Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/4e4fae1e-144d-3719-a852-b9250afa3ebe.roa
File: 4e4fae1e-144d-3719-a852-b9250afa3ebe.roa (raw, json)
Hash identifier: r8267w9pHLIPJL9bziCTGoaETFl6AAy8CxeG/XyBTYQ=
Subject key identifier: A2:8B:D5:6B:CB:A6:4C:1B:75:FE:85:BB:3A:A5:7D:1A:5E:DB:50:61
Certificate issuer: /CN=000bd43e-168e-4afa-8dc5-47948687933d
Certificate serial: 010D0C9F43285848AF2B7A881052AFE9C70B2A28
Authority key identifier: 89:A8:0F:B7:A7:A5:C9:88:10:88:64:A9:48:72:5A:5A:BA:2D:64:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/4e4fae1e-144d-3719-a852-b9250afa3ebe.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 16509
IP address blocks: 69.52.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:7a:88:10:52:af:e9:c7:0b:2a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000bd43e-168e-4afa-8dc5-47948687933d
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=42212ee6-9691-4237-bd92-a41bf63cb767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:da:08:04:7f:9a:bf:9d:b7:e7:df:72:e8:37:
a6:9a:fe:ac:78:e0:49:8a:f0:2a:6e:2c:15:08:2a:
ad:c8:46:2a:e0:1c:41:7c:0c:66:07:70:59:57:8e:
37:f2:fb:fc:8e:16:88:a5:e3:b0:e2:cf:78:fd:c8:
55:95:09:ee:e6:1e:56:9b:04:0a:24:40:18:3b:be:
3f:3e:11:82:14:32:17:fc:91:38:57:eb:d7:ca:e7:
a6:7e:c5:05:19:0c:5d:37:34:27:28:0b:af:d9:58:
92:d6:cf:65:63:ab:7f:87:a7:78:f9:2f:0d:94:ef:
9f:90:6e:c0:89:67:48:d1:5e:c3:e7:84:2b:ad:97:
3a:7b:9a:63:56:4f:26:10:aa:ea:7c:12:e3:2d:57:
3e:a7:ea:4c:65:33:0e:e2:41:8a:59:c2:3a:01:37:
e6:47:c2:57:98:37:6b:9d:a7:93:89:d6:8d:0b:7c:
bd:7f:7f:ae:4e:26:82:c4:e6:06:53:d2:5b:29:74:
61:89:d1:a4:f7:9d:bc:cb:16:96:77:46:52:26:c8:
41:05:71:aa:28:02:fc:47:8f:e3:01:81:0a:8d:81:
0c:bf:57:04:a5:ac:c0:7d:6b:7c:64:3e:12:fc:fe:
24:f5:76:9e:b6:1d:f1:40:eb:92:40:72:67:14:85:
f9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8B:D5:6B:CB:A6:4C:1B:75:FE:85:BB:3A:A5:7D:1A:5E:DB:50:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/4e4fae1e-144d-3719-a852-b9250afa3ebe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d/000bd43e-168e-4afa-8dc5-47948687933d.crl
X509v3 Authority Key Identifier:
keyid:89:A8:0F:B7:A7:A5:C9:88:10:88:64:A9:48:72:5A:5A:BA:2D:64:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/000bd43e-168e-4afa-8dc5-47948687933d.cer
sbgp-ipAddrBlock: critical
IPv4:
69.52.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:61:c7:99:e1:36:33:b6:be:e7:f7:a6:d5:93:6a:af:d7:14:
8e:ba:d1:0e:df:c1:a1:43:91:b3:38:c5:37:7b:da:61:84:e3:
cd:1a:70:81:88:aa:60:37:03:a1:15:10:15:6b:62:98:72:9d:
06:5c:e0:c1:37:00:63:8b:db:4b:46:c6:37:f4:16:5e:e9:cb:
bf:45:43:0e:64:36:df:1a:0a:e6:be:c5:49:11:b5:b9:d1:a9:
93:fe:1d:9f:aa:c5:ab:b7:fc:14:e3:0d:38:e7:53:77:9e:fb:
26:f5:54:91:0c:28:1e:36:17:46:42:8b:19:e7:43:1d:7f:ae:
29:fe:fb:48:31:5f:84:a5:8c:ec:c0:40:a9:06:84:f1:bc:f4:
ee:53:c6:ab:0c:98:de:84:04:1d:cd:90:b5:d6:5a:31:56:10:
01:95:0e:92:b6:b3:74:6e:0a:9f:e5:b3:64:ca:e8:38:6e:56:
3d:c2:54:66:a1:e4:ee:c8:09:22:32:b6:5c:20:ef:bd:aa:98:
16:77:b4:9a:a2:7e:40:0f:fe:54:fa:3b:42:f8:0e:9d:73:71:
1d:ea:e0:0a:09:b2:a2:17:bd:63:30:ba:52:91:2b:da:71:ef:
fd:be:fb:86:53:da:d5:1f:e8:75:95:2c:1e:8e:89:73:2b:a6:
f8:c0:44:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:22:47 2025 by rpki-client