Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/34b7440f-fa9d-3f40-9c87-f4e7484c5286.roa
File: 34b7440f-fa9d-3f40-9c87-f4e7484c5286.roa (raw, json)
Hash identifier: zV6O97N6R2WYzI7A3zUcaGo35fCIjthVgYIhDN4iZfU=
Subject key identifier: F2:7E:D4:47:7C:16:AB:81:2E:67:FD:03:1A:EC:B5:65:89:D6:AC:D7
Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1
Certificate serial: 010D0C9F43285849002149DA6FD061444DF90D00
Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/34b7440f-fa9d-3f40-9c87-f4e7484c5286.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 21766
IP address blocks: 69.8.160.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:49:da:6f:d0:61:44:4d:f9:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=e3b502bd-f848-455a-8618-7c9afbee7d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:af:b1:62:1d:d9:38:c1:1a:50:65:30:a7:b5:
2b:ee:de:cf:2e:5e:1e:d0:88:c9:a1:28:73:60:f6:
98:28:ea:05:3b:94:1e:10:cb:5d:86:c2:58:77:93:
b4:20:c4:f6:2a:48:ca:df:5b:27:77:2d:05:85:8d:
0d:b2:71:d5:ff:75:cd:60:53:e1:f9:f4:83:ad:b3:
53:22:62:b1:a9:45:c5:8d:81:8e:23:bc:54:4b:7f:
32:94:46:61:94:af:df:c5:5c:63:06:46:37:47:2c:
bf:43:27:3d:fd:4f:b6:77:67:80:e8:a5:23:b0:65:
94:22:5e:c3:87:25:f9:d8:4c:f8:cc:85:80:04:fa:
3f:b9:eb:89:e9:c5:db:3d:0d:5b:43:24:3f:91:19:
76:47:85:1c:d4:f7:ae:58:0d:ce:a8:86:e1:14:21:
57:2c:3a:76:ec:cd:9a:af:8d:7d:74:1f:8f:cd:10:
40:54:16:cb:59:6a:96:e5:e1:5b:25:ef:34:4c:46:
ec:78:79:ae:8a:dd:09:45:48:fe:02:e4:9a:83:ac:
27:c9:1d:b4:11:51:7b:d7:4e:b0:40:94:9e:92:52:
80:c7:94:4b:11:2d:3e:03:a1:0f:a5:34:6e:44:ab:
2b:23:1a:99:fe:65:90:47:ff:c3:e6:48:75:cd:09:
f2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7E:D4:47:7C:16:AB:81:2E:67:FD:03:1A:EC:B5:65:89:D6:AC:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/34b7440f-fa9d-3f40-9c87-f4e7484c5286.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl
X509v3 Authority Key Identifier:
keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer
sbgp-ipAddrBlock: critical
IPv4:
69.8.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:40:e3:d0:74:2c:83:23:7f:78:ad:2e:c3:55:75:da:e6:6d:
2d:4a:80:21:24:9d:8c:38:4a:71:75:69:6b:b9:46:75:ea:3f:
d9:1c:e8:cd:7c:85:42:12:96:40:42:e2:13:2d:1c:5d:6c:cd:
14:c1:3d:08:f8:97:e7:ff:26:84:f7:e7:95:d9:cd:a5:c2:4e:
cf:66:70:4a:9a:ea:11:d8:55:de:51:3b:dd:dd:2e:ea:06:ed:
d5:25:e1:59:a8:f6:3d:3d:1f:19:ae:48:cb:27:2b:48:3a:2d:
5f:6c:f6:e0:6c:61:1b:ed:e4:5c:ae:cf:13:e4:98:39:42:2f:
b8:09:85:a5:42:9d:00:70:03:10:3d:8b:ed:f9:61:bc:5d:7f:
c1:11:61:17:d8:f4:1f:cd:bc:b1:f8:71:de:fd:7a:22:1f:b7:
20:46:4d:7e:1b:b7:f1:cd:86:17:ca:2e:2d:3c:65:41:e7:d3:
52:2f:9c:92:28:c1:17:3d:0f:ae:c0:41:36:3f:b7:7c:f6:3e:
9b:30:d7:38:06:65:b5:91:3a:65:a6:9d:de:70:be:2d:1e:4d:
a8:d3:b8:e7:f0:86:56:99:0b:4a:b9:73:b8:06:66:37:b6:08:
9a:74:0d:29:dc:2d:87:ef:69:c8:88:80:26:78:b8:a8:1b:af:
ed:2b:4a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:33:26 2025 by rpki-client