Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/cd349d2a-eb94-3d55-8cdc-d567c458db22.roa
File: cd349d2a-eb94-3d55-8cdc-d567c458db22.roa (raw, json)
Hash identifier: 6ciG5Rtko1SSEJwbcsYeR+nSTX8HSZFqcyDkPx1D2yI=
Subject key identifier: 3C:E7:DD:89:0D:D7:80:C4:25:9E:8B:43:27:61:A7:E8:4F:86:36:67
Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial: 010D0C9F43285848A7411D48B641B298142AE700
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/cd349d2a-eb94-3d55-8cdc-d567c458db22.roa
Signing time: Fri 24 Jan 2025 17:58:05 +0000
ROA not before: Fri 24 Jan 2025 17:58:05 +0000
ROA not after: Thu 24 Apr 2025 16:58:05 +0000
asID: 7018
IP address blocks: 69.176.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a7:41:1d:48:b6:41:b2:98:14:2a:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Validity
Not Before: Jan 24 17:58:05 2025 GMT
Not After : Apr 24 16:58:05 2025 GMT
Subject: CN=40523a2f-2eb9-499c-9666-4e5348b9d939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1d:78:61:8a:7c:df:6c:e7:e4:bb:2b:83:1b:
99:13:86:05:a9:e4:b6:5a:ae:a1:73:83:22:3b:e4:
a0:17:60:9c:dc:7b:1d:ec:72:74:78:d8:7a:e9:08:
a1:f0:b5:a5:d2:9d:13:96:f4:f0:94:2b:7a:4f:88:
cf:e9:a4:04:b8:6a:ee:22:23:7d:a8:8e:f3:ee:44:
b8:ba:dc:4e:60:a6:18:7d:3d:6a:ea:cf:a1:26:c7:
4d:92:2c:91:6e:29:36:80:ad:f2:72:29:70:48:ad:
d3:53:71:1c:86:45:c8:50:6e:b9:13:18:09:b6:41:
84:ee:5c:15:3c:39:ac:30:ff:3b:56:e3:ba:e5:8a:
82:8f:45:f9:7f:d9:12:83:d4:b3:14:3f:ed:e9:18:
d6:39:3c:20:36:dc:37:99:ed:d9:ab:84:e9:5c:cc:
70:87:4f:b1:f7:8a:e5:d5:ac:74:ab:da:82:b4:0d:
e0:18:0b:2b:81:d0:31:3d:c9:99:6e:65:db:d9:13:
e6:ef:7e:84:7f:bd:f9:ab:04:43:6f:42:98:52:a1:
a6:c4:05:a4:ae:37:b7:96:52:b1:5c:2e:dd:ed:72:
48:fd:a0:b6:39:1f:36:cb:69:24:6e:93:d5:78:d8:
3b:1e:b4:a2:67:39:9c:71:5f:54:a8:29:fa:0b:e0:
74:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E7:DD:89:0D:D7:80:C4:25:9E:8B:43:27:61:A7:E8:4F:86:36:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/cd349d2a-eb94-3d55-8cdc-d567c458db22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
X509v3 Authority Key Identifier:
keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
sbgp-ipAddrBlock: critical
IPv4:
69.176.93.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:e0:43:f2:54:67:8c:c6:74:01:a1:b8:10:06:9f:fd:98:9c:
af:c2:91:10:e6:94:17:c8:81:93:7c:07:13:6a:c2:25:5f:42:
cf:b3:b2:fb:11:e6:bb:45:7d:bf:7e:a0:cf:a5:0c:a1:c4:db:
58:58:90:cb:c2:12:bf:9d:cb:b3:5c:03:ed:3a:07:a9:a7:e1:
ca:ed:21:29:21:26:06:36:94:cb:7d:3b:c5:c6:72:64:89:c9:
15:b0:e6:ca:85:45:0c:be:8d:4a:31:54:6c:c8:ac:f4:ff:05:
20:4a:83:79:93:0e:9e:b4:74:c9:f6:f1:01:aa:6a:9f:5a:ec:
e7:e8:eb:60:fb:b8:81:a5:8a:35:3f:25:d8:46:ad:9a:10:40:
91:c9:3c:9b:19:ce:97:95:64:7d:8d:64:56:92:19:87:a3:2b:
3d:a4:44:fc:af:4b:53:40:64:c4:13:9e:9f:66:98:e2:e2:22:
d7:74:34:d7:0b:35:aa:3d:97:73:22:23:f7:a7:a4:3e:c8:97:
bf:09:1b:2d:84:1a:fd:67:72:8d:d0:a4:36:6c:01:e4:6c:34:
9b:df:d0:92:0b:fe:73:90:ca:59:9e:01:28:ba:c0:a2:ee:58:
91:cd:c7:47:52:01:78:91:c4:71:4c:aa:a6:25:b3:4c:ce:cb:
d4:88:4e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:40 2025 by rpki-client