Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/aa1ef16a-31d8-3a69-a070-8a6f086b417b.roa
File: aa1ef16a-31d8-3a69-a070-8a6f086b417b.roa (raw, json)
Hash identifier: Cl8+6J4cTDitHgIEZ6dM9O53sLXQFvKm3wSLy4ibwXE=
Subject key identifier: BD:81:5F:83:E0:10:C7:8B:FA:FB:3C:8D:B7:3B:4C:EE:8D:77:B2:37
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F432858493C093E7C6F3BF44C0D2D1580
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/aa1ef16a-31d8-3a69-a070-8a6f086b417b.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 15204
IP address blocks: 64.33.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:3e:7c:6f:3b:f4:4c:0d:2d:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=e8a9ae65-8013-4cc5-943b-8b2df2aa6c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:10:98:8a:bb:47:1d:18:34:ef:1c:a7:1b:f4:
fd:1d:da:da:3b:47:4e:0b:08:31:87:13:eb:bc:ee:
4d:d7:fb:a0:47:ee:dd:00:d7:7c:d4:17:d4:b0:d0:
da:3f:f5:f3:90:a0:54:38:a1:3e:00:22:75:cd:79:
93:37:dc:96:ce:99:53:5f:de:0b:b7:86:6d:ee:a0:
16:22:b7:89:6a:a5:fe:cf:ae:15:fd:fc:35:72:93:
ab:19:7f:73:04:1b:15:9d:b1:75:3e:8c:0d:70:24:
5c:d6:6c:c1:8a:9a:ad:2e:a5:3a:3a:fb:ca:34:f7:
c1:e2:64:aa:01:66:60:f8:03:8f:e0:bc:78:07:88:
e7:75:d5:f7:a0:31:a1:41:1d:25:ff:47:1f:38:3a:
60:0b:f1:f4:79:8a:61:cb:04:02:83:85:56:57:8b:
05:9b:5d:c7:93:7f:0e:f7:8a:7e:d2:18:ae:ec:60:
60:05:3c:bc:4b:2c:43:c7:46:45:31:61:97:de:9a:
3b:07:f9:ac:52:3c:29:44:31:3d:95:b6:2b:1c:5b:
21:be:71:2d:d3:bc:b2:69:12:9c:f3:db:00:81:6e:
81:11:71:2c:48:98:ff:16:f9:9c:11:66:57:47:4c:
8c:30:94:d3:96:cb:b8:83:ec:ff:09:b3:a6:14:81:
32:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:81:5F:83:E0:10:C7:8B:FA:FB:3C:8D:B7:3B:4C:EE:8D:77:B2:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/aa1ef16a-31d8-3a69-a070-8a6f086b417b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
64.33.224.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:51:03:6f:dd:31:87:9a:a7:a9:e0:fd:3f:91:32:6d:78:70:
ef:c3:12:aa:5a:40:84:3d:e2:ba:bf:f1:ba:5a:fd:96:ee:3f:
d1:5e:d1:3c:02:34:f8:57:f0:a5:b7:75:df:5d:d2:c9:3b:42:
ee:06:ea:b4:25:20:6d:26:39:c2:2c:ea:f5:e7:ab:cf:3b:90:
4c:69:8a:0f:8c:e8:65:aa:39:e1:6e:e4:02:ea:21:c7:b8:b8:
f9:b8:d8:c2:ea:45:7b:fa:3b:43:3a:67:aa:f0:eb:33:40:04:
a1:9f:4d:d1:65:b2:aa:35:2f:f1:e2:e5:7f:36:61:f7:75:e3:
24:ec:5f:68:f9:a9:11:56:e8:20:7c:8e:74:ea:57:d8:28:8b:
dc:b3:53:05:73:85:50:ae:c6:d0:3a:e3:ff:95:86:73:b5:e1:
d6:3e:81:6e:54:49:cc:ff:dc:54:22:42:55:4d:59:0e:f5:db:
30:90:1d:46:a3:41:9a:d8:21:c4:e0:f6:88:54:92:b1:a5:c0:
b9:a8:a9:77:56:1c:be:2d:ee:08:b9:cd:46:32:cd:45:be:e3:
a7:39:00:3e:52:39:d3:5f:0c:1f:d1:bd:ad:45:70:e9:29:bd:
d4:d5:c4:5c:8a:84:3d:02:1c:b8:6c:13:b8:3b:75:b6:a6:e6:
67:b7:ab:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:03:23 2025 by rpki-client