Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8/ff0d7608-989c-3f5d-bd2d-f07d422f1a99.roa
File: ff0d7608-989c-3f5d-bd2d-f07d422f1a99.roa (raw, json)
Hash identifier: kI6xjdsZik5f4FvTC5FqHjPQPppJ1OGrE/SpeJ1fyxQ=
Subject key identifier: 99:DD:3D:09:17:C6:C4:DC:B7:D1:B1:C9:A0:94:79:35:DB:9E:3F:6A
Certificate issuer: /CN=c067ebcd-d586-4479-97f2-23ae813be2d8
Certificate serial: 010D0C9F4328584875F057804A1E5FF2365A4780
Authority key identifier: 06:7C:1D:5F:E4:88:A6:4E:A5:97:22:D4:A1:74:18:6C:C6:DC:AE:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8/ff0d7608-989c-3f5d-bd2d-f07d422f1a99.roa
Signing time: Tue 07 Jan 2025 02:00:39 +0000
ROA not before: Tue 07 Jan 2025 02:00:39 +0000
ROA not after: Mon 07 Apr 2025 01:00:39 +0000
asID: 19224
IP address blocks: 130.51.84.0/22 maxlen: 24
172.98.0.0/22 maxlen: 22
192.210.0.0/24 maxlen: 24
204.10.32.0/22 maxlen: 22
2606:bb40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:75:f0:57:80:4a:1e:5f:f2:36:5a:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c067ebcd-d586-4479-97f2-23ae813be2d8
Validity
Not Before: Jan 7 02:00:39 2025 GMT
Not After : Apr 7 01:00:39 2025 GMT
Subject: CN=15506077-ea73-4776-8b47-59f8b2173fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c0:0d:ac:e7:67:34:a9:a3:96:06:78:59:11:
8b:c5:02:7a:f9:bf:6f:24:c7:0c:5d:30:50:c2:12:
52:65:74:1f:72:4b:63:24:50:e2:ea:bf:09:c9:80:
55:de:f3:88:c6:12:77:81:36:95:61:be:a4:7a:86:
79:c6:2c:6f:88:96:86:fd:e0:1d:01:a3:6e:62:a8:
f4:f7:67:ac:a3:e8:b5:94:d0:b3:8d:51:17:78:b2:
87:bf:77:4f:f9:f6:f1:49:ae:e2:35:ad:78:66:36:
8f:5c:81:e2:a0:d2:3f:02:78:81:b6:30:d0:ce:43:
00:73:04:8a:ce:46:77:3e:60:dc:73:0c:4b:91:38:
c4:db:02:7a:18:f3:08:2b:27:6f:48:22:d3:cb:fa:
7c:8b:1b:76:66:0f:25:19:5e:38:6e:62:c5:a7:7f:
43:8e:d0:09:94:52:03:c0:51:73:cb:c1:41:56:3d:
b2:4b:0e:fd:be:20:62:13:61:fa:92:45:5a:9a:69:
35:34:51:03:7b:bc:02:cf:2f:26:fc:90:0e:d2:1a:
ee:7e:20:f9:ba:6b:a2:9c:56:e6:42:5e:8c:a0:70:
c1:e8:ba:16:9c:9b:7d:5b:67:d0:21:1b:3d:22:1a:
9b:6d:61:d6:c9:b0:4d:8b:e3:f1:38:38:54:a3:5f:
1e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DD:3D:09:17:C6:C4:DC:B7:D1:B1:C9:A0:94:79:35:DB:9E:3F:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8/ff0d7608-989c-3f5d-bd2d-f07d422f1a99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8/c067ebcd-d586-4479-97f2-23ae813be2d8.crl
X509v3 Authority Key Identifier:
keyid:06:7C:1D:5F:E4:88:A6:4E:A5:97:22:D4:A1:74:18:6C:C6:DC:AE:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8.cer
sbgp-ipAddrBlock: critical
IPv4:
130.51.84.0/22
172.98.0.0/22
192.210.0.0/24
204.10.32.0/22
IPv6:
2606:bb40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:34:e4:05:1c:bd:dd:29:b6:fd:5b:ac:84:ba:47:cb:51:46:
fd:26:52:b1:66:b1:71:92:6c:a3:0c:e8:af:3e:32:4f:7f:e3:
5b:7f:a8:c5:36:2e:9a:19:2a:2e:11:13:c5:d1:e9:3e:e2:44:
55:08:67:2f:54:ec:e9:03:a4:33:22:7c:a6:f2:bc:e1:bd:90:
61:54:7e:ad:e4:50:62:07:9d:45:e8:85:e2:b4:0a:c3:5b:c0:
ff:a8:12:3d:58:48:b5:02:6d:6f:78:ba:37:d4:9c:ab:6f:84:
86:a0:53:91:3d:84:6f:a2:e8:dc:8e:0e:53:24:0d:bc:82:d1:
10:c6:23:ea:37:20:f0:b8:d6:94:da:94:3c:d8:e5:a3:0c:b1:
ef:f3:da:ad:7e:25:a2:33:04:ee:d3:a9:17:a0:f3:ff:ce:fb:
30:46:04:14:35:3e:a3:00:37:8c:df:8e:16:e3:31:e2:7b:e3:
e9:23:98:46:ec:ca:49:5e:b5:00:88:8c:cf:cd:21:6d:f5:a5:
64:98:94:74:a3:87:f2:d2:54:d5:6c:38:e1:d0:c1:70:bb:92:
ee:50:6e:2a:93:07:23:ce:10:ce:78:81:32:e8:52:bc:3d:33:
89:f6:1a:87:a6:5a:7a:37:69:94:3c:98:39:b1:f5:f8:ec:b5:
bc:35:e8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:10:36 2025 by rpki-client