Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/7e7dfc09-f6dc-3df0-92f2-221c7cc8743b.roa
File: 7e7dfc09-f6dc-3df0-92f2-221c7cc8743b.roa (raw, json)
Hash identifier: tWGTJ6Tf+Mpe37eTf3uHyUkuwHCF1wPXX0qZPDsCtrA=
Subject key identifier: 1A:31:1E:ED:8B:F1:EE:16:45:BF:F7:B7:6E:08:11:EC:6B:D8:F0:7A
Certificate issuer: /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial: 010D0C9F432858486695C1069C6C74FFD9A85A18
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/7e7dfc09-f6dc-3df0-92f2-221c7cc8743b.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 3695
IP address blocks: 70.36.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:c1:06:9c:6c:74:ff:d9:a8:5a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=0d1ce97e-ef20-4ef9-b6fe-1440ea777ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:11:29:84:0c:a3:e5:8e:0f:93:ac:e5:95:19:
53:3d:14:08:91:ee:0a:82:2b:9d:2c:44:34:d1:88:
a0:6c:f4:87:e1:e4:d5:06:f8:cc:da:b0:16:ba:0f:
8b:8f:6d:a7:6b:48:4e:4e:39:20:ff:12:f1:e6:0f:
94:03:d9:92:f3:77:9b:92:87:c4:0d:d2:8a:9c:5a:
50:f9:b0:d7:7a:ea:13:fd:14:10:38:b8:10:10:50:
cf:f3:8b:4b:bd:d3:1d:6e:db:6f:2c:17:e1:64:dc:
b0:ec:0c:52:86:81:19:2e:6f:03:63:87:11:a7:73:
4d:46:b7:e1:16:15:d1:6d:d3:a9:09:ae:6c:38:34:
48:b9:96:18:1c:0d:6f:41:b5:6b:10:29:af:22:2e:
7d:2d:23:4c:3c:d7:37:5d:c7:13:3a:89:1b:0d:24:
aa:f4:3b:a0:da:44:02:4c:3f:ce:c9:62:f5:de:c3:
c3:b4:7d:bf:1d:94:98:04:ab:6a:de:1b:33:bd:d3:
3e:8a:d3:e0:22:a4:44:9e:9a:8f:e7:dc:8a:bb:ad:
4b:ba:92:fb:53:a7:16:2d:b6:70:66:20:38:c8:a5:
af:75:d8:5c:81:04:98:a9:4f:0a:90:5c:ca:0b:c4:
7d:75:86:0b:8a:21:a5:e4:d8:c4:27:8d:a2:e1:08:
29:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:31:1E:ED:8B:F1:EE:16:45:BF:F7:B7:6E:08:11:EC:6B:D8:F0:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/7e7dfc09-f6dc-3df0-92f2-221c7cc8743b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl
X509v3 Authority Key Identifier:
keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
sbgp-ipAddrBlock: critical
IPv4:
70.36.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:e3:a4:33:9b:48:2b:14:51:92:12:44:a6:2a:94:4f:a3:99:
62:40:52:a6:ba:14:85:a9:b5:db:e5:a1:73:d5:76:39:1b:49:
be:55:11:c1:31:0e:e5:65:f6:d5:8a:06:34:00:2e:c4:6e:c1:
0f:f2:a8:39:17:2b:6b:79:20:34:ad:22:b7:39:2d:1a:ad:e6:
01:7a:ff:c8:36:d0:06:52:a0:e6:da:f9:9b:24:ff:7a:b0:ed:
be:01:bf:a5:fd:83:f4:c8:bc:ff:f3:38:59:4d:06:ff:50:79:
c6:f3:3c:3f:6a:4c:db:4b:d5:16:fe:fc:60:ee:f6:e5:14:95:
2a:1b:c5:11:8d:18:59:21:f7:13:b7:b5:97:0b:c9:9b:02:3a:
6d:54:c6:91:20:3d:4d:4c:99:31:7b:56:04:56:ff:e6:61:21:
fd:f1:5f:94:42:bb:84:c8:80:99:3e:43:32:0b:9a:89:fd:12:
a5:40:4c:fa:34:c7:5d:0d:83:96:b0:af:70:c2:b8:c2:5b:ab:
f9:27:60:51:e8:d5:cb:31:ba:fb:2d:58:b3:a3:95:db:5a:41:
89:9a:61:75:0b:7b:56:3f:c6:35:20:b7:b0:e0:50:7f:28:75:
59:db:18:b2:93:e6:de:ee:ac:38:8f:6a:55:ac:34:41:06:b0:
66:74:aa:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:34:20 2025 by rpki-client