Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/62166d15-0fd5-3fe3-bee9-4030743230f3.roa
File: 62166d15-0fd5-3fe3-bee9-4030743230f3.roa (raw, json)
Hash identifier: A/qYvUW9Lni/OJ/ZbONcjQYexLA9cyNEjl8ZiVC7RfI=
Subject key identifier: FC:58:A0:40:DB:02:2E:B8:30:7E:61:18:5E:10:C7:08:CE:1A:14:26
Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial: 010D0C9F43285848B1F630A0B80748FCF6AD1D00
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/62166d15-0fd5-3fe3-bee9-4030743230f3.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 4213
IP address blocks: 69.194.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:30:a0:b8:07:48:fc:f6:ad:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=d8c15a14-50fb-4be6-9d67-38bafe02bc2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9c:9e:8a:15:3f:18:3c:24:1b:78:cc:d1:6f:
01:74:07:9d:08:3c:35:51:17:48:78:87:99:51:00:
dc:48:f7:2b:89:ba:d2:d7:22:78:29:b9:29:cc:02:
46:ac:39:9f:7c:0f:66:dd:df:dd:e3:64:d9:e0:31:
aa:3e:be:c7:45:3e:da:a1:02:ef:c1:e4:cb:fb:c3:
90:8a:91:09:7c:3c:fe:3e:84:ce:fa:ec:06:d0:d3:
5f:7b:c1:38:eb:c6:66:05:a8:3f:48:ed:9c:49:74:
83:53:3a:67:4b:65:85:d8:54:de:7b:79:dc:c1:38:
f3:6a:37:ca:14:ad:dc:c2:7c:ba:7f:f1:67:9c:c8:
64:25:c1:e7:70:82:d0:5b:39:87:eb:b7:50:ce:ca:
08:a8:5c:f0:c8:54:80:e3:b8:0a:99:ab:08:24:bd:
b2:77:2e:60:30:40:67:b7:60:4d:3e:3f:fd:a7:5e:
2f:e5:50:44:8a:85:54:8d:6e:45:7d:77:f9:b8:d8:
c5:3d:96:b6:f7:2a:af:3d:58:f2:5a:b5:87:bb:d6:
8c:e5:d0:6e:fe:6d:c0:3b:f3:e3:e8:0a:a7:e7:31:
07:fb:04:ec:1a:10:18:19:a2:f7:aa:8b:fb:3a:bd:
00:b0:2d:14:b5:7c:15:49:f9:39:e8:08:78:a7:ea:
04:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:58:A0:40:DB:02:2E:B8:30:7E:61:18:5E:10:C7:08:CE:1A:14:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/62166d15-0fd5-3fe3-bee9-4030743230f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
X509v3 Authority Key Identifier:
keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
sbgp-ipAddrBlock: critical
IPv4:
69.194.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:db:dc:93:f5:a4:6a:ae:fd:94:f9:14:e3:e7:9b:14:1f:8c:
cc:04:c7:48:db:e6:cf:ab:d1:0a:75:10:10:d4:ee:b5:b1:51:
76:9e:66:80:40:13:df:f9:49:7d:80:52:1a:ab:1e:40:02:43:
85:87:d0:cf:ea:46:f6:34:c6:a7:df:24:4d:02:ea:eb:59:f9:
56:59:55:31:dc:d7:43:cd:99:cc:f9:33:ec:73:67:f7:b7:af:
bc:e8:db:6f:af:1d:c8:0d:f7:57:3a:8d:3d:f6:6c:c8:c9:78:
8b:e4:b2:91:6a:f5:ae:95:bc:85:57:e2:72:4b:de:70:33:f7:
e1:3d:52:84:0d:73:f2:2b:61:dc:c4:b2:53:f7:c1:aa:1c:f4:
bf:f9:70:c6:e4:1d:d8:b3:e8:e4:58:c0:36:cc:3c:66:bf:f6:
89:ca:2d:77:35:d2:55:d6:00:8e:22:20:fd:a5:de:5e:43:63:
d3:7d:6d:06:94:3e:22:f0:88:9f:96:1f:bf:d8:70:07:9a:85:
19:fc:18:70:f8:2f:51:9a:43:d7:e6:e0:ce:7d:ed:05:65:cf:
4c:8f:9b:e5:a9:ff:30:0f:68:5c:09:0f:82:85:52:65:60:a6:
bb:18:91:c8:0e:0e:5d:51:e1:52:3c:f5:b2:5e:1a:88:4c:ec:
d3:d5:cb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:07:39 2025 by rpki-client