Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/aacdbaa6-ec6f-3a9c-bd9d-b1785fba835f.roa
File: aacdbaa6-ec6f-3a9c-bd9d-b1785fba835f.roa (raw, json)
Hash identifier: hzjgQDryowDAKGzoXv7U4ltL5RTtvLSaOpAqsPttWxY=
Subject key identifier: 4E:30:F8:31:01:C2:0C:B8:49:7D:6C:87:B9:26:07:3B:15:4B:E0:95
Certificate issuer: /CN=e78d9e3b-7aed-4f65-85b4-120ec0a9ede3
Certificate serial: 010D0C9F432858487CEB2DE517A25E3772277080
Authority key identifier: CB:31:32:7B:67:42:3C:B0:C4:2D:66:22:9B:33:A1:EC:77:FA:9C:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/aacdbaa6-ec6f-3a9c-bd9d-b1785fba835f.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 11059
IP address blocks: 64.234.228.0/22 maxlen: 22
136.175.64.0/23 maxlen: 23
199.202.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:2d:e5:17:a2:5e:37:72:27:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e78d9e3b-7aed-4f65-85b4-120ec0a9ede3
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=c8593268-54d8-4d9f-abb6-4eb4ddec997e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:16:0a:2d:37:da:25:fb:8d:97:49:cd:4d:2a:
28:4d:22:33:b9:37:32:5c:47:8d:bf:fe:83:e9:73:
1f:4a:24:d6:0b:67:03:e9:5d:0b:b2:c2:eb:c1:d0:
b6:79:12:20:3d:2d:7c:83:a8:c7:6c:43:33:9e:76:
27:ea:f8:1e:2e:f1:20:51:4d:6d:ba:f4:6c:9b:eb:
00:54:ad:5f:d6:39:95:7c:a4:04:05:fb:91:00:6d:
be:4f:4d:c7:16:b3:e6:f3:b2:c0:4b:37:f6:ba:c1:
30:0e:ae:8f:b6:ec:68:af:e0:2a:85:5c:f6:ba:f6:
75:64:73:34:5d:0c:78:6d:9f:0c:1b:3b:9e:59:85:
86:3b:c9:96:5b:03:4e:41:ec:33:fe:47:31:d4:8e:
6f:f5:99:6c:b2:26:24:ed:73:6c:35:56:0d:eb:99:
2a:f7:9b:d8:ad:e7:2c:70:0b:43:28:e8:e8:45:f9:
c5:17:c3:f2:65:d3:b9:f3:c3:16:b2:49:26:5c:52:
06:b3:ed:53:76:37:77:83:b5:c7:4a:52:f0:07:0d:
8b:21:ea:fb:de:ed:21:c2:80:4e:ad:6c:85:f3:c2:
90:d0:47:30:89:40:cc:90:5b:04:db:b1:ff:ad:23:
20:8b:3d:76:4d:02:8c:2b:56:bc:0e:03:88:67:e8:
2a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:30:F8:31:01:C2:0C:B8:49:7D:6C:87:B9:26:07:3B:15:4B:E0:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/aacdbaa6-ec6f-3a9c-bd9d-b1785fba835f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.crl
X509v3 Authority Key Identifier:
keyid:CB:31:32:7B:67:42:3C:B0:C4:2D:66:22:9B:33:A1:EC:77:FA:9C:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.cer
sbgp-ipAddrBlock: critical
IPv4:
64.234.228.0/22
136.175.64.0/23
199.202.224.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:a4:20:83:58:bf:72:1d:69:25:97:35:a6:72:74:62:f5:44:
64:0d:8d:6f:93:67:24:ce:86:ec:9f:aa:91:dc:e5:cc:8e:a3:
9a:02:26:64:e9:11:5b:90:b4:a6:34:5b:35:42:09:ef:73:19:
f8:eb:35:ed:6d:3b:9e:5f:93:00:b9:13:84:73:31:9d:ac:0b:
36:bf:6e:2d:95:06:e4:d4:a6:a6:be:d2:57:e2:0f:85:35:c6:
af:79:85:f9:95:fc:66:53:76:1f:8f:be:ea:cc:5c:02:65:a4:
f2:83:35:ac:1a:56:95:58:0b:c9:44:22:9b:ac:ff:92:89:f4:
01:55:3d:65:0c:d6:1d:b0:86:31:aa:04:2a:06:04:b3:06:c8:
4b:63:77:87:68:1c:27:07:14:c6:72:ea:63:26:ec:e6:81:b0:
2b:6b:1d:8f:b7:02:6b:9e:19:aa:aa:cb:54:d6:df:78:2f:9d:
63:78:e7:25:e9:26:b3:aa:ac:ed:5e:a9:9b:59:cc:f3:aa:aa:
27:1c:4e:2f:d0:30:97:19:7f:bc:e7:48:87:ed:df:e4:d0:50:
56:57:5a:c0:3d:05:47:ab:46:83:3f:02:02:c0:9c:9b:0f:a1:
b4:5c:7d:22:5b:9e:b1:a5:53:a6:e5:26:11:68:82:8d:c6:d1:
1b:3c:9d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:07 2025 by rpki-client