Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/024a5f29-c6d1-392d-99e1-436589772a96.roa
File: 024a5f29-c6d1-392d-99e1-436589772a96.roa (raw, json)
Hash identifier: TTHTZBaz+7NTqHwE6igmPgL/vYTp/J7n/yjLrCX2m00=
Subject key identifier: 12:1E:B9:FD:CD:97:D5:A6:98:D1:C1:E0:DA:C2:B7:F7:88:4D:97:9E
Certificate issuer: /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial: 010D0C9F432858486695C07AC41591DF17A0B980
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/024a5f29-c6d1-392d-99e1-436589772a96.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 3695
IP address blocks: 70.36.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:c0:7a:c4:15:91:df:17:a0:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=bf7ff7d2-c9d2-4178-8f9c-b4fc5c9db351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:97:08:d0:87:66:47:70:db:e9:c8:c3:26:
fb:d5:00:86:a7:f7:5f:c0:29:26:b2:6d:17:11:73:
64:dc:df:30:d1:22:19:55:28:30:c1:ed:04:d6:8e:
09:8e:73:48:fe:0a:8d:91:bf:49:a9:fc:29:eb:bd:
c3:dc:38:d4:3d:cf:43:33:16:90:78:07:70:df:5c:
37:34:a8:36:0c:2b:87:4c:16:bd:4a:7e:3a:91:e9:
6f:82:01:40:ad:cf:6e:31:fa:43:32:93:d5:42:cf:
94:a7:de:7e:fa:8d:bf:db:f6:33:6f:d7:84:96:bb:
8d:9a:3a:e5:72:a0:c1:2d:fe:3b:a2:61:3d:73:f8:
6f:ad:4a:fc:52:f2:63:71:05:47:62:f5:6b:7a:2e:
20:87:16:1c:6d:24:7f:37:5c:d3:1a:46:29:d8:af:
29:22:26:f4:9a:62:a3:fe:4a:4d:6b:2d:d6:cb:a2:
19:04:c9:58:71:b0:c2:77:92:f8:74:7f:35:e6:fd:
cc:29:f3:29:07:b5:7f:fc:4f:3a:35:a2:ce:20:b6:
5c:b3:67:d9:4c:82:ac:65:3c:e2:21:78:aa:cc:53:
64:50:72:af:29:fe:c9:07:49:75:12:a1:43:6a:70:
95:99:48:e7:df:84:6f:c8:4c:2b:e8:1f:91:d5:46:
a5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1E:B9:FD:CD:97:D5:A6:98:D1:C1:E0:DA:C2:B7:F7:88:4D:97:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/024a5f29-c6d1-392d-99e1-436589772a96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
X509v3 Authority Key Identifier:
keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
sbgp-ipAddrBlock: critical
IPv4:
70.36.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:32:34:f5:7d:c1:c8:2b:e3:a2:85:43:03:c9:87:ff:0b:6d:
a0:a9:34:c6:a4:06:c9:08:76:d4:7d:52:68:1c:0a:b3:0d:b5:
59:dd:8c:48:39:05:9a:24:19:f1:26:78:c9:2e:91:99:ec:4e:
3f:5a:60:47:f6:ed:70:a1:75:25:c9:b9:34:d6:e8:43:5b:08:
26:e9:4e:6b:35:93:56:26:36:48:b1:d7:04:6a:34:a3:1a:6e:
39:d3:2a:b1:f8:ab:69:5c:40:95:00:98:89:dc:63:f3:c8:e3:
e0:d1:d9:b1:7b:ec:19:7c:3f:99:62:af:7e:7c:fc:c7:a9:47:
40:a5:e9:33:68:34:f9:7f:a1:50:ea:53:aa:4d:23:e1:68:4b:
57:e3:95:6b:b0:dc:00:3a:cb:1d:a7:3f:63:cf:5f:43:06:81:
27:2e:30:a6:e2:bb:83:55:f2:1e:6e:f7:d0:b3:56:15:ae:9e:
61:63:d7:cf:d9:66:2a:7d:0c:1f:0b:b7:d7:3e:ef:77:fc:b7:
a7:88:d8:07:34:65:05:58:84:44:d4:a1:69:ff:d6:00:15:2c:
91:4b:63:8d:58:d9:3c:61:c3:1c:d5:ce:16:e8:fa:22:2e:8d:
67:c3:9e:4b:cf:fd:ea:e1:d9:e5:9a:41:de:d1:10:99:44:60:
76:1a:44:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:23:20 2025 by rpki-client