Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2f1b37ca-705f-373b-8053-f676d1108766.roa
File: 2f1b37ca-705f-373b-8053-f676d1108766.roa (raw, json)
Hash identifier: 1+wDzMxgyZtRm9B6vkHtpXxQUhV2uHy1BaoPwdHuh2k=
Subject key identifier: 5A:12:E8:02:27:B6:56:6E:DD:02:A0:CC:9C:32:7F:A6:13:4B:72:6F
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285848D6411096B17FD3C256180A90
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2f1b37ca-705f-373b-8053-f676d1108766.roa
Signing time: Mon 10 Feb 2025 14:00:52 +0000
ROA not before: Mon 10 Feb 2025 14:00:52 +0000
ROA not after: Sun 11 May 2025 13:00:52 +0000
asID: 21859
IP address blocks: 67.227.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:41:10:96:b1:7f:d3:c2:56:18:0a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Feb 10 14:00:52 2025 GMT
Not After : May 11 13:00:52 2025 GMT
Subject: CN=40af81e8-b2c5-46ad-816a-723ea6cba083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:bf:e7:6a:e9:9f:12:02:49:e0:47:17:09:b2:
a9:30:24:09:25:42:16:f8:17:3e:fa:77:0d:68:05:
9e:9b:8f:d2:60:75:43:62:0a:96:17:20:a3:25:fa:
2c:e9:9e:41:d8:41:e7:84:9b:45:ee:76:10:2b:85:
ef:a4:94:30:80:36:0f:5c:25:22:49:a6:51:22:08:
48:29:fd:8e:be:56:ce:e6:69:16:3a:f2:67:a5:e3:
01:01:dd:68:2b:3f:59:e1:0e:a4:35:3a:b9:b9:87:
28:e8:14:83:f2:42:69:12:03:4b:79:da:92:ba:b0:
54:39:cc:5e:c1:4c:a7:f9:71:3b:3b:57:29:90:c8:
8d:45:29:d7:2a:dd:b6:c8:a1:c7:4b:1c:48:a0:48:
32:ed:85:63:1d:6f:cb:39:85:4e:ee:19:e1:67:27:
78:1e:f3:c3:72:12:20:df:b2:78:9c:42:bb:d5:7e:
0e:11:40:e3:e6:d0:06:cd:61:78:7d:07:1c:67:26:
55:f8:f5:92:3c:d8:ed:82:8c:ae:e6:29:64:2d:21:
cd:69:c5:d5:b8:d7:e5:b1:e6:d9:2e:42:aa:31:d3:
7e:b6:33:8d:f4:89:8b:36:7d:5f:c0:9d:57:38:20:
b4:c4:69:ff:64:f8:81:68:a4:60:57:2e:8e:f1:7c:
b7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:12:E8:02:27:B6:56:6E:DD:02:A0:CC:9C:32:7F:A6:13:4B:72:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2f1b37ca-705f-373b-8053-f676d1108766.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
67.227.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:44:a6:da:86:6d:70:a6:b4:7c:75:27:58:60:dc:b1:34:0a:
2d:9c:e6:d8:16:7d:3c:34:b6:8b:90:22:e5:27:56:af:55:1f:
3a:ed:b4:97:8a:89:6a:c5:2c:bc:7a:7a:7d:7e:ef:87:fd:4e:
b0:35:39:fa:c0:26:9b:e1:0b:81:7a:22:73:3c:44:d7:00:95:
30:1e:61:1b:01:4d:ab:8e:2f:91:52:fe:bf:f2:4d:18:0c:4e:
e5:15:a0:c2:d1:ab:28:42:a8:a1:e4:78:23:b4:67:78:40:f1:
e4:e1:b9:79:58:78:3c:83:05:81:41:57:6c:a0:86:b7:05:16:
60:db:36:0a:16:80:9a:54:45:5d:1c:01:aa:98:fc:38:e7:e4:
54:40:50:e0:46:70:99:f4:60:f7:8c:cc:10:d3:51:47:45:89:
0d:1e:16:12:32:ab:22:ff:a1:41:47:7a:b2:e8:92:3c:2e:85:
64:45:e8:3b:35:99:b1:89:bd:72:16:7b:76:8c:33:44:74:90:
ca:2a:98:af:5a:97:27:24:29:54:d4:ed:f4:b8:38:94:3c:3f:
f2:4c:31:44:cd:b8:fe:2b:b7:d4:17:ab:54:a0:cc:b8:5a:93:
5e:78:5e:a5:08:30:6b:16:29:ad:a1:76:9f:ee:87:10:35:03:
fa:ea:0f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:44:32 2025 by rpki-client