Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fa73dcdd-8c93-40af-8405-b4fb0f23224b/99878f1f-7e0f-3386-bcf6-7c22b1c9a3f1.roa
File: 99878f1f-7e0f-3386-bcf6-7c22b1c9a3f1.roa (raw, json)
Hash identifier: Ki3ipn5zQ6wP+NT/54jnunxEIIf5xoQUupGvj/2DnLc=
Subject key identifier: A9:F8:E7:71:75:AB:09:12:6E:26:AA:26:BF:99:A5:9E:FA:16:BF:72
Certificate issuer: /CN=fa73dcdd-8c93-40af-8405-b4fb0f23224b
Certificate serial: 010D0C9F43285849203C14A2CF7E12F54EEC6200
Authority key identifier: 86:A7:04:EA:0D:4F:45:83:9D:E5:EA:E4:75:A0:DD:FC:42:08:4C:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fa73dcdd-8c93-40af-8405-b4fb0f23224b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fa73dcdd-8c93-40af-8405-b4fb0f23224b/99878f1f-7e0f-3386-bcf6-7c22b1c9a3f1.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 20436
IP address blocks: 69.4.192.0/20 maxlen: 24
74.51.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:14:a2:cf:7e:12:f5:4e:ec:62:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa73dcdd-8c93-40af-8405-b4fb0f23224b
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=a24bdc81-f132-484b-92d3-ad85825060c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:02:2d:0c:5c:26:cb:fd:f5:7a:f4:0f:f2:3d:
36:07:39:b4:26:a0:4e:b9:93:96:80:25:20:0a:34:
14:b1:8c:97:3a:fd:b7:d5:69:01:f3:7c:a2:0b:38:
42:c1:48:f9:77:2a:00:2a:6c:15:07:6e:ce:5e:b9:
39:82:6c:14:94:38:f8:db:8b:01:f1:d0:b8:cb:ed:
ba:37:c0:8a:38:4d:80:c6:2c:55:81:ac:4c:f6:82:
e5:50:7a:79:18:62:26:22:8d:9c:df:31:f0:f5:b6:
f1:10:8b:f8:9b:9c:48:d7:16:8f:61:d9:bc:c0:04:
8b:51:31:83:a8:fa:cc:1f:44:18:72:58:22:d2:ad:
a7:46:54:75:39:5b:89:d5:a0:e6:14:53:20:e9:ac:
b3:88:d3:bf:b4:b2:4f:92:e4:3f:6d:16:a3:fe:ee:
c7:2c:4a:76:92:75:3f:6b:e9:23:23:2d:04:98:55:
ce:ce:fd:f3:60:3a:50:6a:29:32:8f:60:e2:fb:37:
de:68:78:05:83:ed:78:4b:ed:db:40:2b:95:a6:15:
8e:ed:15:33:44:81:fb:d6:f3:86:88:34:93:39:2d:
c7:73:c0:a9:93:f5:43:d1:4c:f1:f6:83:d8:1d:34:
db:68:f7:f4:f1:7d:4a:2f:c5:45:59:c6:77:c5:bf:
07:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F8:E7:71:75:AB:09:12:6E:26:AA:26:BF:99:A5:9E:FA:16:BF:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fa73dcdd-8c93-40af-8405-b4fb0f23224b/99878f1f-7e0f-3386-bcf6-7c22b1c9a3f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fa73dcdd-8c93-40af-8405-b4fb0f23224b/fa73dcdd-8c93-40af-8405-b4fb0f23224b.crl
X509v3 Authority Key Identifier:
keyid:86:A7:04:EA:0D:4F:45:83:9D:E5:EA:E4:75:A0:DD:FC:42:08:4C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fa73dcdd-8c93-40af-8405-b4fb0f23224b.cer
sbgp-ipAddrBlock: critical
IPv4:
69.4.192.0/20
74.51.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:5d:71:d1:b8:db:16:a7:af:52:a0:8a:1f:38:8e:bd:6d:86:
e9:ec:08:be:c3:b2:46:26:b0:c1:d0:33:21:17:4f:67:3b:1a:
58:f9:14:30:58:ae:94:99:43:ad:3c:f9:71:d4:60:57:b9:1c:
cb:ad:ef:1c:f0:39:97:e6:c0:68:78:38:df:13:6f:db:0b:73:
4b:83:cf:47:65:f8:7c:29:2e:64:fa:da:94:6d:6d:92:64:8f:
c3:99:bf:03:0a:39:8d:96:0e:c3:3c:36:fe:89:d5:a7:cf:b6:
22:06:c6:a1:8d:82:3b:78:68:92:34:97:40:d3:a7:ac:c0:a4:
7b:1a:2c:d1:08:9d:de:57:a8:ba:41:ca:a7:20:4d:9c:35:41:
d3:4c:3d:ba:e6:4c:d9:7d:17:7c:f7:e0:ee:ac:d4:b2:f2:8c:
97:a3:c5:f4:0a:71:cd:c1:59:57:67:33:2a:00:d7:76:88:9f:
19:d7:29:11:79:d6:89:f0:a8:f9:43:bd:68:61:23:98:b3:62:
26:df:a3:a5:e0:42:8c:7c:3b:a1:6d:d8:63:8d:99:9c:b0:6d:
19:01:5c:01:33:81:b6:f5:e4:21:7b:c3:58:af:2a:03:72:1b:
de:07:10:15:c7:5c:b0:4c:5d:6e:d7:ba:1c:7f:b3:e1:f8:b1:
ce:4c:5b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:26:13 2025 by rpki-client