Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/59e9e4d5-f96a-3852-913b-f97813ffedfa.roa
File: 59e9e4d5-f96a-3852-913b-f97813ffedfa.roa (raw, json)
Hash identifier: koN/tKCaXhPaU3AZORGJ5HBgL2mIoyh7kVgudSH0qYI=
Subject key identifier: E8:34:1E:C8:6A:38:57:AF:CA:30:7D:BE:A7:69:4E:BA:13:E7:06:30
Certificate issuer: /CN=223a4b84-939d-437b-85a8-9ff465d0541e
Certificate serial: 010D0C9F4328584922E8F56E0E6B25B53491BE00
Authority key identifier: B7:2D:98:BF:13:27:1E:38:61:A9:8E:7F:5B:F7:3E:49:70:37:EB:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/59e9e4d5-f96a-3852-913b-f97813ffedfa.roa
Signing time: Mon 10 Mar 2025 01:00:39 +0000
ROA not before: Mon 10 Mar 2025 01:00:39 +0000
ROA not after: Sun 08 Jun 2025 01:00:39 +0000
asID: 8075
IP address blocks: 69.72.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:22:e8:f5:6e:0e:6b:25:b5:34:91:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=223a4b84-939d-437b-85a8-9ff465d0541e
Validity
Not Before: Mar 10 01:00:39 2025 GMT
Not After : Jun 8 01:00:39 2025 GMT
Subject: CN=644c7c25-c682-4916-8ef4-9a5c330724e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6f:c7:aa:07:82:c8:ee:9f:1f:65:a7:c9:9d:
fa:10:ac:93:0e:a9:1f:c1:68:d1:28:09:76:c3:fd:
87:d3:68:ea:9c:c8:a4:74:a0:f7:9a:b4:b1:8f:4e:
e3:ba:59:25:e2:c8:3d:0d:ea:a5:41:63:38:4d:be:
ed:07:bb:38:64:2e:78:66:9b:6d:47:e4:6a:37:0a:
bd:a3:81:66:20:23:4d:0c:a5:89:ce:e6:a4:51:a2:
34:20:4c:65:4c:1e:15:0d:e9:5d:07:c6:56:55:45:
b1:17:9c:48:08:1a:bf:54:18:df:eb:a1:f0:14:f7:
b2:b1:23:a4:94:32:ae:3a:54:8b:a7:5b:80:28:70:
bd:43:98:bb:60:7a:b5:a4:26:c8:4e:4a:02:cd:e2:
b1:92:ae:6c:2a:5b:be:64:7f:56:6a:28:50:b7:25:
d1:4c:f9:10:d8:eb:92:c3:a5:f4:02:68:11:0a:a1:
8d:8a:f4:07:19:b4:80:65:0d:36:3f:c0:34:f7:79:
07:0f:4a:3e:f6:0c:ff:8d:16:8c:f6:5b:88:59:fe:
6f:ce:4b:39:e3:65:2b:04:e3:6b:1a:8b:b5:92:ae:
6a:26:1f:53:76:e7:77:d2:10:1b:fd:97:ed:77:c7:
0a:02:09:b0:da:91:e7:aa:4b:5e:bf:07:f6:b4:4f:
74:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:34:1E:C8:6A:38:57:AF:CA:30:7D:BE:A7:69:4E:BA:13:E7:06:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/59e9e4d5-f96a-3852-913b-f97813ffedfa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e/223a4b84-939d-437b-85a8-9ff465d0541e.crl
X509v3 Authority Key Identifier:
keyid:B7:2D:98:BF:13:27:1E:38:61:A9:8E:7F:5B:F7:3E:49:70:37:EB:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/223a4b84-939d-437b-85a8-9ff465d0541e.cer
sbgp-ipAddrBlock: critical
IPv4:
69.72.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:c4:96:f5:75:56:20:bd:36:1f:ab:34:9a:67:81:c1:80:f5:
51:9f:a4:db:d1:c7:9b:29:41:70:c5:51:c1:9d:96:2d:57:72:
b6:74:da:e8:48:21:6f:a2:a3:31:e4:69:3f:24:69:41:7c:6e:
b2:e0:fc:f9:35:6f:de:74:0b:5f:c3:e4:f0:3c:3a:d1:15:e3:
6c:d9:62:7a:04:e5:0f:7a:83:52:2a:50:5b:29:ca:62:99:14:
f0:b3:9d:03:d2:e5:24:22:dc:b8:cf:39:a7:e5:ea:a1:ec:72:
fd:a0:cf:56:15:eb:15:b8:87:25:e3:aa:4b:99:95:36:c4:18:
e2:88:ca:cb:42:cf:b0:e7:b4:30:a0:b2:dd:78:2f:51:18:3e:
7c:3f:f3:81:a0:05:e3:8d:46:64:5b:80:f9:1c:7a:56:a4:b3:
c8:d5:74:b0:da:ff:74:5c:9a:1b:49:9f:5b:65:29:ef:39:40:
c5:5b:ba:cb:de:80:08:99:20:af:96:cd:15:c9:22:33:d3:e2:
0c:a3:70:f3:62:64:92:51:ff:67:4c:31:69:b4:96:c5:a5:4e:
86:be:af:fd:5b:c7:b8:82:db:12:4f:8e:69:aa:7c:70:c0:0b:
98:89:d2:09:b2:4d:a2:70:8a:c2:76:31:2e:a4:f8:b5:7d:22:
2d:63:d4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:46 2025 by rpki-client