Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/f572ca6d-8c2a-306f-8e92-11ce8ffd3949.roa
File: f572ca6d-8c2a-306f-8e92-11ce8ffd3949.roa (raw, json)
Hash identifier: RB2ShLkfifIOnrnPH9V/uBkypFSdd+9/MKz60Fe7C5Y=
Subject key identifier: 55:1E:75:00:86:46:94:E7:8C:83:24:1A:35:4E:04:F9:67:99:2B:25
Certificate issuer: /CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
Certificate serial: 010D0C9F432858483B50002A7412A83FF66D1100
Authority key identifier: C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/f572ca6d-8c2a-306f-8e92-11ce8ffd3949.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 23158
IP address blocks: 67.209.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:50:00:2a:74:12:a8:3f:f6:6d:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=19b0dab3-e63d-4a12-99fc-0c662f552eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7d:bb:02:23:62:f2:3f:63:a3:f6:bf:ea:0b:
1c:15:90:a6:ce:88:af:29:2a:54:6d:3e:2f:ad:5e:
0e:4d:db:13:67:f5:0e:26:0d:6a:1b:70:c4:8a:71:
25:3b:69:21:fc:27:1a:8d:d4:e9:06:0c:eb:fd:16:
32:74:5d:71:8d:da:97:36:78:fe:65:24:38:72:3c:
55:56:a1:12:64:b4:09:05:2e:ae:18:7d:22:9d:63:
1b:83:e9:95:fb:f2:09:a9:6d:85:bc:68:b0:10:32:
7f:fa:53:63:26:28:5f:53:31:81:2e:59:02:92:44:
e8:fd:37:80:82:a1:b5:c3:e5:a7:63:23:0a:c0:1a:
94:8e:ad:db:c1:e9:aa:58:3d:a2:24:ed:ec:71:a8:
3a:90:6d:97:26:ce:d2:12:76:1f:f2:1d:5b:cf:c6:
0c:ed:b5:3b:45:24:d2:4a:42:f7:0c:62:f6:e3:cc:
56:9a:b8:00:49:7b:e5:f1:39:7f:af:6c:36:ad:05:
cd:7d:8d:c9:0f:95:f2:cd:a6:fb:fe:a0:b5:3a:02:
89:ec:ed:2b:14:33:f2:68:9d:3a:21:09:33:27:74:
f4:b4:cc:83:c6:e1:a2:32:13:4d:f5:10:64:7a:4a:
f6:48:f7:b1:0c:39:9f:ba:c2:a9:a7:da:bc:af:cf:
4c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1E:75:00:86:46:94:E7:8C:83:24:1A:35:4E:04:F9:67:99:2B:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/f572ca6d-8c2a-306f-8e92-11ce8ffd3949.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl
X509v3 Authority Key Identifier:
keyid:C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer
sbgp-ipAddrBlock: critical
IPv4:
67.209.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:37:a9:05:5f:6d:96:ff:68:1a:b7:60:6b:bf:2e:cb:78:93:
28:41:c5:59:21:0e:75:6d:ad:fc:db:b1:56:9f:e3:17:44:42:
0c:38:34:57:19:20:a5:ae:b3:d3:a9:aa:ab:0e:93:b4:cf:9e:
d2:5c:73:33:da:78:6e:6a:50:da:e4:ab:be:6f:9c:b4:05:27:
a4:98:ba:82:fa:9d:36:1f:43:8a:44:a6:f2:19:90:4b:fe:61:
ae:6d:89:8e:ca:3d:54:87:39:5a:95:63:20:b0:3a:5f:3e:12:
ef:48:99:2a:7a:0a:c3:9b:0c:e9:3a:33:4b:a5:67:6e:3f:83:
6d:0c:ed:9b:20:cb:a6:fc:72:fd:3c:b3:63:01:72:1a:8f:1f:
48:2a:e4:ab:30:c3:df:86:73:8f:fd:24:57:02:08:ca:6e:4f:
d1:f2:5f:2c:f3:60:f0:73:1c:37:6b:96:5a:8b:79:de:1b:1a:
1b:4e:aa:ab:9a:6e:5e:e5:16:0e:c8:89:32:9b:7f:27:5d:09:
3d:f7:db:f8:cb:69:cf:68:6d:5b:1a:15:17:18:92:db:f2:62:
8f:29:6d:8e:ca:60:18:d1:01:2b:01:88:4b:4d:65:8f:34:ad:
f0:6e:41:57:d2:94:44:f8:0d:cc:57:37:0b:06:5b:93:31:ed:
28:72:da:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:41:10 2025 by rpki-client