Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b85217d2-cf34-3541-9bb3-337ec5d5357e.roa
File: b85217d2-cf34-3541-9bb3-337ec5d5357e.roa (raw, json)
Hash identifier: VSpc5z6NbwcB+Zt+gLhg+cCrrK6Vsc9dGy74xWPqGv4=
Subject key identifier: 27:2A:F9:B7:45:71:B4:ED:D7:A8:82:55:E5:0A:0F:98:11:FC:B0:49
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B51BD8B7A6A90D603B4000
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b85217d2-cf34-3541-9bb3-337ec5d5357e.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 67.71.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b5:1b:d8:b7:a6:a9:0d:60:3b:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=1e14f73e-0e5a-4a26-be78-f39ee9a8c046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:95:31:e8:ad:35:e9:cc:1c:8e:46:f6:03:ba:
95:2e:56:ce:38:21:54:2e:e8:fe:ee:1d:37:a7:fb:
08:b2:98:e2:8c:f4:6a:cc:55:f6:f4:1a:8b:1a:2e:
43:f1:1f:1a:42:c2:c4:cd:ea:9d:2d:0b:84:53:1c:
f5:f8:8d:2c:6f:55:6e:4b:4d:b6:75:2a:1f:4d:64:
79:6a:78:e0:d8:3d:a0:36:75:29:8e:12:5a:9a:92:
79:95:14:a3:33:50:23:98:dd:5b:d3:ec:31:88:32:
d4:08:7c:c3:fb:70:16:ba:b0:c8:d9:40:76:8a:65:
f1:13:43:58:8c:8b:b3:b1:3c:6c:a6:6d:d5:bf:4b:
07:ac:43:66:1e:c9:59:2f:77:77:34:ad:0b:fd:02:
22:ed:33:28:2e:c7:89:81:6c:4a:af:27:3c:fb:6a:
49:d7:bd:41:54:82:55:88:28:53:b6:30:e3:13:3b:
f5:b2:0a:ba:f4:b1:27:53:02:50:e5:79:53:77:38:
ca:11:9c:d3:b7:22:ec:4b:f3:35:79:66:81:fc:b4:
43:59:4b:ed:42:6b:9a:30:1e:a8:5b:72:38:ef:fe:
92:bc:72:4a:b0:b5:94:45:d9:b4:7d:e1:32:41:96:
28:78:fd:41:55:03:cc:17:0a:3f:d8:c5:5c:af:3c:
8e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:2A:F9:B7:45:71:B4:ED:D7:A8:82:55:E5:0A:0F:98:11:FC:B0:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b85217d2-cf34-3541-9bb3-337ec5d5357e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
67.71.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:97:06:4d:ad:b0:a6:ba:b0:a2:ef:1a:ba:31:dd:e1:8d:41:
99:91:2d:4b:90:56:af:05:ca:dd:7f:aa:1a:e8:48:d2:81:34:
86:55:79:d1:11:02:6b:15:f1:2b:7d:3a:3a:0e:97:8f:d0:69:
e3:fd:c7:5d:3c:d3:f4:ec:d5:87:5a:7a:5a:c3:bc:54:dd:63:
53:5a:9a:3c:e4:9a:0d:fc:00:79:80:ef:94:6b:32:cb:b0:66:
d2:0b:86:3e:de:be:b9:ae:6d:97:f4:94:02:44:68:a4:51:01:
f1:14:62:7f:e9:dd:5a:e8:89:d9:40:5d:68:a0:3d:bd:76:cd:
51:54:11:b8:80:cf:ca:a2:68:ef:cf:e2:7c:de:a3:6f:0b:1e:
a6:3c:2a:86:05:eb:00:fe:a7:f8:0e:ed:9d:25:ba:bb:4a:54:
15:12:57:a0:d6:86:89:65:59:d5:c1:1d:b3:12:92:5d:55:8c:
d6:a4:35:69:44:08:3a:a1:be:fe:db:ef:f6:2e:0f:2e:00:a3:
ba:74:67:32:88:bd:34:6c:f7:8b:ea:57:58:b3:c6:97:4e:52:
d7:e5:6e:d8:84:bf:c0:be:14:76:8c:ff:c8:8e:9d:ae:a4:7e:
40:8c:d5:98:21:0c:e7:9d:c8:03:25:d6:d7:d5:7a:cb:92:27:
d9:84:ea:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:30:48 2025 by rpki-client