Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/95c458cd-7579-34ee-9462-870ea766ae4e.roa
File: 95c458cd-7579-34ee-9462-870ea766ae4e.roa (raw, json)
Hash identifier: V5AWIxMarRlZuplF5Wb2enBk09RaPUgV/EnlaC74DFw=
Subject key identifier: BF:26:FB:FA:1D:62:95:3D:0D:63:A6:BB:1A:C5:9C:99:57:1E:3E:FF
Certificate issuer: /CN=928cccc8-4c1d-457b-a709-2f2c5d83c939
Certificate serial: 010D0C9F43285848E59BC0D644BBC2BDC4460740
Authority key identifier: E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/95c458cd-7579-34ee-9462-870ea766ae4e.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 16509
IP address blocks: 67.226.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:c0:d6:44:bb:c2:bd:c4:46:07:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=928cccc8-4c1d-457b-a709-2f2c5d83c939
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=01bb5a5b-99a7-489b-8000-3632caa015cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:25:bb:94:ac:09:a8:68:cc:4f:1a:73:4a:31:
5d:db:90:3e:ad:42:7a:60:05:a8:a0:06:d3:80:2b:
b9:fc:09:68:1a:00:83:65:82:41:2d:0b:92:e9:4e:
1d:fa:ad:a1:59:1a:1b:03:27:d5:d4:65:63:b4:1a:
a7:b7:38:21:77:4f:fb:86:c0:45:1b:6e:e7:11:c7:
ee:46:16:e3:c3:c8:2d:43:0d:9e:99:09:b0:bf:a3:
13:ad:56:1d:a5:1c:9a:e0:a6:4e:a4:45:4f:c4:8a:
ad:3f:c2:7a:6d:bc:a4:df:a8:98:a6:29:ba:c8:24:
c6:84:91:97:e0:da:f5:fe:a1:0b:17:f8:a3:f1:54:
6c:13:2d:da:46:cc:67:12:a4:f0:e8:01:d1:82:46:
8a:ef:14:b4:ba:32:88:70:30:d8:63:16:ec:ad:9d:
f8:39:aa:7b:48:eb:1b:51:5d:cb:dc:52:36:2e:b6:
01:37:f9:91:35:f6:d4:17:61:b6:b6:f3:8f:fa:14:
38:dd:7c:6b:6c:c8:a4:04:c8:91:96:b2:78:e5:b3:
4b:5b:db:9a:34:f4:31:15:17:e1:29:0b:97:c0:55:
af:28:54:79:51:02:12:4a:70:d5:2e:1b:79:28:85:
8f:27:3c:13:12:14:a3:73:01:5f:81:92:55:22:63:
3f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:26:FB:FA:1D:62:95:3D:0D:63:A6:BB:1A:C5:9C:99:57:1E:3E:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/95c458cd-7579-34ee-9462-870ea766ae4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl
X509v3 Authority Key Identifier:
keyid:E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer
sbgp-ipAddrBlock: critical
IPv4:
67.226.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:ef:b0:92:50:96:80:e6:d1:5c:48:c3:cd:7e:40:89:f4:b4:
7c:f6:0c:c3:35:80:16:d0:aa:23:06:b3:40:6a:2b:92:92:a2:
5d:43:4f:05:7d:74:71:82:8a:4b:1d:76:b8:fd:73:2d:7d:07:
fb:fe:5b:00:1b:6f:e6:d2:c3:92:8e:0b:2e:fc:c0:0c:5e:81:
30:86:dd:5c:bd:db:ec:db:98:46:70:60:47:01:f0:55:64:d8:
f5:63:6a:5f:2e:cd:53:7c:a7:18:bb:6b:a3:6f:cd:6b:5e:25:
60:65:4c:e6:29:fc:14:70:6a:b2:32:d3:57:c8:15:1a:1f:68:
2c:bf:ee:a5:2d:8c:8f:f6:62:f4:7b:04:4b:9a:73:c2:c5:a3:
b9:c5:44:eb:6b:ad:0d:bd:88:50:d7:61:70:7c:dd:6c:03:00:
71:e2:bb:cc:95:d9:49:61:fa:5f:0a:19:3e:63:c2:8f:12:c2:
9d:1a:ac:fb:db:60:64:91:1d:b4:90:88:1c:0f:ad:0c:c6:5b:
1e:07:ae:87:47:49:90:47:ee:2a:a8:ca:5c:c2:9b:03:3c:bc:
8e:09:97:f8:5e:06:14:7e:67:e1:4f:a7:f0:73:ab:be:a7:f8:
07:b2:31:c7:80:88:b5:c3:f0:09:74:bd:c4:0d:53:24:49:e9:
36:5a:01:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:01 2025 by rpki-client