Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3ae91796-d0c5-382c-af8b-cc422804c680.roa
File: 3ae91796-d0c5-382c-af8b-cc422804c680.roa (raw, json)
Hash identifier: gQMqilB7/MQZdeZBv6c55UNPESajZXJoFi1YojxUiYk=
Subject key identifier: 70:11:10:58:9A:B6:9E:B3:8D:4B:58:DA:72:1D:B1:AF:00:23:35:22
Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial: 010D0C9F43285848D21138506DB1DBD8B526F8A8
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3ae91796-d0c5-382c-af8b-cc422804c680.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 63062
IP address blocks: 67.44.112.0/20 maxlen: 24
174.32.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:38:50:6d:b1:db:d8:b5:26:f8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=61a0fb30-6f65-4ee6-a38e-7746438a6280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:74:30:22:51:f3:07:a8:35:a2:f0:0a:d1:94:
20:75:81:7f:11:a8:c1:61:4f:c6:8f:07:84:56:5d:
a8:de:25:de:19:0d:02:7a:3e:10:9a:c3:24:b9:7e:
52:db:de:0f:de:d8:d7:a6:f4:cb:1d:e2:7e:32:97:
66:ff:79:cf:45:28:ec:c1:dd:61:3b:0b:18:6b:03:
a8:b2:2e:87:9e:80:4a:21:ff:37:3e:9d:6a:bf:1e:
59:61:68:02:da:6d:f9:49:d0:2c:1e:d9:e5:77:84:
c1:a1:dd:fa:15:94:83:35:bf:d2:70:a8:f8:3e:bd:
5a:0c:c3:1b:1c:34:75:4b:f6:07:64:f1:f8:52:ea:
fb:01:2b:59:2e:62:ed:ca:a2:2b:9a:39:62:e3:d9:
13:dd:d5:12:5f:43:42:4d:1a:13:74:48:42:75:aa:
96:34:91:dc:b3:f4:2b:10:f3:3e:1a:2c:70:a9:35:
8a:fb:8f:6d:fb:60:7f:42:3f:7f:48:44:d4:38:32:
a4:dc:5a:b1:11:f8:cb:58:f0:65:83:96:f7:13:d3:
a9:ea:4a:f8:b9:7f:1d:c7:d8:5e:28:7d:81:67:ba:
0d:d8:2e:b9:bd:da:9a:19:c8:4f:e7:21:67:b0:3c:
9c:19:1a:fa:35:fd:f4:68:68:d3:89:71:92:7f:44:
92:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:11:10:58:9A:B6:9E:B3:8D:4B:58:DA:72:1D:B1:AF:00:23:35:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3ae91796-d0c5-382c-af8b-cc422804c680.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
X509v3 Authority Key Identifier:
keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
sbgp-ipAddrBlock: critical
IPv4:
67.44.112.0/20
174.32.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:7f:9a:d6:3a:5f:10:5d:a9:66:cf:d7:62:d0:20:16:b8:d4:
f8:2b:77:ee:4a:8c:97:c1:f6:89:34:c8:be:9c:82:11:bb:b6:
44:1b:c3:68:c5:a9:7a:88:bb:ef:05:15:21:6e:d7:01:f4:32:
d4:37:ac:f2:af:a0:df:68:1a:82:89:ac:6d:a8:59:9d:9a:5a:
e9:80:34:19:ef:88:c8:6d:c2:a4:8f:8f:f1:f3:02:a9:af:2e:
3f:df:c2:a4:12:cd:f9:13:fc:5e:92:2e:b6:47:75:7e:11:0f:
a2:34:f5:bf:dc:b1:92:2d:64:7a:79:d2:12:89:ca:ba:a1:bc:
cb:d3:3a:29:f1:e9:0f:1b:29:a7:ca:f0:b3:b4:fc:bd:e0:86:
2b:25:9e:4c:84:84:23:7f:52:41:a3:62:c9:60:78:61:84:98:
a2:cc:6d:e8:6b:b3:cb:c1:c0:e5:0a:2b:0e:6b:08:07:18:96:
34:c6:da:d1:2d:24:0e:7f:56:7c:f1:4e:16:f5:0f:08:44:5c:
19:69:55:fd:78:24:b3:8f:e2:a9:a6:d3:6c:ed:f1:9d:56:c6:
9b:d0:8f:34:26:83:72:ee:75:70:00:b5:cd:03:cd:0b:26:dc:
7e:c5:72:24:52:5d:b5:f8:de:1c:dd:ec:2e:10:d8:80:af:a0:
47:b1:77:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:01:13 2025 by rpki-client