Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/8f5eda80-bc10-3624-b2a3-e6ffeaf6fc3d.roa
File: 8f5eda80-bc10-3624-b2a3-e6ffeaf6fc3d.roa (raw, json)
Hash identifier: 254h3Ofi2BIUMPCBugS4yoGYWm12l7YYOL+IXj8oOI8=
Subject key identifier: F8:9F:14:2F:8E:E0:80:2D:40:F6:E2:55:BD:0C:EE:0F:33:B8:66:5C
Certificate issuer: /CN=928cccc8-4c1d-457b-a709-2f2c5d83c939
Certificate serial: 010D0C9F43285848FD56B624F9F9BE4142B4B240
Authority key identifier: E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/8f5eda80-bc10-3624-b2a3-e6ffeaf6fc3d.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 14618
IP address blocks: 67.226.220.0/24 maxlen: 24
67.226.222.0/24 maxlen: 24
204.110.221.0/24 maxlen: 24
204.110.222.0/24 maxlen: 24
204.110.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:b6:24:f9:f9:be:41:42:b4:b2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=928cccc8-4c1d-457b-a709-2f2c5d83c939
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=77a769ca-bceb-4caf-b26d-a3109658488e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:89:7d:f5:5a:75:2a:10:33:91:88:b7:b2:70:
bf:09:d8:6a:df:71:0e:84:df:06:be:6a:9e:ad:2b:
53:3f:e6:22:6f:51:81:7a:2a:eb:65:6c:e9:5d:41:
39:59:3b:5b:8d:d4:6a:56:b6:35:3f:7e:10:f4:8d:
d3:02:c1:8c:5b:41:61:ab:fa:9e:27:c1:29:e6:38:
38:fb:6f:1f:10:b2:03:7d:dc:ed:44:71:3a:b8:22:
bf:9a:b5:b2:de:d4:b6:0f:79:d8:95:eb:01:a2:ed:
cb:23:e4:5f:af:d0:ec:2f:26:9e:a0:fa:0e:a0:59:
1e:90:39:11:cb:a1:b8:e2:69:f3:ef:0a:b2:14:53:
02:51:8f:b3:eb:9f:95:f1:3b:f3:cf:94:c8:1c:3b:
e0:92:1f:6c:80:89:a3:11:0c:db:cb:de:4f:a2:2b:
45:88:2e:88:42:13:92:9f:2d:02:44:0a:9b:f5:70:
1b:99:6c:81:c4:cb:e5:3a:2e:0b:30:bb:6f:07:38:
99:33:91:d5:4e:92:4b:23:94:a7:fb:57:7e:cc:d8:
90:f0:53:85:30:21:ae:2b:c4:ab:00:4b:e0:6c:a3:
fb:46:a9:a9:56:ca:c0:4e:bb:5f:b6:1a:1b:8f:33:
1c:af:ec:f5:de:a0:5f:4b:b0:91:19:61:11:fe:9b:
67:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9F:14:2F:8E:E0:80:2D:40:F6:E2:55:BD:0C:EE:0F:33:B8:66:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/8f5eda80-bc10-3624-b2a3-e6ffeaf6fc3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl
X509v3 Authority Key Identifier:
keyid:E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer
sbgp-ipAddrBlock: critical
IPv4:
67.226.220.0/24
67.226.222.0/24
204.110.221.0-204.110.223.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:cf:27:fe:bf:d6:f5:74:b0:c7:3f:c4:6e:f7:f1:11:24:3f:
ed:af:02:fa:5a:d0:af:95:18:95:82:0c:e6:b8:04:4d:72:ad:
fa:58:60:b3:5d:14:b7:ce:6f:b1:dd:6d:12:14:20:6a:7c:7e:
34:49:bc:d4:f5:9c:2f:16:93:24:8b:20:7b:08:3a:c3:51:5a:
b4:ad:e6:74:22:4b:72:34:be:7c:88:a5:25:be:eb:04:4b:96:
cb:89:bb:81:6b:53:14:7d:fb:96:67:ea:47:3b:56:11:94:09:
20:60:70:e4:5f:ed:87:ea:52:aa:d5:53:ae:a0:a9:cf:10:f5:
b0:49:5f:42:18:06:69:eb:09:99:9f:8a:55:66:0e:38:c6:69:
4e:80:e5:f0:b2:ae:36:4d:f7:93:d6:54:cf:81:31:89:3a:15:
44:ca:e5:9f:a0:1b:a6:82:81:5e:82:7e:c1:b9:a0:c0:62:67:
b6:94:be:72:d1:ed:97:db:b6:51:0b:37:35:0b:16:b5:e4:db:
74:97:72:7f:00:e7:fe:a9:18:72:bf:2a:3a:a9:e7:f5:7a:a6:
11:f0:fa:89:e4:6f:37:bb:0c:b2:87:a7:e0:7f:21:41:2e:bd:
fa:9b:d9:7b:ed:50:43:a6:e1:49:7b:c8:0c:eb:f0:39:83:33:
df:38:ff:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:28:10 2025 by rpki-client