Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/5e9c8c7e-2154-3e3d-a7ec-62bf6946265c.roa
File: 5e9c8c7e-2154-3e3d-a7ec-62bf6946265c.roa (raw, json)
Hash identifier: F8Om8qI8OT5I/davjEXXUw8zBNsU7ljjrOIFQIBflos=
Subject key identifier: 4B:40:BF:D9:9F:D0:86:F2:4A:F5:B6:54:55:03:45:C5:39:8A:D2:9C
Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial: 010D0C9F43285848D7A64D7843A6A752D39CFA80
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/5e9c8c7e-2154-3e3d-a7ec-62bf6946265c.roa
Signing time: Tue 11 Feb 2025 02:00:39 +0000
ROA not before: Tue 11 Feb 2025 02:00:39 +0000
ROA not after: Mon 12 May 2025 01:00:39 +0000
asID: 6621
IP address blocks: 67.44.16.0/20 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d7:a6:4d:78:43:a6:a7:52:d3:9c:fa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Validity
Not Before: Feb 11 02:00:39 2025 GMT
Not After : May 12 01:00:39 2025 GMT
Subject: CN=3ac3f005-7cf6-4b1c-9ae8-b1c4a2d1e8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c3:95:65:b7:75:d2:ec:fa:be:9a:24:49:14:
52:8b:c2:46:47:73:50:81:4e:02:fb:b1:06:f1:e5:
4c:8a:95:21:1d:d0:36:59:32:f2:b1:c8:7c:44:64:
88:2a:c3:13:55:35:1b:ee:ea:a3:3e:3f:80:13:6d:
38:0a:be:c1:12:c8:6f:73:88:cf:5f:a4:9f:03:7d:
6f:20:e0:2d:94:97:9a:34:03:7d:50:87:fc:98:45:
50:3b:eb:ab:a2:52:c3:9b:a0:05:d4:74:7b:da:7a:
7b:7c:6c:6f:27:96:86:bd:bb:14:07:c0:ea:65:b8:
30:f8:cc:75:f6:a7:4e:5f:5f:b6:ff:46:59:0a:16:
fe:59:f2:ed:64:f7:77:70:16:cb:cb:d1:1e:7e:d5:
35:2f:2d:06:40:e3:99:d2:5e:5f:e4:a4:1b:53:7f:
cb:6a:3a:c3:c4:5c:ab:ea:8e:77:30:11:90:84:20:
6d:4b:17:ff:f5:cb:ec:67:05:e4:c5:f4:60:0b:63:
a4:43:a5:d5:c1:04:d4:95:89:e4:3a:61:7c:8f:e2:
91:0f:be:5d:32:dc:79:00:16:07:3f:ba:f7:09:e3:
91:e3:77:1c:48:f3:66:9d:bd:75:b8:d5:59:51:c4:
31:8c:7f:8b:84:2f:a9:c9:a9:61:96:b8:e7:83:96:
25:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:40:BF:D9:9F:D0:86:F2:4A:F5:B6:54:55:03:45:C5:39:8A:D2:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/5e9c8c7e-2154-3e3d-a7ec-62bf6946265c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
X509v3 Authority Key Identifier:
keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
sbgp-ipAddrBlock: critical
IPv4:
67.44.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:07:69:d8:79:d6:69:7c:87:b5:da:6c:4e:16:49:ad:67:74:
de:b7:64:51:8c:dd:9b:e5:ad:da:88:fa:71:b4:40:c7:9c:b7:
55:b6:6c:a5:de:74:44:79:e5:60:87:b8:33:69:fe:fc:92:00:
a4:50:e4:21:0e:1b:cd:b5:77:08:7f:d3:4e:90:54:f5:bb:47:
50:97:10:75:04:82:d1:a5:63:51:96:03:b8:c7:ce:cf:ed:a1:
7d:31:6e:ba:0c:90:dc:bd:2d:9c:b6:27:2b:86:12:79:26:b6:
1c:d2:ff:2e:a4:13:8c:b2:2b:98:20:b6:93:48:fe:83:3a:cd:
63:71:3d:45:3c:4c:e6:45:31:51:f6:b2:34:54:9f:06:bc:49:
7e:13:07:d9:c6:34:89:3d:18:79:79:78:9e:75:68:54:74:80:
9a:1c:a1:9c:60:a0:d0:55:ac:68:c9:39:80:d3:a5:ce:d1:5c:
76:69:5b:4a:40:54:16:08:e4:83:8f:5f:67:a1:71:61:83:95:
07:8b:54:03:65:1e:1b:8d:6a:99:06:08:2e:2f:b3:54:f7:53:
33:17:78:b0:dc:e8:33:0e:9d:5b:95:45:a3:35:83:68:5f:4f:
5d:a0:1e:e9:73:f7:9f:14:68:33:d5:34:9c:3d:ba:13:b2:39:
a8:8a:c9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:09:19 2025 by rpki-client