Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/baaa28a5-cd3b-329b-97cf-7ccd1019c638.roa
File: baaa28a5-cd3b-329b-97cf-7ccd1019c638.roa (raw, json)
Hash identifier: xja6wrS1PsXB0MkUilVqtS5zwidgOhAcUQkcD36OpNQ=
Subject key identifier: F3:5F:C1:4A:00:BC:41:5F:08:02:A0:0F:CA:5C:A3:2C:24:23:B0:8E
Certificate issuer: /CN=6b72a822-0e8f-45f9-a612-463da7164bf3
Certificate serial: 010D0C9F43285847FDE4D2DBC47EE27C4E877A80
Authority key identifier: 58:37:4A:8C:C9:BD:00:03:69:BE:CB:5C:76:25:FF:E5:C5:06:5D:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/baaa28a5-cd3b-329b-97cf-7ccd1019c638.roa
Signing time: Mon 25 Nov 2024 02:00:28 +0000
ROA not before: Mon 25 Nov 2024 02:00:28 +0000
ROA not after: Sun 23 Feb 2025 02:00:28 +0000
asID: 55134
IP address blocks: 69.54.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fd:e4:d2:db:c4:7e:e2:7c:4e:87:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b72a822-0e8f-45f9-a612-463da7164bf3
Validity
Not Before: Nov 25 02:00:28 2024 GMT
Not After : Feb 23 02:00:28 2025 GMT
Subject: CN=a2ce3aa0-27ce-4469-beef-6af1dc69a2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8e:7a:80:89:d6:14:5b:b1:3c:06:cd:98:9c:
0c:49:ae:5d:95:37:eb:c2:c5:7d:56:a3:b5:3a:36:
99:83:25:ea:98:03:b7:9d:7f:1d:67:84:75:34:5f:
7c:d9:b8:35:50:00:ec:7a:7c:14:e2:b3:33:de:4a:
61:bf:16:d1:16:02:82:a1:2d:db:5d:f6:5a:40:9b:
de:21:3f:37:cd:89:40:03:a7:6a:19:34:50:c8:bc:
35:23:32:4b:7e:4a:59:9f:ab:e4:a7:a8:59:b9:38:
5b:12:85:15:b2:c4:6a:32:a1:cb:12:8e:e8:d8:80:
b3:c8:aa:99:df:5f:dd:af:35:b3:94:cf:4e:21:40:
0c:23:1f:89:67:77:a1:68:bc:f6:54:bc:d3:20:9f:
46:33:b7:67:00:ec:3e:15:d9:15:18:69:45:91:4d:
2e:81:ed:df:a3:c3:d6:b1:03:a8:97:63:5d:45:10:
60:c1:e2:02:57:6e:32:27:78:be:55:22:00:bb:35:
d9:7d:12:94:8f:4b:34:b0:ae:75:bd:15:d5:40:0f:
c0:1e:c5:fb:cd:11:c9:87:25:04:a3:a2:68:09:a0:
5d:e2:b8:88:9a:ac:3c:30:55:70:f7:3e:5a:70:c2:
9f:e5:08:25:45:47:fd:d4:5f:b3:56:bf:fa:67:58:
da:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5F:C1:4A:00:BC:41:5F:08:02:A0:0F:CA:5C:A3:2C:24:23:B0:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/baaa28a5-cd3b-329b-97cf-7ccd1019c638.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3/6b72a822-0e8f-45f9-a612-463da7164bf3.crl
X509v3 Authority Key Identifier:
keyid:58:37:4A:8C:C9:BD:00:03:69:BE:CB:5C:76:25:FF:E5:C5:06:5D:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6b72a822-0e8f-45f9-a612-463da7164bf3.cer
sbgp-ipAddrBlock: critical
IPv4:
69.54.248.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:6f:a7:36:75:90:d8:89:08:1d:6f:b7:e3:05:b5:3b:69:b5:
a8:6a:fd:b2:da:d2:bb:de:af:41:5b:99:63:39:55:3d:b7:77:
a1:22:26:90:8e:99:aa:d6:4d:72:1b:7e:e2:e6:f3:97:1c:e6:
fc:e4:21:e7:9e:5d:83:43:c9:de:79:83:3e:bb:71:a9:7e:1a:
a2:e2:32:8f:b2:35:36:0e:5e:1e:b1:a2:85:4e:1b:2e:f2:f3:
2f:1a:54:0a:22:bb:19:9a:2c:a6:6c:ed:00:fe:b5:ee:58:cb:
56:90:23:ef:d0:10:61:13:2e:2c:c0:a6:01:8d:01:1a:75:aa:
f6:2e:8b:d6:1d:f4:e9:72:be:65:18:cc:a1:fd:76:b0:6d:85:
15:e2:d9:fe:53:8c:0e:2c:7b:f4:2f:cf:22:e2:80:71:db:01:
26:ae:1a:dd:7c:95:c2:37:a8:5b:4e:02:6c:81:1f:44:77:00:
d2:50:5f:04:72:19:34:b2:30:39:f6:0e:4b:05:9a:29:89:90:
f2:d2:76:74:d6:34:e4:dc:d0:e5:d9:3d:d3:91:fd:64:63:e6:
40:1e:bf:98:2a:f6:69:93:51:ab:fa:8e:2f:97:a4:f8:da:ea:
e5:a3:bd:c6:eb:d1:eb:83:a3:84:ca:28:c6:69:50:ed:bb:a8:
3b:c5:bb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:03:48 2025 by rpki-client