Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/23575ff1-f0ab-3503-a703-a3e1df2b0aff.roa
File: 23575ff1-f0ab-3503-a703-a3e1df2b0aff.roa (raw, json)
Hash identifier: Sptr1tnmCbJ2FZOyL+j5VM4hsMe3cAiMvVXSCbaKWF8=
Subject key identifier: 22:23:12:33:68:C6:D2:2F:19:00:A1:E1:FA:B9:20:F7:DC:32:11:C5
Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
Certificate serial: 010D0C9F432858485B6B02BC8026809B7C2FAE80
Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/23575ff1-f0ab-3503-a703-a3e1df2b0aff.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 35908
IP address blocks: 67.229.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6b:02:bc:80:26:80:9b:7c:2f:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=41da1dce-215d-46f0-b9e9-06e4404f5ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5e:47:47:65:d4:47:dc:da:de:65:f1:c2:a1:
10:bd:54:2d:4d:d1:c0:d7:70:fa:91:08:4d:53:16:
d4:2d:c9:5d:1d:49:bc:3d:4f:20:54:6c:13:0e:d2:
08:a2:8c:24:c6:73:97:99:a7:09:82:21:3e:27:5c:
1c:9a:05:ba:7e:44:a2:e6:e6:8a:4d:54:ee:14:9a:
5a:86:80:0b:9d:9a:a5:3d:53:ca:e5:12:17:d5:d4:
65:5b:05:9d:c6:8a:8b:95:be:0e:b2:57:a6:10:a7:
c1:0f:68:3c:dc:41:10:8c:78:49:02:1a:ae:9b:08:
bd:55:dd:30:fe:dd:f9:ad:60:98:fc:54:79:4f:81:
b5:b0:79:ba:34:c4:a2:40:8f:3c:5c:75:b4:a5:32:
dd:2b:28:1a:9c:82:d3:37:10:c3:0f:5d:e4:68:e9:
0a:14:2b:26:70:15:a0:38:0e:a6:dc:0f:a1:a8:25:
d2:47:93:b2:26:69:c2:19:de:10:51:b3:0f:3d:fe:
df:41:1b:21:51:c7:11:c6:14:ae:4f:bc:27:a0:23:
8d:01:a3:5c:01:fa:63:45:f6:e7:c0:32:ec:99:c8:
43:61:a1:2f:29:c2:6b:d8:ac:53:96:c4:de:4b:a8:
0c:3e:52:6b:3a:d7:af:59:58:ba:58:02:53:93:08:
fe:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:23:12:33:68:C6:D2:2F:19:00:A1:E1:FA:B9:20:F7:DC:32:11:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/23575ff1-f0ab-3503-a703-a3e1df2b0aff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl
X509v3 Authority Key Identifier:
keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer
sbgp-ipAddrBlock: critical
IPv4:
67.229.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:22:4b:3f:cf:f2:14:7c:06:06:97:f0:f9:22:6b:17:e7:58:
a1:30:6c:86:b7:a3:03:0e:39:97:d0:93:9d:a1:4b:3d:83:11:
ea:a8:1a:30:c3:eb:3d:e0:1f:04:cc:df:f5:20:f0:ec:fa:e9:
cf:af:23:5c:38:6e:4a:11:08:8b:99:34:c9:db:54:a9:2e:cb:
1b:01:f1:99:d0:78:80:a6:34:9d:24:10:4c:f0:bc:4e:d6:f0:
06:bb:0b:c8:73:36:d7:9a:d7:3a:ca:48:59:01:21:8a:45:dc:
41:6a:10:58:c5:8b:43:b6:41:8a:e5:e0:7c:c4:c5:84:06:70:
15:0b:c7:31:b7:36:0b:29:ab:7a:43:a5:25:1f:7e:ef:2c:20:
ab:cc:2a:de:01:d0:ad:28:2f:73:f7:ee:6f:2f:0d:53:d5:6c:
9e:7d:20:e5:da:a5:4d:7c:43:96:b0:b1:f3:e3:84:1e:55:60:
01:0e:6b:d6:9a:3d:7e:8b:4e:65:d3:0a:f4:30:e1:87:ad:89:
3e:c0:ad:5a:d6:a4:7e:0d:d0:ca:55:94:ee:09:98:0a:fb:0b:
3b:5e:6b:15:56:e0:25:ed:a2:d8:1a:49:ee:2d:f8:1f:2c:c8:
32:59:9c:2b:79:f0:ba:fd:0d:70:5d:03:47:f4:0c:11:7d:50:
4d:1c:49:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:53:45 2025 by rpki-client