Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/79d49693-2478-3e4d-b1c8-3dd7ffaa0d70.roa
File: 79d49693-2478-3e4d-b1c8-3dd7ffaa0d70.roa (raw, json)
Hash identifier: 4+4B5qtAKYtljkqvXtcFOD3nVEE7sF9WXScv5oQe/cM=
Subject key identifier: C1:C3:46:1F:D4:04:B1:61:67:D5:25:6C:AF:10:70:2E:1B:59:4D:1F
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F432858487DEFC0C3F592A6C85930CA60
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/79d49693-2478-3e4d-b1c8-3dd7ffaa0d70.roa
Signing time: Thu 09 Jan 2025 22:46:00 +0000
ROA not before: Thu 09 Jan 2025 22:46:00 +0000
ROA not after: Wed 09 Apr 2025 21:46:00 +0000
asID: 22652
IP address blocks: 70.35.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7d:ef:c0:c3:f5:92:a6:c8:59:30:ca:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Jan 9 22:46:00 2025 GMT
Not After : Apr 9 21:46:00 2025 GMT
Subject: CN=3c891900-eb81-4ef8-8213-30af52607ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:99:50:98:23:ca:01:7b:41:10:e0:30:c3:b0:
ea:12:e5:1d:d6:cc:e3:92:04:47:48:32:3f:98:f3:
c1:ff:39:fc:3b:39:27:e8:0b:b3:31:31:6b:b0:db:
46:5e:4d:be:16:8c:2b:9c:f8:bb:c4:4d:0d:92:e1:
d3:56:86:8f:0c:04:48:76:7c:cc:a2:89:ab:37:0c:
37:38:12:5b:c0:ee:ee:12:2e:98:f3:ab:85:be:85:
1c:49:e3:9c:31:65:c8:6d:50:cc:47:00:47:e3:1e:
f1:2b:b2:43:6c:b6:73:be:70:f3:58:95:cf:74:17:
a6:a3:6c:1a:3d:96:a9:0d:bd:21:7d:2f:33:73:c5:
ca:5e:00:b1:91:e7:3f:32:ca:d6:80:69:19:fc:7e:
a2:e6:4f:42:40:d3:33:05:11:13:74:22:10:0b:c5:
07:d5:29:a2:22:4f:34:65:3c:40:f8:91:34:31:aa:
fe:d5:36:19:5e:a2:c9:14:86:1e:f0:60:b8:fe:38:
c1:6e:88:71:51:b8:43:d2:3e:a3:5e:88:10:e6:a9:
c2:b6:01:d1:23:f8:9e:8f:24:24:d0:42:a3:c4:1a:
b3:e9:d2:50:08:d0:52:8f:11:45:17:c5:07:6e:79:
b9:d0:70:87:9e:d8:61:ba:c5:0a:86:c2:52:e0:4f:
dd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C3:46:1F:D4:04:B1:61:67:D5:25:6C:AF:10:70:2E:1B:59:4D:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/79d49693-2478-3e4d-b1c8-3dd7ffaa0d70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
70.35.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:8e:f9:43:b3:e8:0e:18:dc:36:a9:e5:dd:97:3b:a5:bc:eb:
21:e8:aa:f2:f8:e6:5c:40:aa:4c:f5:ad:90:ee:d7:e6:f6:07:
72:bd:a6:54:60:23:67:b5:37:15:1e:28:89:15:fd:9a:a4:f6:
c7:ee:82:8d:09:6e:f2:74:2c:bf:9a:96:4e:3c:54:e3:44:c6:
23:a8:d3:eb:8d:59:5e:12:94:22:a1:1c:01:68:0e:c6:3e:df:
41:73:bf:e8:25:e1:8b:21:8a:fc:3d:c4:d4:70:c2:a9:5c:8b:
b8:03:64:c5:81:16:76:60:de:a1:9f:72:7b:7b:f6:cc:e9:df:
5f:f0:3d:0d:9e:24:d6:8c:cc:f6:81:7f:cf:d9:d0:67:76:ed:
ae:ed:f8:e6:04:e5:41:c9:ff:5c:b4:30:83:17:42:23:b6:ac:
d5:40:b1:e9:44:1e:4f:a3:3e:f6:65:42:8d:df:e2:8e:26:01:
62:e4:0e:78:99:5f:6a:4d:cd:3b:eb:c9:71:08:9d:00:c0:51:
72:31:a5:4e:2c:cd:e8:d5:40:1e:45:90:a9:62:f2:35:d3:1f:
82:7d:79:91:19:bd:c4:ff:10:a7:9f:4e:1e:f7:89:1b:56:a2:
eb:ab:64:89:3d:4c:00:5f:7d:8d:67:97:7c:98:2e:46:6a:46:
c1:04:6d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:33 2025 by rpki-client