Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/e6ff4323-32bd-3eee-9f33-2548dc06d1b9.roa
File: e6ff4323-32bd-3eee-9f33-2548dc06d1b9.roa (raw, json)
Hash identifier: Uegw4FArCrWxIzf6+WsGl+YI+2z2GJyQImx8uFeArGY=
Subject key identifier: 55:6D:ED:DD:6B:42:2C:38:A9:5C:12:FC:D0:EA:15:15:11:90:FA:72
Certificate issuer: /CN=d409bef0-b6e9-492d-adf9-0bd8a5610c35
Certificate serial: 010D0C9F4328584909E6A6650705CB43700EC478
Authority key identifier: 3B:89:AF:36:6D:D2:02:F7:FC:DA:FA:4D:86:6E:9E:74:D2:2A:8B:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/e6ff4323-32bd-3eee-9f33-2548dc06d1b9.roa
Signing time: Sat 01 Mar 2025 02:00:39 +0000
ROA not before: Sat 01 Mar 2025 02:00:39 +0000
ROA not after: Fri 30 May 2025 01:00:39 +0000
asID: 14618
IP address blocks: 67.199.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:09:e6:a6:65:07:05:cb:43:70:0e:c4:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d409bef0-b6e9-492d-adf9-0bd8a5610c35
Validity
Not Before: Mar 1 02:00:39 2025 GMT
Not After : May 30 01:00:39 2025 GMT
Subject: CN=d04a775b-7e86-4fe5-ba4d-93222573bb1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f6:79:23:bf:80:22:ea:02:84:25:c9:96:d1:
45:36:44:72:a5:29:20:cb:1c:5f:34:a7:8e:d6:b1:
40:c7:b1:ce:9c:85:e4:94:aa:b1:59:2d:03:3f:2b:
31:db:92:61:bd:01:35:da:22:69:68:e2:92:33:02:
83:0b:88:b2:85:af:3c:84:04:d3:1c:e7:1e:42:5c:
b7:75:16:ad:40:da:72:da:82:4b:ac:df:f0:d9:74:
0f:43:77:17:3a:90:2f:6c:fb:67:ed:c9:50:a8:f4:
13:b6:15:fd:ca:2e:fb:23:37:ed:13:c3:c8:ca:c8:
74:fb:7d:22:2e:8c:7a:13:6e:77:3b:5d:9d:69:63:
37:2c:77:51:b9:0e:e8:1b:de:7f:eb:9b:7d:b0:57:
da:72:20:cf:1b:ca:4d:42:de:dc:70:a4:9b:dd:24:
a0:fe:50:94:48:fa:91:1d:22:df:01:a4:72:98:36:
ec:68:fb:fe:21:bb:52:52:95:5b:46:d6:35:36:07:
f9:ee:85:35:71:9a:ee:4f:69:cb:f3:3b:8b:25:be:
75:fc:fc:cd:5f:0b:1f:db:f1:2b:55:ff:50:c4:b8:
de:1d:86:8c:79:3a:8d:57:ac:41:38:92:57:0c:33:
cf:a9:b3:b6:bf:4f:dd:15:8d:ee:f3:2d:06:7f:8e:
74:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6D:ED:DD:6B:42:2C:38:A9:5C:12:FC:D0:EA:15:15:11:90:FA:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/e6ff4323-32bd-3eee-9f33-2548dc06d1b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.crl
X509v3 Authority Key Identifier:
keyid:3B:89:AF:36:6D:D2:02:F7:FC:DA:FA:4D:86:6E:9E:74:D2:2A:8B:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer
sbgp-ipAddrBlock: critical
IPv4:
67.199.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:4b:81:f7:88:19:80:68:21:57:b4:4f:03:08:26:a8:42:62:
6a:c2:ef:30:aa:ac:f1:bc:c9:9b:08:ad:c7:ba:8f:4f:ac:fd:
d4:c0:aa:46:3f:e2:e8:b1:fd:69:6d:2f:86:31:0d:e8:67:79:
31:14:d3:4d:1a:7f:39:ac:a5:76:a6:0a:ef:57:c8:ab:d8:50:
3b:63:8f:6e:2a:85:32:77:cd:e5:37:9f:0e:e9:dc:f0:34:ee:
84:c0:49:60:06:28:78:d0:db:42:c5:62:82:b6:2f:06:e6:02:
a9:83:38:0e:3a:84:80:16:a4:58:31:b0:aa:3c:56:b3:bf:08:
a4:68:e3:a1:9c:fe:f7:64:b5:a9:f2:bd:7e:15:4a:5e:15:63:
21:b6:c9:8e:e5:fc:d3:e2:a0:13:71:9f:83:2a:cf:20:26:c1:
37:6b:06:cc:2c:2f:c4:7f:0d:71:5f:17:51:85:76:fa:ae:85:
3f:4e:89:6b:82:e1:2d:32:18:a1:2c:00:23:60:83:fe:90:be:
6b:aa:c2:b1:53:7e:61:77:08:80:c3:df:d2:95:b2:20:d6:c6:
be:87:6b:7c:39:b4:a2:ae:73:ee:3a:e6:5f:d2:82:35:4a:f7:
5e:3d:37:c5:bd:57:5b:f2:74:09:a5:9f:57:ee:d1:b6:2e:9f:
93:62:1f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:31:21 2025 by rpki-client