Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/3b3e3a8e-6248-36b9-b779-71b2e7044d06.roa
File: 3b3e3a8e-6248-36b9-b779-71b2e7044d06.roa (raw, json)
Hash identifier: 1E9OUWQKlvG53XbZxgfVDxkchg8SQi880DAxtZAsbds=
Subject key identifier: 4A:3C:80:4F:99:8B:2C:18:9E:63:1E:30:25:00:D1:7B:5F:5A:4C:58
Certificate issuer: /CN=95bf95d5-1c9b-4cea-8142-cc1a4699c7a6
Certificate serial: 010D0C9F43285848185056813467F7DB51D23580
Authority key identifier: 2D:1D:DA:46:69:82:E9:F8:0F:75:BE:05:B0:1D:D6:EE:83:AC:62:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/3b3e3a8e-6248-36b9-b779-71b2e7044d06.roa
Signing time: Wed 04 Dec 2024 13:08:10 +0000
ROA not before: Wed 04 Dec 2024 13:08:10 +0000
ROA not after: Tue 04 Mar 2025 13:08:10 +0000
asID: 22018
IP address blocks: 69.64.96.0/20 maxlen: 20
209.25.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:50:56:81:34:67:f7:db:51:d2:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95bf95d5-1c9b-4cea-8142-cc1a4699c7a6
Validity
Not Before: Dec 4 13:08:10 2024 GMT
Not After : Mar 4 13:08:10 2025 GMT
Subject: CN=47c1d9d7-f140-406b-a28d-677dd32f1d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d5:f1:43:58:a3:2c:b1:bc:2d:ee:f7:60:4e:
e4:f7:f4:17:e9:09:d2:86:0e:ad:a4:02:59:d0:91:
fa:ec:8f:e4:02:f9:64:aa:18:45:87:56:3e:8d:eb:
38:18:f5:e2:c9:e3:33:73:6b:7b:d6:ae:0e:f3:27:
70:1b:a4:0f:c5:61:9b:07:91:38:90:2a:6e:4b:a6:
06:c1:66:ca:2d:93:ff:c8:bb:fb:90:b6:e0:e0:db:
2f:5e:d8:57:4c:30:ce:8c:d2:6b:0e:5c:14:7f:42:
d8:f6:ad:7c:02:29:e9:d0:5f:2c:8c:74:38:65:64:
15:1e:f3:5f:54:1c:f1:b0:dd:fa:ce:75:c0:c1:76:
36:85:5b:e0:01:e9:94:f6:72:99:b9:27:64:90:22:
95:3a:8a:ab:cb:03:da:f5:7c:ca:09:0f:47:21:0f:
d3:7e:58:25:02:3e:f3:24:df:a7:d9:0e:71:94:76:
18:43:f8:e4:f0:81:72:df:8c:d9:6b:8e:db:4b:45:
10:f5:f6:0d:f3:2a:87:d3:7f:cc:b2:14:c5:46:93:
0a:06:2c:02:91:4a:ee:66:56:13:22:f9:b4:de:23:
26:92:72:0d:86:53:62:d6:9a:69:d0:6d:46:0f:58:
09:b3:89:4c:e7:fb:fb:08:7b:ed:dd:90:0c:89:ab:
6f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3C:80:4F:99:8B:2C:18:9E:63:1E:30:25:00:D1:7B:5F:5A:4C:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/3b3e3a8e-6248-36b9-b779-71b2e7044d06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.crl
X509v3 Authority Key Identifier:
keyid:2D:1D:DA:46:69:82:E9:F8:0F:75:BE:05:B0:1D:D6:EE:83:AC:62:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95bf95d5-1c9b-4cea-8142-cc1a4699c7a6.cer
sbgp-ipAddrBlock: critical
IPv4:
69.64.96.0/20
209.25.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:87:8a:55:64:93:00:9b:8f:67:d3:72:3f:f6:af:14:f5:7f:
9b:51:fa:ef:45:bc:2d:30:26:f5:86:e0:b4:94:3e:f9:a5:e8:
e4:b8:e3:8d:d1:51:e8:af:e4:bd:8c:5c:12:bf:11:9e:f8:51:
6f:10:e2:3b:cb:18:75:e5:8f:b4:d0:a6:25:7c:a8:29:d6:0d:
0e:2a:2c:17:85:ef:1e:49:c5:a0:a0:9d:95:1b:27:0d:ef:a3:
8b:00:fa:69:3c:6e:17:2c:94:af:26:0d:b6:84:0f:7d:5d:a3:
6d:2e:41:3b:ef:78:8e:bf:ed:50:9c:ae:7c:07:33:73:81:68:
77:a4:85:d3:ba:ff:5a:ae:1c:8a:dc:a4:de:f0:09:97:8e:8f:
82:27:de:fc:a8:b2:37:19:20:24:be:08:c8:5c:55:95:be:40:
09:c9:58:47:6b:74:57:24:4e:f0:81:ca:fa:d2:22:6c:9a:71:
e0:b2:5d:79:4f:c5:cf:63:36:53:c9:4a:bc:3b:62:ad:88:2f:
7e:1e:aa:e8:d9:98:1c:7a:31:bb:64:d6:76:94:88:ca:1d:78:
bd:d2:be:ae:e0:5c:b2:0e:47:06:a7:54:71:5d:8d:9e:61:b7:
12:e9:e1:de:02:3b:aa:c6:b0:7b:24:6a:e2:e3:d6:86:df:9b:
a6:44:47:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:13:26 2025 by rpki-client