Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/aeffd7b7-d459-3024-8d9d-969cc2e665a4.roa
File: aeffd7b7-d459-3024-8d9d-969cc2e665a4.roa (raw, json)
Hash identifier: O2E/k+fz0ARlCstoB13QqoGRYlEKb1+Anfc2fmJ4aTo=
Subject key identifier: 34:A8:4E:74:98:9F:FB:00:F6:8B:A5:18:AC:99:39:F3:81:03:BA:86
Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial: 010D0C9F43285848B6261A690B3492B59DAAA880
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/aeffd7b7-d459-3024-8d9d-969cc2e665a4.roa
Signing time: Thu 30 Jan 2025 02:00:40 +0000
ROA not before: Thu 30 Jan 2025 02:00:40 +0000
ROA not after: Wed 30 Apr 2025 01:00:40 +0000
asID: 834
IP address blocks: 67.43.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b6:26:1a:69:0b:34:92:b5:9d:aa:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Validity
Not Before: Jan 30 02:00:40 2025 GMT
Not After : Apr 30 01:00:40 2025 GMT
Subject: CN=cd1e68c8-f6c9-4d64-bc7c-06b190f0a6fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0b:3e:70:1d:e2:4a:fe:87:97:70:1f:36:f4:
2e:2c:4c:94:cc:1f:5c:43:e8:d7:73:5f:36:b5:50:
b9:ae:b1:53:7e:e3:6d:b2:13:51:4a:86:69:3e:0e:
6c:2b:00:cc:07:5d:e7:ad:6d:b2:14:fc:39:1c:06:
a9:b0:18:df:61:64:7e:57:ce:0d:37:de:25:f5:9f:
e5:ea:58:b3:f3:d5:35:d7:88:86:08:c5:b5:cf:11:
06:51:3b:49:1a:84:b3:1b:68:b1:31:d9:05:2f:2f:
ab:e8:95:d5:ad:9f:56:fa:13:e7:d1:f6:0c:07:90:
08:48:e1:f3:7a:bf:e2:fe:12:ca:86:92:a3:43:dc:
f3:7f:a1:97:1b:01:56:80:e1:ef:95:7f:52:ac:d6:
24:24:68:22:f7:b9:0e:19:f7:e2:72:0d:1c:41:1d:
19:82:af:27:63:7e:2a:84:d1:f5:4f:8c:21:79:1c:
5d:3b:99:12:ca:4e:e4:28:a4:ed:c4:fb:d4:48:c7:
13:0c:85:ba:1f:62:d1:11:62:c2:ba:26:ef:80:e2:
d7:82:02:38:4e:8d:43:fd:e6:3f:c2:95:df:4b:8c:
75:93:55:1e:1e:12:f3:8f:15:31:a4:a4:86:0e:29:
b2:12:c2:c0:70:5c:c5:dc:7e:e6:43:9f:42:4a:d9:
c5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A8:4E:74:98:9F:FB:00:F6:8B:A5:18:AC:99:39:F3:81:03:BA:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/aeffd7b7-d459-3024-8d9d-969cc2e665a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
X509v3 Authority Key Identifier:
keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
sbgp-ipAddrBlock: critical
IPv4:
67.43.41.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:01:2e:e1:bb:ce:e6:62:f6:a3:dd:42:9e:e5:84:10:8a:aa:
73:78:5a:21:4c:f9:db:77:d1:8a:8f:74:82:29:33:d5:d6:92:
d3:62:7e:d2:71:4a:59:37:ae:a6:d6:d3:35:d0:a9:16:56:b0:
64:89:ac:2e:6d:61:38:a1:87:c5:ce:2b:e5:b0:07:88:51:08:
ba:ba:f9:3f:f2:3b:7d:c7:23:c6:97:db:bd:cc:55:fe:96:cd:
cd:6d:e9:3d:80:5f:5b:7b:5c:0d:96:f3:75:e3:97:79:5e:11:
29:68:02:e9:de:76:88:3c:ae:d2:52:21:36:b9:bb:94:e4:57:
45:6e:6a:32:40:7a:ec:35:9c:7b:b1:dd:b0:0e:92:ae:f4:bc:
bb:b3:75:3e:31:2e:c6:ec:08:15:33:d1:dd:32:1c:3a:db:aa:
c8:22:a9:13:48:8d:5d:0d:b0:d1:f6:cb:1d:ac:ca:c4:d0:be:
35:a1:cc:e8:be:89:32:67:0e:2f:6f:67:37:15:db:cc:af:64:
55:9b:2b:b1:78:25:63:38:25:30:cb:81:fd:be:0c:a1:93:2e:
3f:e3:21:df:92:e3:85:3e:19:8a:75:d6:8a:da:5f:32:99:ca:
eb:ed:76:16:fa:18:fd:61:c2:e3:13:ac:33:f8:c5:12:26:95:
a5:68:28:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:52:23 2025 by rpki-client