Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/7faaa644-74d8-3ee9-93c1-5c6530fbc933.roa
File: 7faaa644-74d8-3ee9-93c1-5c6530fbc933.roa (raw, json)
Hash identifier: K8WueROaoZzDzl54Dl1zrXcUOrE6ZtZn8o6suuf9b6o=
Subject key identifier: 92:1A:18:7A:1D:21:7E:DD:C6:58:78:67:90:4B:D9:44:AF:58:7D:59
Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial: 010D0C9F43285848EF613D61AC6BA6CD02A68500
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/7faaa644-74d8-3ee9-93c1-5c6530fbc933.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 2734
IP address blocks: 67.212.148.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:3d:61:ac:6b:a6:cd:02:a6:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=c8ecb801-4b71-4cbd-9904-76f95e164897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4d:ff:6b:78:57:0a:14:00:4b:7a:27:aa:95:
07:30:31:0f:4d:97:b3:f5:f3:50:1d:2b:74:6c:13:
34:8e:ec:89:a5:7f:2a:f9:e4:85:8e:e9:a6:aa:7b:
96:52:a7:19:44:6c:ad:35:81:1f:18:fa:ce:8b:cb:
ac:3d:74:ed:e5:3c:fe:17:b5:ed:ac:e5:d9:25:75:
66:e5:e8:9e:bb:e0:84:6f:f5:ea:6d:1f:15:d3:a1:
84:99:ed:a2:6f:ff:b9:22:97:70:4b:2c:75:7f:a5:
62:f2:19:a6:43:5f:4e:80:24:76:85:56:7a:e4:84:
78:77:2b:ec:d5:01:28:ef:51:c6:33:ee:a4:95:46:
62:07:4f:04:42:57:02:88:31:8a:7b:82:d6:2d:2e:
82:e5:88:62:40:8a:f0:41:47:66:2e:73:bd:58:29:
e3:74:64:44:52:09:74:da:77:2a:b5:a4:5f:5b:34:
bd:91:16:88:6b:d1:96:a5:94:94:3e:e5:32:5b:e9:
74:76:59:05:93:01:96:8c:e0:5c:a5:d5:c1:c9:a3:
a4:bb:bc:5e:14:83:b0:20:7f:2d:f4:22:36:b8:64:
4f:9f:3c:5d:4f:6d:2a:49:6a:ac:7a:ae:31:38:25:
8c:7b:74:58:d5:ea:c2:fa:63:65:3c:3f:a3:96:cf:
47:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1A:18:7A:1D:21:7E:DD:C6:58:78:67:90:4B:D9:44:AF:58:7D:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/7faaa644-74d8-3ee9-93c1-5c6530fbc933.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
X509v3 Authority Key Identifier:
keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
sbgp-ipAddrBlock: critical
IPv4:
67.212.148.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:fa:b5:f5:29:f4:d2:5c:52:58:7b:18:56:00:0c:85:ae:ff:
46:d2:2d:19:2a:15:cc:88:0d:38:2f:70:f5:b6:6a:ed:42:8e:
e0:78:06:fb:c2:4a:4b:85:07:c3:97:74:14:f4:80:c3:53:7a:
0e:e7:08:b0:2d:4b:ac:f0:9f:bc:a7:f5:b0:df:05:6e:30:44:
59:8e:3d:64:55:0b:70:91:7c:b7:cb:e3:5f:e8:aa:46:61:87:
38:1a:48:5a:e6:54:b2:96:7f:c9:16:92:03:b3:0d:02:8d:bf:
d5:0a:a9:a6:82:78:98:72:07:3f:a3:27:72:1a:85:6e:ef:1b:
30:04:b1:2d:79:84:ec:cb:20:16:0c:86:a0:80:16:f1:2f:ab:
30:74:4e:4f:8a:ad:50:ef:4e:cc:df:a8:9e:9d:50:59:d6:07:
f6:65:98:c0:29:f5:0b:e2:34:47:23:b5:35:93:b1:68:7d:d5:
70:d8:ae:4c:c9:0d:66:23:ec:c2:3b:bc:c3:5c:a5:af:f4:94:
0c:90:05:95:81:2d:13:1c:21:b2:8d:e0:da:b4:68:40:63:a0:
b4:58:32:ad:14:07:53:18:6b:ce:5e:a5:c1:49:a4:95:cd:7a:
a8:a3:44:fe:b4:f5:a6:83:31:bf:2f:72:9a:4c:3e:8a:36:ab:
23:db:33:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:03:48 2025 by rpki-client