Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/22eb73ec-b415-3bc1-9d15-13db833fbec4.roa
File: 22eb73ec-b415-3bc1-9d15-13db833fbec4.roa (raw, json)
Hash identifier: g49ePFPEUDuCUQ2hoEvTEPdhqJ5t6pHxVxW4erygHQQ=
Subject key identifier: 59:FC:41:2D:E6:2A:33:0A:83:55:21:B3:67:91:08:44:81:BA:0F:A7
Certificate issuer: /CN=530ba529-ac94-44aa-8a24-334da5fccb1e
Certificate serial: 010D0C9F432858492E13BE4577B84391D4205620
Authority key identifier: E2:70:AF:2A:32:F0:30:09:13:CF:91:AB:C2:55:00:27:FA:B8:C1:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/22eb73ec-b415-3bc1-9d15-13db833fbec4.roa
Signing time: Fri 14 Mar 2025 01:00:39 +0000
ROA not before: Fri 14 Mar 2025 01:00:39 +0000
ROA not after: Thu 12 Jun 2025 01:00:39 +0000
asID: 22169
IP address blocks: 204.10.136.0/24 maxlen: 24
216.239.128.0/24 maxlen: 24
2607:fe90:8000::/48 maxlen: 48
2607:fe90:8001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2e:13:be:45:77:b8:43:91:d4:20:56:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=530ba529-ac94-44aa-8a24-334da5fccb1e
Validity
Not Before: Mar 14 01:00:39 2025 GMT
Not After : Jun 12 01:00:39 2025 GMT
Subject: CN=c259b487-7181-48ef-b630-4d420a241cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:29:78:7b:2e:2e:6a:42:34:46:a0:99:9d:c1:
33:7d:c6:04:8a:72:77:6e:73:e7:7d:d8:62:2d:71:
e3:c6:4c:e1:56:7e:e8:7c:82:bd:f3:9d:cb:2d:d0:
cf:99:13:76:1b:a6:97:4b:1f:21:3f:e3:d1:51:6a:
c9:bd:77:46:85:ba:71:3f:38:92:ef:f4:cf:4e:4f:
48:8c:b9:f1:64:9a:0e:11:83:96:a6:86:85:25:35:
a2:66:55:4d:fc:a6:6c:b4:ff:aa:4c:79:ab:cf:5d:
1f:b8:91:55:2d:00:9d:d6:f1:c0:00:72:a8:36:a1:
5f:63:7d:d0:b9:01:67:e6:c4:ef:db:39:91:1a:55:
58:c7:94:a1:02:2b:ca:b8:dd:a8:cb:4a:e1:6d:4a:
76:12:c2:32:81:22:3f:3c:03:ad:cc:8d:85:36:48:
cc:d6:90:81:96:bc:2f:71:8a:a4:c4:c5:a3:4b:5a:
9a:0d:72:66:df:ca:eb:8c:5e:2d:02:b2:c0:88:51:
35:86:22:6b:0e:35:43:f9:dc:d5:40:b3:0d:b7:6b:
5b:ab:d1:5b:b9:47:60:42:a7:f3:7c:06:ea:a1:79:
77:10:16:9c:f2:91:29:81:55:6b:1c:03:c2:73:9b:
d7:3b:1e:04:a1:e8:92:a3:5d:4e:ee:03:56:c7:cf:
e0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FC:41:2D:E6:2A:33:0A:83:55:21:B3:67:91:08:44:81:BA:0F:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/22eb73ec-b415-3bc1-9d15-13db833fbec4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.crl
X509v3 Authority Key Identifier:
keyid:E2:70:AF:2A:32:F0:30:09:13:CF:91:AB:C2:55:00:27:FA:B8:C1:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer
sbgp-ipAddrBlock: critical
IPv4:
204.10.136.0/24
216.239.128.0/24
IPv6:
2607:fe90:8000::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:25:b1:a7:ab:dc:df:88:db:7f:8e:49:6b:0b:fc:49:47:6e:
70:55:e5:4c:38:57:04:84:ad:f1:73:19:0a:d9:c2:f3:54:d4:
b8:75:39:00:bc:ab:98:a0:c9:bf:2c:22:75:b8:fc:d2:18:8a:
97:78:99:8c:bd:24:eb:54:fb:8d:0a:a0:ae:5b:ab:2c:72:90:
a0:fd:25:64:a1:8a:7d:43:12:2b:bc:43:29:f7:31:1a:7d:4c:
3a:9e:34:85:39:1f:43:dc:0f:7e:3b:49:df:20:2b:c2:d3:eb:
55:2a:df:88:4c:78:54:24:2e:02:9e:13:c9:01:50:9b:50:4d:
39:89:9c:4f:ce:2b:d8:e0:88:9b:c1:91:c3:f7:51:8a:ed:03:
8e:f7:fa:ce:8f:9a:d6:a2:fc:18:4c:ba:61:eb:fc:7c:c6:7d:
e1:86:35:e4:3a:4d:4d:36:33:8f:9c:44:a5:e3:11:fa:8b:0a:
13:ce:35:82:99:8d:90:31:6d:0b:30:d6:60:4c:8c:3f:19:13:
cd:e7:cb:4b:c8:ef:4d:5c:e8:9d:8e:12:16:37:17:88:f0:be:
50:c1:b1:db:ce:4c:15:42:0a:0f:0b:e6:9a:d2:f6:e1:47:6e:
c3:34:c5:21:2f:42:38:66:6e:9d:19:f4:d8:0a:91:52:f8:49:
63:49:04:be
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:49 2025 by rpki-client