Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb8c1cbf-d111-3d88-849f-f86be2e5e40c.roa
File: bb8c1cbf-d111-3d88-849f-f86be2e5e40c.roa (raw, json)
Hash identifier: 6bNs8Aaa1iJlOjqSzI07ka5s/tDsc9Q+nQu61Jw+lt4=
Subject key identifier: 8B:7F:E2:40:FC:21:C5:6C:8A:C3:63:BA:FC:A9:87:E2:22:A3:07:F0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C103D47CD7D1C32BAE32C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb8c1cbf-d111-3d88-849f-f86be2e5e40c.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33660
IP address blocks: 67.161.214.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:3d:47:cd:7d:1c:32:ba:e3:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=79ae1050-29db-4b5a-bc4f-b8dfa1a20351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9a:85:e4:cb:86:8c:cc:ac:eb:86:58:ed:2f:
77:ab:63:21:02:8b:83:ef:a5:89:be:de:65:05:d8:
12:e8:6e:24:cf:b1:2b:ef:0d:6b:37:e9:b8:e1:8f:
62:34:93:97:cf:c0:f9:51:a4:74:14:8b:94:ad:70:
f1:f8:96:86:68:41:bd:bd:8b:5a:b2:84:a8:f3:a4:
98:14:68:e5:86:27:63:e8:26:69:45:d3:cf:a5:a7:
e3:75:56:28:a6:d1:18:77:2f:5f:61:68:fd:2b:56:
03:d2:ff:1f:68:32:bc:2e:25:1f:fd:14:02:1c:76:
39:83:10:9a:af:e6:7a:b8:49:3b:c2:20:dd:a9:bd:
75:92:2a:99:68:2c:5e:7b:0b:ae:86:6b:3e:0e:97:
47:54:95:a5:2e:30:1a:b3:de:74:6d:c1:f7:5f:db:
00:eb:14:fc:67:e1:d6:df:0e:08:46:61:85:4b:96:
64:36:33:30:6f:9f:c0:88:bf:3c:06:06:87:e1:42:
85:2a:99:5f:b9:03:10:f5:88:28:57:e6:8b:d7:c8:
c9:e1:5d:f2:07:45:8d:17:2d:1c:fb:45:f5:6b:6b:
e5:7d:33:97:a3:d9:1d:5b:29:50:17:ce:fd:57:f4:
0a:d6:2e:a1:1f:b2:3f:b5:68:ad:68:47:af:64:6b:
6a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7F:E2:40:FC:21:C5:6C:8A:C3:63:BA:FC:A9:87:E2:22:A3:07:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb8c1cbf-d111-3d88-849f-f86be2e5e40c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.161.214.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:4f:3a:35:1f:d5:40:a9:82:9c:35:ef:5c:38:3e:44:12:be:
88:f3:2c:2c:97:b5:ab:05:c5:11:7e:69:77:14:71:95:83:b6:
29:f4:ac:20:6b:4e:bf:11:43:f1:14:f0:15:e9:15:93:e7:62:
02:61:87:7b:24:e2:7d:74:8a:60:51:94:c4:69:66:37:d7:bd:
f6:9b:5b:4b:8f:53:5e:72:f4:73:48:55:de:51:f0:93:b0:df:
97:c3:b2:0f:33:ab:0e:35:5a:55:dc:66:7e:85:fc:cc:b7:86:
45:10:80:7a:03:bd:90:62:9f:b7:dc:f1:1d:1b:c1:94:03:a6:
8a:2e:1d:17:f6:ef:4a:55:c7:00:98:b7:37:be:33:59:e3:ef:
13:b1:ae:bd:b4:be:97:70:f0:21:12:44:f8:dd:ad:2e:54:ff:
23:f5:da:89:c8:4e:f6:6a:f9:b9:55:b2:0a:92:d5:57:5e:3e:
8b:d5:8e:04:e0:5d:2f:5a:fa:7d:b0:fe:d7:2e:5c:ff:a9:dc:
23:b9:09:a6:ea:d3:04:0e:f0:cc:81:a6:58:43:af:d7:41:51:
f8:43:89:4d:78:a3:54:3a:9f:da:d3:a2:30:95:96:46:eb:c7:
cd:4a:f0:33:eb:44:a1:ca:2b:df:c9:3c:1d:f7:31:e8:b4:ea:
e2:10:fd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:11:56 2025 by rpki-client