Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/5f0f9220-7f1d-3bc2-a8c6-b58d27cd5950.roa
File: 5f0f9220-7f1d-3bc2-a8c6-b58d27cd5950.roa (raw, json)
Hash identifier: h3TBolzB3Wi/tuc/5Jhn1X/zGR/QY93INYjTM9clvEg=
Subject key identifier: D7:61:A3:5E:8B:9B:4F:E5:A5:9A:07:61:C2:C2:14:9B:14:D8:81:04
Certificate issuer: /CN=beb73535-d0fb-4340-8d5e-4c26d6a59dc7
Certificate serial: 010D0C9F4328584883E5BD11F6636D4E5FB22400
Authority key identifier: CC:F8:F7:81:D8:59:90:59:3F:D4:20:4D:A0:61:ED:65:26:1E:0C:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/5f0f9220-7f1d-3bc2-a8c6-b58d27cd5950.roa
Signing time: Sun 12 Jan 2025 02:00:38 +0000
ROA not before: Sun 12 Jan 2025 02:00:38 +0000
ROA not after: Sat 12 Apr 2025 01:00:38 +0000
asID: 401338
IP address blocks: 67.22.96.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:83:e5:bd:11:f6:63:6d:4e:5f:b2:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb73535-d0fb-4340-8d5e-4c26d6a59dc7
Validity
Not Before: Jan 12 02:00:38 2025 GMT
Not After : Apr 12 01:00:38 2025 GMT
Subject: CN=1ddca76c-b7ac-4d36-898b-be00d205a3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9b:86:3b:c8:6d:f6:a7:e9:61:87:94:44:cd:
a9:ae:85:07:4e:c7:d4:66:2b:55:a9:8d:55:1b:61:
86:b1:57:a5:2a:04:21:e3:f6:5c:58:32:3c:3c:d4:
74:14:c1:58:7c:90:76:55:f9:f8:bc:44:ee:fd:d7:
ca:64:24:57:09:6d:14:07:a0:16:69:85:61:3a:7e:
ac:cc:8d:ef:70:41:63:b2:ba:91:c0:71:ec:ee:e0:
d2:83:29:ea:c3:30:e2:f1:01:ac:ac:b9:b7:bd:c3:
89:e6:13:71:ca:d0:15:f4:86:9b:ed:1a:d2:9b:dd:
68:ee:c2:c3:cf:f3:cd:55:45:cd:74:b2:56:83:58:
ce:67:ae:01:60:98:b5:47:3f:81:ed:d9:8f:6f:a5:
1f:ac:60:a2:65:f2:3b:81:56:06:9d:24:73:00:a7:
59:a3:e0:c4:cd:7f:49:26:ed:55:8d:6d:45:00:07:
b6:65:28:39:ec:18:27:fe:3e:1d:00:27:a9:14:af:
cb:d6:e5:78:9b:ba:6a:d9:c1:96:2b:db:91:ba:8a:
fc:dc:e1:ea:bd:d2:81:37:57:14:f8:83:f1:54:82:
aa:38:3c:ac:3d:18:a1:ee:00:f7:42:29:c6:ca:68:
7f:bb:81:2a:68:c1:05:d8:c8:b7:71:9a:5f:e3:2c:
70:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:61:A3:5E:8B:9B:4F:E5:A5:9A:07:61:C2:C2:14:9B:14:D8:81:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/5f0f9220-7f1d-3bc2-a8c6-b58d27cd5950.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.crl
X509v3 Authority Key Identifier:
keyid:CC:F8:F7:81:D8:59:90:59:3F:D4:20:4D:A0:61:ED:65:26:1E:0C:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.cer
sbgp-ipAddrBlock: critical
IPv4:
67.22.96.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:47:e9:7c:8d:0a:60:f1:1d:a1:93:d2:19:91:7b:4e:8f:00:
38:2b:83:b2:3f:10:40:b9:26:fe:2c:a7:40:f2:05:cd:2d:3d:
d3:1c:66:0b:e3:a0:39:b4:7d:05:ba:e1:a0:71:a7:0b:7b:bf:
3f:27:ac:32:5e:96:bb:de:08:00:ac:4f:99:58:4c:bf:c3:dc:
84:b2:0b:6d:11:f2:e6:bd:d0:d5:25:09:d3:83:da:66:7b:02:
30:8d:90:e0:eb:87:43:25:84:d3:6f:45:d9:5e:2b:2f:34:55:
3f:e2:f8:55:a4:67:91:b6:41:fd:b0:c2:57:99:e8:36:91:3f:
81:8d:cc:c6:a4:d7:58:90:d4:e9:ea:18:8c:02:50:f6:df:6f:
49:04:1e:88:e1:7b:e0:34:3b:2b:03:f2:22:4d:b8:05:f0:93:
c3:53:fd:ee:22:ac:cd:39:02:c1:17:14:cc:53:98:38:96:b0:
c3:34:47:7a:ad:11:1f:97:8a:96:dc:7d:e4:d8:97:2f:32:50:
00:32:db:4e:3f:c5:fa:d4:ce:8a:fa:f1:87:7a:61:16:88:d0:
da:5c:12:d9:be:ad:ee:7d:38:91:8e:db:5e:11:07:4e:71:b6:
86:7b:67:a8:41:e6:36:8c:13:16:b8:da:4b:e0:65:1b:fa:fe:
46:7a:9d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:24 2025 by rpki-client