Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/8de3435f-e6ea-387d-ae03-f28b14654e4a.roa
File: 8de3435f-e6ea-387d-ae03-f28b14654e4a.roa (raw, json)
Hash identifier: /QOODQgtHwCbOztElyL4lJT0crOgvZBJyC7RC6UaQ0c=
Subject key identifier: CC:37:1A:A0:C4:50:D9:C3:5F:D0:20:48:B4:BC:8E:4F:88:3D:67:66
Certificate issuer: /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Certificate serial: 010D0C9F432858487CEB2BF9EDAE4F67FC9DAE72
Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/8de3435f-e6ea-387d-ae03-f28b14654e4a.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 401307
IP address blocks: 69.58.58.0/23 maxlen: 24
69.58.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:2b:f9:ed:ae:4f:67:fc:9d:ae:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=9a3c7a70-cdf3-4f8d-be6b-ec2e4dd276b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5d:63:3f:96:9c:04:fc:18:15:49:b7:dc:1b:
00:6e:43:0c:a4:7a:35:6b:6d:52:f3:46:9a:45:ee:
15:96:32:73:29:a5:08:d4:73:f8:be:14:7b:23:e8:
1f:cd:19:91:d2:a5:f8:31:92:9b:97:78:94:91:40:
e4:d4:14:75:8f:b9:a9:31:08:8e:d2:5f:9e:bc:3f:
fb:e5:5e:d2:91:4f:92:3e:7c:5d:28:db:50:d4:b2:
9b:4c:93:97:08:1c:55:5d:1e:ea:18:c2:5d:98:89:
33:5d:d0:85:26:5d:17:52:be:7f:7a:45:d5:83:5b:
44:4c:42:1a:70:fa:8d:f7:53:4d:0e:68:9f:38:24:
0b:ed:9d:99:3e:18:5e:39:dd:c9:3e:e0:dd:c5:71:
61:05:41:16:3d:33:48:6c:cf:5e:4c:35:a5:10:9a:
11:d6:73:e8:7b:23:3e:19:4f:69:ff:a1:f5:85:26:
38:bf:de:f4:3c:29:f6:57:5f:6c:8f:a3:23:84:6a:
b2:65:a9:32:de:8b:6f:23:79:d2:f9:2a:91:4f:b4:
79:3c:97:72:17:1b:4f:92:4d:4b:e0:fa:1e:ca:1c:
36:4d:2c:a5:51:95:90:f7:78:6c:0d:ed:55:6c:8a:
a9:c4:ce:0e:a7:53:99:80:4e:ac:79:c9:ae:94:8a:
ed:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:37:1A:A0:C4:50:D9:C3:5F:D0:20:48:B4:BC:8E:4F:88:3D:67:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/8de3435f-e6ea-387d-ae03-f28b14654e4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl
X509v3 Authority Key Identifier:
keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
sbgp-ipAddrBlock: critical
IPv4:
69.58.58.0-69.58.60.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:2c:63:ef:b7:5d:0c:f9:d2:c6:fd:55:de:09:b3:48:2e:67:
3c:cd:65:40:a1:88:09:85:84:88:20:c1:81:55:60:51:1e:7b:
3e:ad:f8:16:35:4b:10:88:e8:92:09:1d:7f:64:da:f2:79:0c:
aa:39:c0:01:1e:9e:35:a3:74:d6:23:6a:dc:96:f3:bc:85:bf:
d2:63:d8:27:a6:3c:88:5a:e7:53:65:8b:aa:4f:f1:dd:09:29:
da:59:36:47:14:a7:33:76:0c:b5:45:c2:3a:c1:76:a2:b6:78:
49:cf:c4:0b:06:61:ff:38:44:ae:f6:b6:a8:8a:69:09:62:30:
5d:54:6f:ad:d6:ee:05:e0:8e:06:cb:c9:f1:87:7f:8a:b9:71:
e2:46:7e:22:8e:5a:fb:7e:d3:f5:ec:e4:92:fd:d6:6e:47:2d:
32:ba:f4:db:b3:a6:45:09:77:9f:20:c7:3e:ab:33:82:d3:f6:
c4:b8:53:fa:3d:b8:9a:38:22:ea:a1:61:33:07:65:10:fb:68:
9f:0c:b8:11:71:b0:86:0a:cd:20:77:fd:55:8e:c1:b4:de:40:
23:a1:d2:63:95:6a:e4:33:21:d1:29:7b:99:eb:ca:ad:af:aa:
28:d9:fa:a5:7d:dc:de:1d:d3:71:1e:cc:e1:14:fe:c3:01:e0:
d5:e1:11:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:39:50 2025 by rpki-client