Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/02fc3568-a294-3f7b-a040-efba2cd76305.roa
File: 02fc3568-a294-3f7b-a040-efba2cd76305.roa (raw, json)
Hash identifier: JIHs9HcjLK2LQRssNS3dSdvTx/wZw558Vi0yzortR0o=
Subject key identifier: F4:D2:A9:81:2D:40:25:8C:46:7B:55:CE:9D:7B:AC:91:D9:04:90:CD
Certificate issuer: /CN=866b2df4-0f0a-4b84-9eb7-c185258f5294
Certificate serial: 010D0C9F43285848F926AE5ED538ED966296E9E0
Authority key identifier: 95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/02fc3568-a294-3f7b-a040-efba2cd76305.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 8075
IP address blocks: 67.210.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:ae:5e:d5:38:ed:96:62:96:e9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866b2df4-0f0a-4b84-9eb7-c185258f5294
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=750a6964-f66f-4b0b-9086-aa33503c8589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:86:94:a9:47:d1:40:5a:99:23:db:0e:1d:de:
b4:c0:95:69:d3:9e:5c:44:28:1d:00:1f:27:da:65:
85:3d:75:8b:07:f0:ec:75:b1:42:44:56:d3:90:87:
73:51:e5:f3:13:50:1b:45:0c:b4:55:0b:c4:71:82:
d0:01:5b:b9:8f:04:15:18:90:c5:f3:92:3f:fa:92:
b2:fc:66:04:c6:07:c1:c7:e3:76:a2:ed:ca:dd:6e:
4c:af:2f:36:a9:d8:ff:24:01:20:8c:df:7e:72:bd:
28:dc:28:5b:ed:2d:8b:b5:96:f2:98:1a:15:52:27:
e6:8a:29:c9:d9:37:16:80:b6:07:8c:0b:64:fc:74:
57:f4:b0:99:2c:c9:1a:c2:0b:cb:d8:50:4a:63:b5:
1f:3b:f9:f5:24:0e:6d:a7:9a:94:1a:fe:cd:f9:45:
a2:ed:dc:dd:3b:48:92:b6:31:44:64:e9:bd:3e:8b:
1e:9c:d1:82:11:ef:d0:e5:08:59:83:f2:68:71:77:
d8:74:15:32:9f:ca:87:eb:b5:d0:b8:2e:69:31:d9:
6f:b1:06:bc:19:17:9f:f9:39:b6:7f:dc:31:88:ae:
91:3b:3a:04:35:6f:f7:c6:4c:72:85:68:a2:9e:b9:
ae:9c:ce:0d:bc:18:93:66:aa:94:0b:62:46:15:5a:
14:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D2:A9:81:2D:40:25:8C:46:7B:55:CE:9D:7B:AC:91:D9:04:90:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/02fc3568-a294-3f7b-a040-efba2cd76305.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.crl
X509v3 Authority Key Identifier:
keyid:95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer
sbgp-ipAddrBlock: critical
IPv4:
67.210.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:66:a9:3e:75:6c:88:d8:32:69:f6:02:7d:85:13:07:69:b7:
40:37:7b:93:9a:30:d9:80:ae:44:a9:b2:f4:04:9b:47:5d:4a:
59:98:0e:6c:7d:6d:bc:10:f6:10:16:c1:95:b1:96:3a:47:a6:
a8:77:1d:3f:17:5c:ea:7f:68:89:5b:a8:94:0c:42:88:68:2e:
d5:89:1e:7d:9a:24:bc:a9:44:3e:52:b2:6f:a3:27:2b:8e:d4:
65:9e:aa:80:c5:86:3f:15:b1:46:1d:21:63:5a:b3:98:53:78:
3e:25:14:8a:84:c3:2e:6e:fb:18:52:52:89:ca:76:f6:4f:cf:
40:29:b1:4e:52:f5:cd:38:91:1f:7c:0e:bb:e3:71:30:5d:0c:
ad:e5:67:22:42:82:66:52:a4:42:51:9f:d1:14:97:73:d4:50:
11:a3:39:e0:0d:42:f2:97:d0:71:28:ae:31:fe:e8:08:e8:56:
b9:62:8e:79:dd:ce:3f:42:9e:db:5d:37:61:45:a2:cc:b4:f0:
a2:ca:10:eb:27:da:15:3b:a3:a8:27:26:93:88:b5:ac:ae:6c:
0d:34:4f:11:2f:69:83:28:f7:87:bb:eb:dc:5e:03:8c:17:8f:
06:d4:33:f7:66:3b:fa:70:ce:6d:fe:3d:dd:23:f1:8e:f2:f5:
8f:e3:2c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:44:52 2025 by rpki-client