Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/bdd949a7-e0e1-3b8e-81bc-94238a595155.roa
File: bdd949a7-e0e1-3b8e-81bc-94238a595155.roa (raw, json)
Hash identifier: Nbh5aRKCFB4wnsqcwD0qXuvYEfJhAqSVcYhDDZMOkCQ=
Subject key identifier: 79:09:FC:C3:D5:06:2A:C8:3D:57:26:EF:6A:FF:40:DF:D1:58:86:8D
Certificate issuer: /CN=928cccc8-4c1d-457b-a709-2f2c5d83c939
Certificate serial: 010D0C9F43285848E59BC70050C8EE167C2D0A00
Authority key identifier: E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/bdd949a7-e0e1-3b8e-81bc-94238a595155.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 14618
IP address blocks: 67.226.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:c7:00:50:c8:ee:16:7c:2d:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=928cccc8-4c1d-457b-a709-2f2c5d83c939
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=d2494241-1d49-41be-b0f1-fce1a562be17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:73:e8:ec:d9:81:85:54:fd:ba:7a:cd:c9:97:
5d:03:bf:6e:14:97:6d:02:a8:7e:69:af:82:78:b4:
b4:d8:6b:44:57:24:ed:6d:a3:a3:e0:75:6b:3a:12:
36:e2:f3:fd:9f:10:c0:d7:a9:a9:b8:44:87:dd:e7:
a0:a9:98:3d:51:8e:d0:08:5b:99:ca:1e:9e:c7:ea:
78:84:1f:e3:00:19:c4:f4:e0:78:01:7c:7e:5c:e1:
19:d5:ea:2e:12:ea:ba:b3:c9:d7:98:d5:79:53:d2:
28:9c:d5:7a:0f:cc:79:d3:59:00:61:39:c0:a1:8e:
37:9f:3c:63:7c:33:5c:5c:9c:d0:39:02:6a:16:e6:
08:f8:75:ab:62:86:54:44:47:0a:2c:0b:a4:8e:da:
93:26:37:a7:f1:e3:2d:02:6f:e5:69:c3:93:59:18:
8a:52:ba:25:f2:4a:cd:03:89:b6:99:58:e8:7f:98:
3f:ed:46:43:c5:4f:98:57:2b:e9:2b:cc:6b:fa:70:
6e:f3:85:b7:1d:b7:ac:3e:5f:09:c7:6d:bb:55:de:
f5:c8:fa:e0:96:76:8f:39:92:d8:73:44:c6:a6:a3:
24:85:f0:bd:f4:1d:e2:3d:48:64:b4:eb:9c:b2:55:
9c:71:7e:3b:53:69:73:a1:a7:72:3e:a5:72:a8:53:
d7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:09:FC:C3:D5:06:2A:C8:3D:57:26:EF:6A:FF:40:DF:D1:58:86:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/bdd949a7-e0e1-3b8e-81bc-94238a595155.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl
X509v3 Authority Key Identifier:
keyid:E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer
sbgp-ipAddrBlock: critical
IPv4:
67.226.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:95:d3:c3:eb:24:5e:93:20:a6:c7:de:7c:65:26:47:b2:9b:
e1:95:dc:5e:c2:9d:e9:2e:59:ed:5d:00:59:88:54:3c:0a:d2:
83:38:5e:ec:98:b2:97:0b:c8:71:78:5d:c6:4d:91:d2:41:16:
e7:87:36:93:87:f0:e0:a9:76:13:6e:57:c5:31:e8:10:2a:0a:
bb:f2:53:d8:ff:fa:18:b4:be:71:e1:96:eb:13:5f:cc:98:76:
ab:13:bf:f3:34:ce:9f:c4:37:d2:90:9c:82:d4:15:ae:59:94:
0f:a8:05:6b:c6:a3:69:f6:95:52:94:ef:90:d2:cc:60:44:25:
79:ed:a2:1d:9d:94:72:28:ab:b5:b9:c5:9f:84:34:46:ea:9c:
0e:6b:4a:cf:a0:d3:56:a9:81:59:96:d6:34:9e:be:a6:25:94:
c1:2f:fa:95:7a:c2:68:68:e1:1f:b5:47:29:25:7e:7a:ed:e9:
4a:86:48:cb:73:c2:47:c7:cd:5b:98:d6:d8:df:a3:3d:73:97:
f6:37:5f:0f:30:82:7f:27:e9:ca:07:87:3d:b1:d9:d5:6e:b3:
9b:30:79:ba:59:24:6a:23:64:c6:fa:d8:a8:67:fc:1b:64:f5:
05:ac:bf:66:08:d6:ca:32:b3:f5:09:70:10:8b:29:06:6e:de:
fd:2e:34:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:40:03 2025 by rpki-client