Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/ac51639f-c8c3-3a86-b744-244b120994f7.roa
File: ac51639f-c8c3-3a86-b744-244b120994f7.roa (raw, json)
Hash identifier: 15eHSNaVuwvsiLmtWeITMyPZYzGJl12iEl/6cuGw6rU=
Subject key identifier: D0:30:95:14:48:CF:3E:C2:1F:09:A7:7B:74:20:1B:AB:27:E4:0F:0C
Certificate issuer: /CN=69e9bd0e-daed-4b94-96a5-e28b698e9d37
Certificate serial: 010D0C9F432858480645029BBBE87E8CFB5FADC0
Authority key identifier: 06:EE:74:E1:3C:F4:AB:F9:07:8C:76:D9:29:2B:9A:E4:8D:73:AE:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/ac51639f-c8c3-3a86-b744-244b120994f7.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 11525
IP address blocks: 74.112.112.0/21 maxlen: 24
204.8.8.0/21 maxlen: 24
208.70.40.0/21 maxlen: 24
208.88.248.0/21 maxlen: 24
2606:5d00::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:45:02:9b:bb:e8:7e:8c:fb:5f:ad:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69e9bd0e-daed-4b94-96a5-e28b698e9d37
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=35983ce0-ecad-4487-b19e-d469e6c683ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:59:ed:2e:1e:d2:ad:e0:f1:47:ba:6e:72:3a:
3b:4a:5c:1e:ee:05:a9:13:92:86:41:e3:5a:e3:d2:
46:4b:7f:f6:18:30:58:46:7d:28:6f:ed:4f:9e:97:
cf:99:f4:78:05:90:2b:7f:1b:97:15:ab:24:3e:7f:
ef:dd:db:57:78:56:bc:c3:e0:45:b2:6c:e0:05:62:
c2:3b:e6:85:7e:b5:21:c0:85:f2:d4:13:e5:e2:fe:
6a:9d:d3:3d:25:18:85:db:e4:a9:c0:f2:f8:54:a3:
1a:9e:0c:85:0b:9b:e2:1e:b5:77:9a:94:35:a1:95:
da:b9:66:41:8f:13:73:54:b8:54:54:b9:78:82:f5:
81:54:2b:25:d8:cf:5d:df:06:37:c4:ff:d1:1f:34:
6d:10:98:6b:d7:7c:7f:35:21:2e:ac:3f:e2:b1:44:
0d:b9:36:28:05:5b:77:18:c7:a2:1a:fb:bb:1b:6d:
a1:cb:28:0c:ad:22:70:9a:3c:ee:ab:1f:94:53:0a:
01:ae:fe:0a:2c:ac:ac:dc:2a:a3:e8:d7:a1:11:d6:
c5:2a:31:74:1c:d6:2d:61:f5:6b:07:82:bd:f7:74:
9b:73:3f:be:c4:cc:54:cf:f1:8c:8f:d9:67:3c:4e:
6b:43:d6:22:ac:d7:23:03:c2:49:0b:70:58:92:9c:
40:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:30:95:14:48:CF:3E:C2:1F:09:A7:7B:74:20:1B:AB:27:E4:0F:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/ac51639f-c8c3-3a86-b744-244b120994f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/69e9bd0e-daed-4b94-96a5-e28b698e9d37.crl
X509v3 Authority Key Identifier:
keyid:06:EE:74:E1:3C:F4:AB:F9:07:8C:76:D9:29:2B:9A:E4:8D:73:AE:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37.cer
sbgp-ipAddrBlock: critical
IPv4:
74.112.112.0/21
204.8.8.0/21
208.70.40.0/21
208.88.248.0/21
IPv6:
2606:5d00::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:66:be:22:bc:90:4b:51:09:50:be:33:5b:15:19:fa:1f:4f:
99:ef:9d:c5:ef:3e:36:5c:47:fa:8a:e9:c1:89:cf:ef:d5:ce:
f2:ff:b3:09:07:81:2e:38:3d:2e:c6:55:c4:4f:f2:2a:e4:cf:
1f:d4:8b:6d:b0:e8:b2:a3:9e:bf:d6:b5:96:05:f0:33:2e:fb:
9d:ea:ff:60:1c:73:e3:27:46:19:e0:27:9f:6d:31:c2:60:35:
a3:6b:07:df:35:11:d8:55:0a:2c:bd:b0:5a:c2:6d:73:a4:b1:
45:c5:37:77:29:45:7a:b5:87:c5:f2:95:4b:48:c1:a9:23:a1:
29:89:24:c8:27:ed:ac:d3:c8:d6:24:2c:ed:9b:35:67:5e:05:
98:09:86:59:32:02:b1:d9:23:a3:68:9d:16:25:38:04:45:8f:
9e:6f:5d:5a:e3:ec:e6:83:48:3e:6c:ed:ad:fd:62:98:88:a2:
80:39:58:1d:ef:8d:7e:6e:ee:77:7d:11:10:9e:cf:e4:44:37:
ac:a1:9b:24:37:38:0c:89:58:11:c6:c7:a6:79:e2:9b:a8:1b:
dd:a6:35:be:31:3f:bb:91:69:35:5a:38:81:d8:e5:44:92:2f:
c6:3b:7a:45:d7:7c:34:a8:c1:b4:79:8c:4d:50:e5:2a:41:f8:
c0:cc:56:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:50:57 2025 by rpki-client