Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/e7f8b070-b54d-345a-99c3-6754564c0672.roa
File: e7f8b070-b54d-345a-99c3-6754564c0672.roa (raw, json)
Hash identifier: +H9m1XwZ/sCr2QSTGji53Saaz6fft2MYfH6pG4RYyJE=
Subject key identifier: 8A:0F:5B:F2:3B:15:4E:4B:F7:88:1D:9E:43:67:78:EF:82:9B:1E:52
Certificate issuer: /CN=866b2df4-0f0a-4b84-9eb7-c185258f5294
Certificate serial: 010D0C9F43285848451592A01790769C4184E200
Authority key identifier: 95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/e7f8b070-b54d-345a-99c3-6754564c0672.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 8075
IP address blocks: 67.210.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:92:a0:17:90:76:9c:41:84:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866b2df4-0f0a-4b84-9eb7-c185258f5294
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=cda63eda-802f-47d5-962d-eeeffcd351c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f2:67:02:b5:97:18:ca:52:c2:d0:ee:c0:73:
46:b6:8a:30:05:56:20:90:d4:a6:c9:58:41:85:6a:
5e:c1:75:85:af:00:8e:e9:e1:08:aa:1c:3b:7f:31:
a8:65:8a:c5:12:d4:ee:ba:b6:48:6a:33:a0:f9:32:
c9:a9:f7:41:85:d6:f9:83:3b:71:36:2c:c9:f4:e1:
ec:a0:42:97:a8:0b:79:ad:3e:91:5f:c3:81:8c:27:
b6:45:67:14:db:99:4e:e2:59:a5:0b:4f:4d:e3:8c:
98:bc:9d:76:4d:31:14:03:73:2e:b8:43:68:09:10:
e8:ba:76:c1:07:46:50:f7:06:fc:b7:91:0a:11:4a:
2b:01:84:1f:1f:79:2e:d3:d8:37:5a:df:4d:26:75:
ab:01:44:08:ce:0e:14:ee:5c:27:1e:04:2f:1d:f1:
28:80:d3:74:94:12:0c:8c:06:f4:1d:4a:2e:28:49:
41:21:57:5f:2c:4e:dd:9f:01:a4:e1:e7:df:28:11:
bc:2a:5c:c2:40:a4:31:be:c0:61:85:ef:d6:5d:60:
88:36:cc:ef:00:11:b1:b2:b0:bb:3b:a1:8f:b1:43:
14:fe:13:a3:9d:0c:bc:05:d7:b5:ff:1d:96:3a:ac:
22:a5:69:6f:af:cd:70:3c:09:d9:8a:9a:10:a7:35:
ba:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0F:5B:F2:3B:15:4E:4B:F7:88:1D:9E:43:67:78:EF:82:9B:1E:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/e7f8b070-b54d-345a-99c3-6754564c0672.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.crl
X509v3 Authority Key Identifier:
keyid:95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer
sbgp-ipAddrBlock: critical
IPv4:
67.210.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:65:35:99:b3:52:eb:37:8d:8a:05:9e:80:ac:7c:98:81:ca:
d0:fc:a7:58:34:78:4a:ca:7a:ae:b8:17:b6:ec:be:c2:6d:a2:
91:a9:b7:0a:95:61:e2:a7:bb:ae:35:a4:6f:e2:a4:5d:bd:41:
eb:ce:5a:c9:9c:5b:ed:b0:a6:46:74:9e:14:a4:da:1f:87:e6:
42:85:d7:ff:e8:89:4c:1f:d0:3a:1d:f0:a3:79:06:4d:26:92:
34:b6:8e:65:b2:24:6d:e8:66:bc:a7:64:3c:ac:b1:69:e6:25:
dc:25:d6:f9:99:ff:79:de:95:53:5c:46:2f:73:3f:f3:72:8b:
2b:bd:e2:1b:bc:0b:fc:4b:42:b9:b8:c0:68:d9:e5:db:90:90:
58:7d:c6:e7:fa:38:d0:67:ca:24:aa:22:c4:11:77:c5:1d:07:
3a:f5:56:20:55:9e:ba:b8:3c:5b:48:80:3a:a4:67:d9:fe:85:
2d:c6:06:11:be:c1:ab:18:0c:e2:14:03:bf:c7:df:05:ee:07:
62:4c:32:6e:b2:7a:76:6f:34:17:95:7d:7a:9d:cd:75:34:5d:
76:7f:ba:2d:9d:75:a1:96:fa:1e:4a:e2:c7:35:db:e3:80:f3:
4a:8b:fe:ac:d2:d1:18:fc:b3:62:55:22:f8:b5:58:8b:ea:1f:
6f:c0:7f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:32:56 2025 by rpki-client