Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d4127f43-adbc-3358-88af-a9ae9b0a63ee.roa
File: d4127f43-adbc-3358-88af-a9ae9b0a63ee.roa (raw, json)
Hash identifier: LDTsvxTvdfw+UWtajiSiyGVDUmD+01Dv9ibDURK2Bdg=
Subject key identifier: B0:AA:0D:9D:07:F8:1D:BC:C1:B1:1C:89:20:19:14:19:60:9F:76:79
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F4328584878BB095D41B7208C72C05A80
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d4127f43-adbc-3358-88af-a9ae9b0a63ee.roa
Signing time: Wed 08 Jan 2025 02:00:39 +0000
ROA not before: Wed 08 Jan 2025 02:00:39 +0000
ROA not after: Tue 08 Apr 2025 01:00:39 +0000
asID: 11232
IP address blocks: 67.217.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:78:bb:09:5d:41:b7:20:8c:72:c0:5a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Jan 8 02:00:39 2025 GMT
Not After : Apr 8 01:00:39 2025 GMT
Subject: CN=2b7fb133-ecb3-4128-a710-dd19cec5c152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e7:ba:1d:56:3d:06:49:36:a6:82:1b:1c:23:
4f:fc:52:a8:3b:2d:57:11:f9:3f:fb:df:8a:d4:96:
4f:d0:37:99:9a:7a:13:a5:bb:2e:48:88:9f:05:3f:
1f:8c:a1:c0:31:dd:3d:a7:76:61:7b:11:9a:27:d2:
f3:e0:ba:9b:9b:e6:b2:2c:0c:bb:b0:46:27:84:32:
68:6b:73:4e:34:35:96:9d:df:18:03:d2:84:9d:08:
8c:6a:1a:12:05:4b:26:53:3f:17:56:43:45:38:17:
43:65:b6:a3:73:a2:2b:ac:4a:fe:52:81:a4:80:32:
f3:3a:3b:15:d2:a1:71:71:c2:fb:21:89:dd:41:8f:
8b:eb:7b:d7:bb:94:09:2b:b1:a8:8f:40:a7:76:b1:
ba:e4:e4:90:31:dc:a9:78:39:f7:8b:0e:d4:b5:b8:
a2:bc:de:be:66:d7:82:40:d2:03:64:e0:72:6c:50:
85:a3:0f:0d:10:b1:8a:94:0a:57:b9:ee:ef:62:88:
c3:91:03:3b:5e:bf:0a:bb:0b:7d:59:23:84:e8:c4:
41:05:79:7e:ae:5d:95:69:99:14:73:df:11:e0:8c:
dd:45:4d:07:d7:e8:98:42:30:93:42:c6:de:56:a6:
96:33:f9:e5:d3:ce:75:ab:a6:96:33:f0:80:31:ee:
c7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AA:0D:9D:07:F8:1D:BC:C1:B1:1C:89:20:19:14:19:60:9F:76:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d4127f43-adbc-3358-88af-a9ae9b0a63ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
67.217.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:2d:ea:78:d8:70:e6:20:0a:33:df:ed:bb:49:90:35:ca:ea:
6a:d8:c3:1d:6f:a8:34:74:1d:51:c6:ba:57:bf:24:a9:2a:26:
12:5a:a6:97:cc:91:fa:fd:a3:48:ea:12:c7:97:fa:c1:a4:c0:
b3:59:ec:ed:79:7e:3a:d8:36:16:d6:91:9b:d3:27:3e:1a:f3:
7a:dc:64:36:41:35:75:43:a8:e5:31:a4:b6:dd:2b:76:2a:09:
8a:c5:e6:5a:2c:38:2f:79:a1:d2:70:a0:5d:4c:bf:7d:26:a9:
54:92:cc:30:5d:a4:c7:8c:3b:8a:6f:d2:c4:44:aa:a0:b7:bb:
53:0a:67:ce:8c:ba:93:df:61:e6:ae:05:43:c4:4e:9b:be:e4:
84:53:e8:24:56:d4:d5:f1:37:01:c6:c0:b0:81:5a:f5:92:ae:
69:71:2c:3f:0d:6f:e4:59:dd:70:d2:1f:cf:57:83:fd:b7:e4:
a1:87:16:ac:be:79:17:ad:f6:9e:b0:0e:7c:85:a8:02:54:41:
a4:21:1e:bd:70:39:f1:54:13:ad:3b:65:cb:24:5d:fb:3e:d0:
ee:63:97:6a:91:ee:36:b2:49:f6:76:3f:14:1a:bb:de:fe:3c:
ca:a5:92:9b:31:cc:83:55:67:1c:54:a9:b5:c8:a9:05:41:59:
40:fb:c7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:52:30 2025 by rpki-client