Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/265fce87-f900-311a-a11c-397d86ecb0a8.roa
File: 265fce87-f900-311a-a11c-397d86ecb0a8.roa (raw, json)
Hash identifier: i3JDEDiu8+MLukxr0IrtVFQKzYYLVCrZMBcpLjThDuI=
Subject key identifier: DD:04:B5:5B:90:44:B6:2B:C6:DC:8C:CE:5E:CD:10:EF:43:DC:C3:D3
Certificate issuer: /CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
Certificate serial: 010D0C9F432858490E16C578FBB236F07541C400
Authority key identifier: A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/265fce87-f900-311a-a11c-397d86ecb0a8.roa
Signing time: Sun 02 Mar 2025 14:00:52 +0000
ROA not before: Sun 02 Mar 2025 14:00:52 +0000
ROA not after: Sat 31 May 2025 13:00:52 +0000
asID: 31898
IP address blocks: 69.4.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0e:16:c5:78:fb:b2:36:f0:75:41:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f9f5021-d780-4759-ac0f-1865ab8d5a61
Validity
Not Before: Mar 2 14:00:52 2025 GMT
Not After : May 31 13:00:52 2025 GMT
Subject: CN=6c0762ee-d977-4ae7-81ca-7a91a466008c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8f:69:b9:b0:fe:7c:f5:92:6d:0b:0c:35:7f:
7f:35:0c:7e:30:2e:b9:a1:83:3d:3d:0f:6e:eb:ba:
fc:03:79:f7:3c:1d:5a:c6:c6:91:68:10:8e:37:79:
a1:31:6f:ba:07:88:ec:72:15:63:57:c7:7a:24:85:
bf:4b:ce:c7:c9:a0:dd:a9:88:56:14:df:01:1e:10:
d1:b2:5c:f9:eb:67:d7:a6:b4:ac:ab:67:0d:87:8b:
5e:f9:a2:f7:c0:5c:b3:a2:38:b9:4c:58:43:fc:fb:
f0:1f:05:20:e7:dc:9c:77:2a:7a:a9:83:bc:85:40:
3f:07:14:ef:bf:61:30:f5:91:ec:16:dc:2a:83:fc:
35:f8:39:30:1b:d3:9b:f3:10:f4:68:44:a3:67:2e:
92:92:ab:8c:aa:3b:03:25:88:7d:27:1a:f3:ec:33:
02:2d:8e:03:30:a7:12:91:26:a2:3e:e9:3d:0a:d4:
d9:8b:fb:c0:8a:19:7c:a5:1f:e0:9d:cb:9b:59:80:
12:f7:8c:af:30:a5:ab:ee:42:de:2d:fe:1f:71:78:
aa:02:35:4d:67:d8:32:ff:c7:72:37:92:6b:51:35:
eb:a1:46:e0:2a:b5:d0:89:65:5c:8c:de:4b:95:3b:
0d:15:c7:b7:78:5c:fd:fa:05:15:5a:16:19:40:7e:
98:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:04:B5:5B:90:44:B6:2B:C6:DC:8C:CE:5E:CD:10:EF:43:DC:C3:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/265fce87-f900-311a-a11c-397d86ecb0a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61/9f9f5021-d780-4759-ac0f-1865ab8d5a61.crl
X509v3 Authority Key Identifier:
keyid:A7:F5:60:C1:80:EC:25:8A:8F:F9:A2:A8:4D:ED:D1:BB:D5:C7:07:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9f5021-d780-4759-ac0f-1865ab8d5a61.cer
sbgp-ipAddrBlock: critical
IPv4:
69.4.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:7d:e8:7f:2a:24:5d:13:9b:ea:85:ec:16:33:45:35:b9:80:
d9:ba:2b:50:48:fb:90:4c:d8:92:95:35:14:87:0b:17:0b:82:
75:64:b7:5e:7f:29:a4:0b:5c:e7:7f:f3:61:c9:b2:7c:aa:3d:
bd:1c:c3:28:ac:b0:4a:0c:b7:f8:29:1f:92:bb:4d:3c:2b:b4:
72:bc:53:a0:1f:90:96:17:be:35:98:f1:35:fa:3b:f1:be:c9:
98:f6:b4:b6:83:13:f8:fb:8d:34:fd:09:a3:c9:4f:e3:51:25:
b9:44:66:0d:80:22:ac:eb:a1:7a:72:96:99:a5:06:04:ad:f9:
4d:45:9d:d7:69:27:21:46:0d:52:6b:a7:7f:fd:bc:a3:07:e2:
45:07:82:1d:33:1e:4b:49:4b:4e:b0:26:3f:7f:5e:bf:5c:07:
0c:e3:92:74:f2:9c:8c:c6:fc:d1:61:b8:21:da:8b:cd:1c:59:
2e:1b:52:e4:50:9a:eb:eb:13:9e:8f:18:52:54:66:15:ca:30:
f9:bc:2e:9f:64:55:bb:42:74:26:6d:16:38:be:65:0d:2f:10:
52:d3:23:d5:b7:c3:af:47:31:08:5c:fe:1e:70:92:0c:c2:14:
09:34:de:e1:40:05:d5:63:64:c6:0a:ad:1d:0e:73:51:42:14:
16:47:c4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:19:42 2025 by rpki-client