Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/58bb2d1c-10b2-3954-b73d-a493764205ed.roa
File: 58bb2d1c-10b2-3954-b73d-a493764205ed.roa (raw, json)
Hash identifier: 1fFYGpU3oFMieNfv/5eSQO/Azf3b0MQ8/TD0g7IVkcw=
Subject key identifier: 9F:6A:5B:B5:2F:13:5B:5F:31:B9:7A:EC:18:8F:E8:D2:93:F4:5D:3D
Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
Certificate serial: 010D0C9F432858493C092CFEB30ADC80DC2B4000
Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/58bb2d1c-10b2-3954-b73d-a493764205ed.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 35908
IP address blocks: 67.198.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:2c:fe:b3:0a:dc:80:dc:2b:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=969640ed-8098-4a9b-b453-1277fc7e753e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5d:f1:34:c0:07:37:3e:4a:0b:74:1c:3e:67:
12:32:4f:41:f7:8b:de:99:81:a3:9a:00:f0:46:03:
39:6e:62:6a:d3:c1:e2:9c:d2:b6:f6:43:d0:12:b4:
a1:46:69:ae:68:10:ea:a7:79:6a:12:c9:f1:9f:e7:
a8:c0:ae:8a:e6:32:6f:42:f2:16:6b:f3:2f:fb:00:
f2:b1:e0:d6:a5:94:07:21:29:ce:90:ce:c8:3b:05:
ef:db:70:00:4c:3a:97:fa:fd:9d:52:d0:5c:e6:9d:
34:a7:83:1a:53:87:70:90:41:41:fd:6f:fd:8b:8f:
0f:62:7b:82:42:f7:ce:4f:02:58:b4:e1:27:2c:c5:
1c:09:8e:e2:58:26:8b:40:90:7e:71:8b:83:40:e6:
a9:54:f6:19:89:a9:c1:bf:d1:ee:a6:0d:98:f0:c4:
40:58:3d:40:49:ef:9b:6f:bf:7c:ab:88:8f:a1:76:
09:03:9f:11:14:14:00:6a:ac:ca:d2:41:e4:47:e4:
ec:80:be:a6:ff:b1:ce:2d:44:77:22:92:38:01:c8:
72:b6:93:25:4f:b1:fc:f0:dc:aa:30:c7:25:ff:e7:
28:19:0c:2b:f1:13:eb:1b:aa:7b:2f:f0:fc:50:d5:
eb:54:b5:33:33:6b:ed:4c:4b:9b:a6:3b:15:22:05:
d8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6A:5B:B5:2F:13:5B:5F:31:B9:7A:EC:18:8F:E8:D2:93:F4:5D:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/58bb2d1c-10b2-3954-b73d-a493764205ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl
X509v3 Authority Key Identifier:
keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
sbgp-ipAddrBlock: critical
IPv4:
67.198.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:45:b3:2b:d3:0f:a8:73:9f:4f:b8:1d:6e:b2:17:77:d6:d9:
be:9c:93:21:46:4f:33:cb:c3:3f:b4:8c:c6:ff:c4:4f:52:41:
70:32:60:0f:f8:bf:5f:57:7e:f7:aa:95:74:b0:d8:b2:46:a3:
b2:1c:6c:b9:12:ca:2f:ab:e4:91:f8:91:cc:19:6b:a7:6c:c3:
06:d4:c9:d0:d3:c1:89:19:85:bd:07:61:09:54:c0:b9:2f:38:
57:47:7a:0a:ce:23:fe:49:41:45:cb:e2:17:fc:c7:16:62:75:
36:77:8c:6b:e9:2d:e1:f4:3e:89:4d:86:c4:59:c0:87:a6:f7:
f2:f4:91:bd:58:6a:59:55:d4:7d:7c:d0:c6:3b:fb:05:83:7d:
6e:6b:32:f0:0c:5c:93:cc:11:2b:c9:5a:16:4e:a5:fc:0d:a3:
9f:fc:36:16:ba:f5:b4:df:94:a4:55:48:44:88:dc:ad:13:db:
71:d8:56:34:1e:d8:7a:f5:4e:5b:49:0b:f3:bb:a1:9a:48:c1:
dd:97:4a:8c:23:7b:55:2c:1f:ce:3a:03:51:e7:e6:e4:01:91:
64:0a:87:69:f6:27:bf:dd:46:11:d2:4f:9b:8a:65:3a:21:b2:
d9:d6:db:f9:07:61:8e:6c:e2:0d:4d:c9:0a:d1:6a:de:5d:e2:
07:95:3b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:08:01 2025 by rpki-client