Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/011be0c2-599b-3860-bc74-e5c9e90ac6b3.roa
File: 011be0c2-599b-3860-bc74-e5c9e90ac6b3.roa (raw, json)
Hash identifier: c30rJ1pJ/nARfzBWpouAnlf8A0E/lT5NM123EVBBprw=
Subject key identifier: 1D:7B:DC:B8:7A:88:CD:43:9B:93:18:06:24:2B:F0:AC:F5:88:05:D8
Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial: 010D0C9F432858491D7182D282F45DB1C3396454
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/011be0c2-599b-3860-bc74-e5c9e90ac6b3.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 1239
IP address blocks: 67.43.40.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:82:d2:82:f4:5d:b1:c3:39:64:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=3fbcb04e-140e-45b7-8501-1d366edbcf00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:02:90:3f:81:27:4a:c6:55:fb:c5:a4:1b:b3:
60:c1:51:6f:8e:9d:88:33:5c:b8:ad:51:1d:da:9d:
5f:84:61:f4:94:6c:72:9a:16:1e:29:94:a0:92:58:
fa:2a:c9:f3:63:0f:2a:6f:2f:c5:b4:2c:a2:45:2a:
4f:af:a8:55:d0:6f:21:49:c1:87:f3:0c:e1:c1:a3:
af:2c:d1:40:1e:36:9e:56:a2:f9:7d:15:6e:50:87:
16:4f:23:29:99:55:81:e6:66:56:f2:2b:b9:ac:ed:
b9:5d:d1:4d:bc:bf:db:f7:83:52:d5:40:68:2c:16:
f6:fa:ff:3a:97:d9:d7:b6:1c:13:8a:bd:ba:d3:05:
eb:a1:c3:72:17:f8:e3:e9:c4:3d:5a:81:e3:bc:38:
dd:7d:6f:16:27:07:84:bd:e7:6d:91:fc:2f:a0:34:
2b:d8:f8:9c:c2:2d:a4:19:f8:a2:19:90:68:8b:eb:
06:35:10:4a:60:09:b8:7b:e6:2f:84:83:f0:96:f9:
55:b5:9c:47:4e:e8:bf:2f:f2:b0:3b:4f:9e:6e:ae:
d9:13:53:92:66:30:65:3a:86:8f:13:59:49:2c:22:
b4:10:c4:5a:9d:74:20:32:29:51:5f:36:39:bc:de:
cf:8f:55:e6:0d:18:0d:2a:d3:e5:87:97:b4:3a:6c:
db:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7B:DC:B8:7A:88:CD:43:9B:93:18:06:24:2B:F0:AC:F5:88:05:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/011be0c2-599b-3860-bc74-e5c9e90ac6b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
X509v3 Authority Key Identifier:
keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
sbgp-ipAddrBlock: critical
IPv4:
67.43.40.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:56:d8:84:17:1d:49:53:e6:40:f8:59:a9:93:8e:ff:f0:de:
67:7f:04:8c:16:c9:6e:93:9d:33:5f:4c:7e:05:dd:d3:80:5e:
c4:96:a9:e5:d0:93:c5:21:a9:42:80:db:d0:82:68:6d:0f:19:
2c:b0:06:54:db:06:db:46:d2:d0:d0:c4:08:47:f7:e9:90:c1:
8b:7d:e1:84:3d:05:63:d5:06:ac:bc:c6:7b:2b:24:f3:90:2b:
bb:35:21:81:c8:e3:55:99:db:58:fc:33:07:d9:7c:4f:68:fa:
ea:64:ac:81:a8:c5:c7:77:4e:e5:6a:99:08:c4:e5:11:da:8d:
48:a6:4e:d8:ad:2f:01:cf:2b:a9:14:a3:29:df:0f:a2:a7:a5:
76:e2:d9:91:9e:6a:a5:6c:df:a3:69:b3:32:91:5a:a8:54:7d:
ed:0f:7e:46:9b:99:41:54:9e:d4:29:04:54:3a:e7:35:85:18:
cc:ab:06:26:44:ba:e3:74:ab:b8:73:0d:62:f8:f3:bd:10:f3:
67:7d:b2:77:1b:91:76:95:24:54:d6:c1:9b:bc:5a:b1:91:28:
cd:cf:fe:01:58:9e:48:14:85:ac:3f:6a:ae:c1:b1:2a:18:7d:
d6:c1:6d:c9:fb:73:11:88:eb:f9:8c:15:d6:86:05:67:80:78:
41:7b:65:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:06 2025 by rpki-client