Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/23575ff1-f0ab-3503-a703-a3e1df2b0aff.roa
File: 23575ff1-f0ab-3503-a703-a3e1df2b0aff.roa (raw, json)
Hash identifier: Pt0IQw6uDtJo+YU3Ceg5iY0IBKhovWx8zWD8MM1Ht1s=
Subject key identifier: AC:A2:3D:48:1F:C8:33:ED:70:DC:99:C2:5B:AE:BA:60:C8:35:F2:90
Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
Certificate serial: 010D0C9F432858493C09305C0E4A5D5123A0D8D8
Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/23575ff1-f0ab-3503-a703-a3e1df2b0aff.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 35908
IP address blocks: 67.229.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:30:5c:0e:4a:5d:51:23:a0:d8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=9ef6c711-959f-4a88-828b-d71107055313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1c:b4:c0:3a:d3:17:36:47:b5:01:6e:78:0a:
ee:aa:a3:78:40:99:51:00:99:9b:59:6d:07:25:3d:
c1:90:ba:d6:dc:c2:71:64:f0:1d:cf:e1:8f:7e:20:
52:2a:1c:b9:92:69:82:0e:77:c4:ac:9e:3d:2a:44:
d8:6b:11:c3:3b:5e:95:ba:bf:a0:04:bf:f3:e7:85:
10:ec:05:21:a4:89:b7:93:2d:99:74:e3:1d:4f:9a:
70:c3:5d:60:80:29:16:2f:0c:3c:fb:c1:43:0d:e7:
f9:50:eb:28:0c:1c:bb:35:43:a6:b7:28:20:ca:17:
86:e0:d0:fc:e5:3c:fe:ec:43:a6:c3:cd:92:52:71:
b5:71:04:e8:74:51:a4:9b:ab:cf:b5:7f:53:4b:8f:
de:90:8b:4a:79:4e:10:ab:85:fa:4e:4b:6b:b5:78:
87:c0:26:8b:da:61:e8:a0:05:b5:1f:a8:39:ed:f6:
b0:f0:9e:26:e4:c9:32:fc:ab:44:7e:6f:29:43:a9:
93:0f:2c:9b:ca:7b:f4:ac:82:d8:ce:df:c8:9b:9e:
99:8a:e5:e0:26:3d:4d:f0:71:55:56:ae:ab:49:c4:
a0:cf:4f:07:21:a6:97:c8:12:93:9e:b8:8a:14:b8:
f2:04:8a:fe:72:61:54:b2:1e:87:a5:61:15:ab:6e:
43:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A2:3D:48:1F:C8:33:ED:70:DC:99:C2:5B:AE:BA:60:C8:35:F2:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/23575ff1-f0ab-3503-a703-a3e1df2b0aff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl
X509v3 Authority Key Identifier:
keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
sbgp-ipAddrBlock: critical
IPv4:
67.229.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:20:3b:33:7d:27:b8:b9:5b:e9:f7:c0:6e:53:92:c9:da:d5:
3f:2c:16:59:f4:bd:32:b5:60:2c:5f:a9:8f:76:6b:b4:9d:75:
70:0b:5a:00:7e:48:b8:e7:c9:96:af:0d:c3:fd:72:d5:16:42:
b0:ac:5d:69:1d:ff:09:56:b9:6b:38:c4:7c:de:be:73:86:e2:
39:4b:20:28:8d:61:29:c5:c7:63:6e:82:c2:97:20:27:37:85:
de:9b:29:6f:39:2c:3b:2e:81:75:c7:a9:0f:43:7f:ae:0b:1a:
fd:18:56:f9:a0:ee:b5:3a:23:84:50:f1:6a:8b:cc:d0:01:ba:
4d:40:60:79:7e:8a:07:5f:00:f3:3f:30:86:38:cc:5d:31:d0:
3a:d8:c9:23:ae:43:84:15:9c:8a:78:fb:92:45:44:1e:44:ee:
31:9e:a5:bf:3e:e8:70:38:a3:51:73:f4:f1:12:42:d1:fb:d6:
e0:8a:58:d6:63:59:a0:76:b4:65:ab:50:ac:5d:d7:75:d0:88:
7f:b5:c6:d3:70:bc:ab:b2:5b:0c:05:9e:62:0a:5a:3b:89:77:
5b:a8:99:a4:d7:5a:5b:5b:16:5a:2d:d0:31:a1:c8:ae:d8:13:
53:6e:a6:36:70:41:c1:ca:44:3a:fb:e6:de:24:85:25:40:29:
bf:06:ff:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:02:53 2025 by rpki-client