Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/5c69fb2f-eb2e-3864-bb20-0eb70bfc673e.roa
File: 5c69fb2f-eb2e-3864-bb20-0eb70bfc673e.roa (raw, json)
Hash identifier: +YjcnVPz9AaU0IOtD1DtyuopEdCXvSsunnBAyi7/G54=
Subject key identifier: 50:6E:AF:D9:90:7F:23:16:08:F8:5F:17:92:1A:4F:70:80:33:FE:75
Certificate issuer: /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial: 010D0C9F4328584902EC0811F8EF475C4C8392C0
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/5c69fb2f-eb2e-3864-bb20-0eb70bfc673e.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 11260
IP address blocks: 24.222.0.0/16 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:08:11:f8:ef:47:5c:4c:83:92:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=6809e535-f9b4-4d28-8f0f-b013b7f0b465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:ef:f1:87:b1:1c:32:41:d2:3c:f2:78:b8:
a3:7e:7b:3e:aa:74:34:73:71:93:cd:fc:ad:35:da:
03:36:1b:fb:4f:04:e7:db:e0:2a:0b:55:b8:f7:56:
61:24:be:ec:03:de:c8:0f:96:25:89:aa:4e:55:4f:
cb:61:94:ea:d0:4f:aa:0b:c1:fe:49:eb:32:bd:9b:
5d:32:aa:f0:69:40:cd:01:19:8d:b1:41:15:40:79:
85:ac:f2:94:b0:be:63:96:a1:e6:1c:61:1e:96:c5:
c7:9d:e0:ea:fc:0e:38:c9:c5:b0:c0:ee:d6:c4:d5:
fd:81:e0:ce:bf:0c:10:6a:e8:a1:41:7f:ba:97:41:
73:b2:e1:0d:fc:98:20:4d:0e:e4:5a:54:3c:88:e6:
dd:6f:e1:0e:77:60:3b:02:81:f1:14:db:c8:86:ad:
b7:6b:3f:5a:ff:c3:fe:f3:02:9b:dd:c1:2d:ee:cf:
9e:34:7c:bf:85:49:d5:c6:43:c6:4f:c3:36:48:9b:
00:8c:31:5a:62:ac:03:1a:78:41:fc:a4:fd:ee:f9:
45:bf:6b:34:4b:aa:6c:4e:e3:7a:4d:31:1d:c8:20:
92:05:9b:6f:05:82:21:8a:00:68:c4:b1:67:0c:7c:
a0:59:43:bd:c2:64:c7:26:43:42:b8:6d:02:c5:1b:
3c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6E:AF:D9:90:7F:23:16:08:F8:5F:17:92:1A:4F:70:80:33:FE:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/5c69fb2f-eb2e-3864-bb20-0eb70bfc673e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
X509v3 Authority Key Identifier:
keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
sbgp-ipAddrBlock: critical
IPv4:
24.222.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:53:b5:f8:a5:bc:59:bb:2c:29:83:f5:1b:42:5d:43:08:ce:
c2:12:54:b5:1e:ff:49:24:32:2c:2c:27:76:a1:63:80:1c:f8:
64:57:9e:f6:03:fd:05:c6:ea:a3:54:e0:e9:4e:5a:fc:41:53:
04:d5:b9:a7:eb:cb:82:4d:d0:08:e9:99:17:0a:c3:3b:ec:db:
9c:cd:28:2d:f4:36:39:cd:ad:56:7f:00:70:bb:5f:48:2d:de:
72:24:a9:0c:21:ab:3a:c8:cb:a4:97:88:01:8c:e7:50:62:eb:
6a:7a:5e:2d:b1:b8:f1:13:14:9f:db:e7:fc:8a:34:d4:2d:12:
12:db:ad:2b:e7:74:8d:2a:f8:d2:fb:f5:36:8a:34:c8:f7:4e:
fa:ed:52:d2:a8:65:a8:ad:1f:64:ed:e5:7e:40:3d:8b:62:df:
b0:94:d6:02:5f:6d:c2:e3:23:93:22:24:32:0c:f0:34:70:cf:
9a:25:51:2e:e1:76:6b:ec:09:ad:47:c5:f0:e8:9b:99:5e:f4:
fa:09:7c:0f:00:a8:fb:82:fe:fe:49:35:df:12:95:30:4c:ed:
ec:46:a0:77:14:19:80:e5:3d:19:eb:6e:b0:b8:d3:c0:03:b9:
f1:52:a3:a5:ab:e8:88:8f:8f:1b:a2:2d:9e:14:b8:1f:59:fc:
f1:1d:33:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:22 2025 by rpki-client