Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/591c77e9-1aa6-3aab-ada5-1cb2bffc6d3c.roa
File: 591c77e9-1aa6-3aab-ada5-1cb2bffc6d3c.roa (raw, json)
Hash identifier: ga4AgMDrJTBHSEdEnJGMqJhsNooXQ+Zj0jZbughaIqY=
Subject key identifier: 3A:E6:4F:10:37:D4:D7:A6:CF:E0:F3:3A:B3:32:51:8F:A5:50:2B:57
Certificate issuer: /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial: 010D0C9F432858486695C15A1AD75FF1D978F700
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/591c77e9-1aa6-3aab-ada5-1cb2bffc6d3c.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 3695
IP address blocks: 70.36.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:c1:5a:1a:d7:5f:f1:d9:78:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=8eef0b43-d886-4ed0-aa27-1fbed952f259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bf:63:99:81:13:98:85:af:2b:eb:05:af:3c:
df:cc:c0:35:c4:a6:65:45:b1:f2:8f:e4:8d:e6:01:
9d:47:80:37:61:7a:6b:52:bf:04:ae:5d:25:45:36:
ad:3d:f9:40:37:a7:76:6b:62:77:e2:ad:5a:79:87:
dd:ba:64:47:29:da:ed:d5:1c:8e:f4:c3:2e:bf:01:
b6:82:4c:7b:ff:35:10:a7:b9:c1:46:93:e2:a3:08:
ae:39:04:e7:1b:75:0b:52:d8:ac:3f:09:f6:24:36:
d4:db:6a:ff:6a:04:e3:eb:29:35:f0:f5:0a:9b:de:
e4:1f:9e:bb:b9:35:38:28:dd:1e:89:f1:ca:9e:9d:
16:1d:9a:a9:c2:d7:63:7b:a4:b5:4c:67:71:ae:b0:
07:36:52:20:ba:10:e5:4d:ec:26:e6:09:60:05:7b:
54:de:4f:0b:a9:92:2a:c2:60:cc:2d:a5:2a:09:a7:
b6:62:3f:7f:b0:5f:98:62:69:94:78:44:5a:3b:c7:
56:6f:8d:b4:e7:d4:c0:1b:ff:57:7b:9d:33:88:ad:
4c:7b:af:de:8b:8e:17:8d:ea:c8:5f:77:92:82:56:
27:62:eb:01:90:a0:d7:bb:77:61:a6:1b:97:77:ea:
09:31:fe:09:11:ea:ae:37:85:73:7c:a7:57:23:04:
69:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E6:4F:10:37:D4:D7:A6:CF:E0:F3:3A:B3:32:51:8F:A5:50:2B:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/591c77e9-1aa6-3aab-ada5-1cb2bffc6d3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
X509v3 Authority Key Identifier:
keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
sbgp-ipAddrBlock: critical
IPv4:
70.36.13.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:81:0f:72:89:b0:57:7e:87:e4:f2:00:40:50:e3:ae:71:ba:
2a:ef:8b:b1:ba:59:a4:b8:84:28:6c:89:fb:0f:e9:10:0f:1f:
4b:5b:c3:e2:c8:0f:28:d1:02:1d:b2:9c:68:fc:8b:75:ab:09:
06:f8:96:48:27:d3:cf:fc:c6:36:7e:88:a9:bb:4a:13:e1:82:
f2:19:39:6a:78:53:85:e4:3b:f6:b5:83:e5:de:13:ad:41:51:
15:2c:5c:36:c9:3c:f0:5f:bc:0b:8a:0f:05:74:33:0f:3b:f0:
7a:79:ea:f6:99:a1:da:a6:3c:76:47:a8:3b:57:43:7b:a4:4e:
34:77:cf:11:c5:2a:cc:11:33:fe:17:e2:2b:48:d5:b3:d3:de:
ac:84:17:ef:80:73:ca:5a:7a:af:3d:89:0b:1e:bc:2c:9d:0d:
5f:b9:71:57:0b:ba:3a:8a:92:b8:89:ba:17:5c:6e:8a:6f:1e:
99:98:8c:b8:5f:17:50:1b:03:81:ee:0d:ea:f4:91:2d:9c:3f:
8a:68:59:f8:b8:fe:c3:59:e2:16:41:b1:4c:8f:d0:7c:a3:1a:
a4:61:af:fa:c8:72:f1:69:3b:a1:99:b4:a7:70:ea:e8:88:ca:
0d:b7:8a:9b:a5:5d:92:e9:df:db:84:ea:f0:11:c2:66:f3:ba:
bf:b5:ba:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:28:01 2025 by rpki-client