Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/bf4944d1-8b53-3747-b5a0-dbcc2164149a.roa
File: bf4944d1-8b53-3747-b5a0-dbcc2164149a.roa (raw, json)
Hash identifier: NFPOJR0MjwBdSveUPLyG0r7+VkXx06V9YY3d99XbZcM=
Subject key identifier: 59:88:21:32:A3:26:2C:FD:BA:9C:44:39:59:32:1D:0D:BD:49:54:F5
Certificate issuer: /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Certificate serial: 010D0C9F432858489340B34F0F801DCC850DFD00
Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/bf4944d1-8b53-3747-b5a0-dbcc2164149a.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 32086
IP address blocks: 67.59.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:b3:4f:0f:80:1d:cc:85:0d:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=5d695a42-ac49-4d54-af0f-434ba5a50b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:70:6f:f7:b5:56:35:10:75:14:74:78:10:98:
45:1d:8f:fd:b0:6b:88:20:d2:cf:40:cf:55:26:16:
9a:e2:5d:98:10:84:76:38:6f:ad:6f:41:c8:b2:48:
3d:a6:8d:a5:07:30:10:a0:8d:63:13:3d:57:32:9e:
93:c4:3c:c1:cb:e3:b8:8c:33:a0:63:d3:5b:c4:7c:
89:0b:72:1b:71:f7:cd:08:d4:2a:47:43:3f:3b:89:
21:89:6c:f6:65:74:49:0f:b3:6b:81:6c:ce:bd:3f:
bf:78:c2:ab:ae:b0:92:51:98:9e:85:19:5b:a7:61:
1d:10:3b:98:cf:e8:5c:4a:d2:2b:5f:30:43:5b:54:
13:0a:06:99:83:3c:68:52:ad:be:c6:8c:31:7c:06:
35:ef:bd:e4:38:59:3e:b0:df:41:da:38:f7:20:8f:
33:a7:30:f5:b0:2e:5c:e4:58:3b:46:0c:51:3f:a2:
49:7c:25:fb:db:e2:e2:68:e7:70:0e:39:5d:c1:e7:
31:f8:28:d3:4c:a9:18:b9:5c:0e:97:47:0d:43:59:
9e:63:78:7b:bc:0e:56:93:ab:23:0e:28:03:88:21:
9e:d6:06:58:f3:37:cf:a0:69:16:fd:8c:6b:18:a4:
ce:e2:9c:b5:74:98:12:36:b7:e3:70:8e:38:ce:94:
3a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:88:21:32:A3:26:2C:FD:BA:9C:44:39:59:32:1D:0D:BD:49:54:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/bf4944d1-8b53-3747-b5a0-dbcc2164149a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl
X509v3 Authority Key Identifier:
keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
67.59.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:98:44:0d:04:8e:a3:da:f1:f8:43:e5:81:33:d2:35:19:1c:
e5:f5:78:c2:54:2f:ed:54:fc:16:d2:a3:88:05:7e:9d:4e:8f:
2f:41:f3:64:13:6f:35:98:c5:c2:07:0a:9e:83:8c:03:9f:92:
8d:9f:24:97:9a:17:76:58:ff:ef:ab:fa:1c:17:c1:81:9c:17:
04:5d:48:91:a4:d7:20:43:9a:dd:38:ac:85:6c:b1:97:77:5c:
d9:b6:42:51:ce:fc:35:b7:f7:b3:17:4d:16:f3:54:b6:60:f3:
05:9d:12:23:8f:c9:6a:36:e3:4d:15:64:a6:f3:c0:e9:6f:ad:
18:12:6a:9b:54:a6:57:36:a6:28:d2:24:ac:f3:a1:62:a3:f8:
1d:1c:aa:34:4b:d1:dc:f5:3e:db:43:7f:85:76:97:65:73:f2:
6e:f0:72:de:c3:88:2f:6a:69:31:ab:a4:ad:88:3b:54:57:83:
ee:bd:f9:2c:ba:8b:35:d7:b7:26:5e:c4:e4:07:42:56:f7:4e:
88:cc:d7:92:69:6f:ef:ef:de:3f:31:45:72:4d:2d:10:2d:b9:
58:2d:61:75:8f:32:56:bc:4a:ab:f9:61:24:dd:78:49:2b:81:
10:fb:82:33:12:a9:fa:c8:0e:15:d9:44:2a:8f:ea:3e:03:56:
50:5d:88:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:30:44 2025 by rpki-client