
e5:fe:30:4d:c9:ea:89:b5:74:a5:1d:3f:a7:d7:b6:f5:97:9b:
1a:a9:01:35:a3:7d:39:3b:ae:08:27:8f:b0:9b:f1:43:89:90:
f7:92:a9:7e:e4:76:e9:d5:ea:d0:3f:7f:55:df:de:0e:00:ea:
11:f2:6b:fb:22:16:8e:bd:04:5b:f5:c4:df:89:13:25:62:27:
5d:a0:a6:2e:cd:cf:f3:d5:7d:dd:8c:66:b1:e6:e2:f1:04:36:
31:c7:63:c2:80:26:ec:38:e1:39:4c:04:4e:8e:58:e0:d0:2a:
ed:cc:18:52:7d:09:6d:9a:b3:c0:76:8a:fb:30:92:47:e9:43:
f8:6b:7e:2f:38:04:cf:8a:69:ce:a9:4b:a9:0d:14:45:8d:f0:
8b:46:6d:2d:9b:27:44:6b:83:7e:14:21:6c:65:2a:a1:3b:d4:
5f:b7:d0:3b:77:50:a3:4b:4d:97:84:27:4e:76:ed:e4:6f:ab:
83:78:4b:de:b6:f0:f2:97:5a:55:9e:7a:bb:ca:ac:44:9a:b5:
da:60:9a:3f:44:b5:8e:68:37:62:1e:0f:1c:5d:07:51:18:fb:
50:e0:30:83:05:46:91:a1:84:1f:3d:b5:40:75:4a:fc:d8:9b:
65:9f:7c:09
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:39 2025 by rpki-client