Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/471ab819-bf16-367d-95b9-e1f59807e011.roa
File: 471ab819-bf16-367d-95b9-e1f59807e011.roa (raw, json)
Hash identifier: Usqx/B5V1Nx/ToCS4QycUJC+JsMd435Zb2DyaArNKdU=
Subject key identifier: 33:63:A1:14:64:92:D2:A9:B0:3B:BE:7D:5B:B6:52:44:9B:35:D0:8A
Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial: 010D0C9F43285849203C1192E90890C74BFFFE40
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/471ab819-bf16-367d-95b9-e1f59807e011.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 834
IP address blocks: 69.176.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:11:92:e9:08:90:c7:4b:ff:fe:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=adb2309c-d945-4333-be44-6c509dafc33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ce:df:c0:87:32:6f:62:47:e9:09:86:67:0d:
cb:8d:93:c8:5b:c9:3e:df:3e:e2:16:a8:b8:ed:6d:
e4:d6:4e:47:b2:83:e3:19:82:0d:b2:27:44:b3:14:
23:db:65:55:a1:4f:34:10:45:d7:d2:fd:0b:08:93:
47:0f:9b:38:57:1b:dd:3e:76:9a:ec:6d:1c:66:48:
66:f4:9f:05:ca:66:6c:21:38:fb:e0:b5:42:a4:ec:
b0:4a:09:02:7a:27:c8:e5:47:98:14:ff:4b:ae:62:
02:54:34:4f:20:1e:76:b5:02:74:19:b9:e4:d9:82:
c5:d8:5f:52:98:57:d1:c6:ee:7b:6d:e0:e2:70:16:
db:10:d9:ac:b5:78:5a:81:23:4f:52:92:8e:ea:83:
62:4a:47:74:ba:36:f3:cf:e9:11:47:25:1e:19:76:
35:35:de:80:60:80:07:85:09:b9:98:91:79:51:8a:
9a:96:cb:b1:ad:7a:36:ab:27:f3:93:e1:f0:fd:93:
e0:9d:94:8c:78:0b:e5:2b:f8:eb:20:63:93:76:7e:
70:c0:bd:a7:2b:9a:86:d6:61:35:f7:96:5b:3b:d6:
cc:2f:fa:2c:d5:1e:04:ed:ed:10:16:0c:be:ca:1d:
bd:d6:29:2c:5d:e9:02:14:4a:81:01:ad:98:78:e6:
e8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:63:A1:14:64:92:D2:A9:B0:3B:BE:7D:5B:B6:52:44:9B:35:D0:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/471ab819-bf16-367d-95b9-e1f59807e011.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
X509v3 Authority Key Identifier:
keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
sbgp-ipAddrBlock: critical
IPv4:
69.176.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:de:1f:ec:a7:e7:00:ac:8d:9a:42:4f:3a:40:43:4b:fc:af:
5b:f9:5b:2c:8f:68:af:19:34:55:7c:6e:89:26:d9:5f:94:94:
aa:ce:1b:eb:45:81:b3:ab:ab:1f:04:8f:07:5f:37:3a:86:83:
e7:a4:d9:7c:25:14:04:e3:4e:6d:64:ae:62:92:43:99:7e:e8:
f4:39:72:41:90:1c:45:d1:2d:1e:9d:e5:55:44:58:56:a4:3e:
54:22:32:17:65:62:b5:7c:15:a5:dc:e1:5e:c2:13:91:da:6e:
a4:67:c9:5c:e2:9b:51:bc:45:33:91:f6:46:36:1d:40:d3:8d:
0a:88:9e:50:f5:76:21:82:57:a1:eb:17:c8:61:1d:93:d4:f7:
7f:da:b8:52:f3:cf:47:12:b3:8a:4b:bc:62:63:64:d5:4b:ee:
57:a7:b3:1f:a0:9d:2d:2e:6d:59:ed:ad:d5:7f:c2:de:46:30:
9e:35:7a:3d:71:27:6e:a4:05:f2:d9:62:05:1e:ec:3b:f1:4e:
72:68:a7:f9:2f:71:39:82:a8:86:4c:3f:12:16:35:29:e5:ae:
99:a8:1f:82:d5:d6:37:d2:6e:d1:b1:e6:0c:1c:fc:c9:ca:0c:
c0:5a:a2:9d:2c:27:0c:38:51:59:d3:8c:fe:0c:20:60:76:f8:
7e:87:da:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:47:38 2025 by rpki-client