Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/0ecb879e-98c9-3896-bc6d-f8030a714e58.roa
File: 0ecb879e-98c9-3896-bc6d-f8030a714e58.roa (raw, json)
Hash identifier: +eKwbQGFA15JUzx/Sbbb21HAa9lYwrhqC9BN6pkgKEY=
Subject key identifier: 33:99:8B:9F:D9:13:8F:E7:D3:A7:E9:A8:32:95:C7:EF:41:F7:F8:74
Certificate issuer: /CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e
Certificate serial: 010D0C9F4328584851A576C94DC3925AA2691B80
Authority key identifier: D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/0ecb879e-98c9-3896-bc6d-f8030a714e58.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 7311
IP address blocks: 67.21.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:76:c9:4d:c3:92:5a:a2:69:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=ca3ae8d2-afde-4cba-a06b-085051594545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b6:03:09:ed:68:69:91:41:2f:34:d3:18:ef:
76:12:c6:b2:ec:d2:54:71:44:16:ef:5a:42:2a:c1:
9f:fa:19:b4:2d:13:2e:c0:e0:63:ba:75:a6:88:65:
0e:7c:79:d5:04:18:df:a2:49:dc:0f:9f:a1:e3:5b:
7b:21:6f:62:ef:65:bf:96:2c:d9:48:a7:d9:c1:73:
e7:24:5a:54:ef:b2:1a:21:19:8e:0f:00:3b:9a:21:
a8:11:4e:66:aa:2a:84:ff:68:8c:21:7f:7e:ab:73:
0d:ff:46:b1:b9:8e:55:a9:86:50:97:36:6f:06:71:
78:f9:20:96:d7:17:5c:ae:10:e4:8f:38:a7:34:9c:
98:e1:3f:0b:88:74:a6:4f:7e:cf:0b:99:d4:08:38:
bc:70:a9:98:fa:b0:6e:75:ca:f9:22:8b:0f:fa:dc:
3d:a0:ed:d7:cd:7d:54:12:80:56:9e:f6:69:b4:f9:
3c:90:d8:42:4c:63:31:35:31:4f:c9:c1:1f:dd:4c:
5a:91:46:aa:59:b7:db:45:6b:50:af:a9:d7:01:db:
5d:c9:97:e2:fe:3d:b2:d8:2f:95:6a:7a:d4:9e:b5:
04:c8:d5:72:1c:53:32:ca:34:53:dd:84:a5:4c:36:
33:ae:89:a3:bf:ba:70:98:c0:70:78:9d:a2:98:aa:
29:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:99:8B:9F:D9:13:8F:E7:D3:A7:E9:A8:32:95:C7:EF:41:F7:F8:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/0ecb879e-98c9-3896-bc6d-f8030a714e58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl
X509v3 Authority Key Identifier:
keyid:D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer
sbgp-ipAddrBlock: critical
IPv4:
67.21.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:35:dc:40:41:92:20:ce:c2:dd:f4:58:eb:09:78:5c:40:51:
d7:20:1d:76:49:65:24:a1:95:ed:08:4c:94:0c:52:b1:66:da:
e4:1d:bd:f3:1e:d1:18:54:08:86:a2:61:c8:4d:5f:6f:94:31:
f6:1b:36:2f:80:56:9b:5c:2f:86:74:a3:58:02:23:cb:5f:42:
53:4f:b4:85:dc:d2:8c:1a:21:41:cb:1f:db:82:b3:28:e7:75:
07:68:5c:15:47:19:57:0a:e6:da:76:0e:d5:6e:85:ae:9f:81:
20:44:01:6f:56:5d:fc:08:ba:ce:f6:7d:26:ae:f2:3f:1a:38:
52:3d:06:0c:79:b3:55:88:cb:70:6d:9b:31:b2:fe:a0:f3:8d:
18:87:5d:df:a0:c8:d2:f1:c0:74:1d:07:e6:a8:1a:58:a4:39:
d9:f1:1b:00:e6:92:5e:e5:b4:0f:de:c9:24:2f:99:96:28:78:
c5:cc:51:52:41:81:d4:b6:e9:13:9a:02:08:f4:fc:cc:4e:17:
5a:e2:e1:ea:16:c3:b0:16:7d:0a:f4:56:44:0d:ff:da:2a:2c:
c3:29:ea:f2:ba:6d:54:d9:61:37:4b:23:7f:38:6c:41:f7:cf:
a4:c3:ce:15:e6:9d:94:23:49:14:6e:89:23:aa:31:72:72:31:
40:59:5c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:04:36 2025 by rpki-client