Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/9dc53f79-5229-395e-abe4-ac308a1251e7.roa
File: 9dc53f79-5229-395e-abe4-ac308a1251e7.roa (raw, json)
Hash identifier: /mtRCDVObTTh4RmBbTCKbfMUe9n6YzKRGf/fWF65jfE=
Subject key identifier: DD:19:63:C8:E3:C0:0F:C9:75:AB:4C:06:F8:C1:AE:BE:FD:EA:E7:76
Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial: 010D0C9F432858486D9047024421268B738AED00
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/9dc53f79-5229-395e-abe4-ac308a1251e7.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 40065
IP address blocks: 67.220.90.0/23 maxlen: 24
67.220.92.0/23 maxlen: 24
68.168.16.0/23 maxlen: 24
68.168.22.0/24 maxlen: 24
68.168.24.0/22 maxlen: 24
68.168.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:47:02:44:21:26:8b:73:8a:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=f45c815a-1d2a-441c-8002-e7812dd7ae94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1f:6c:6b:2a:15:39:9f:cf:ab:c3:a6:83:64:
97:a9:64:d8:7b:5e:9e:e2:ba:d9:74:9b:f2:7e:86:
6c:6c:de:57:18:18:f8:6f:25:38:b1:7e:f9:4c:ea:
72:71:2a:03:38:4d:de:91:01:f3:84:83:73:89:ab:
c1:df:5a:fc:5d:41:c0:03:00:1e:ad:eb:5d:a4:29:
8a:fb:db:d7:4d:75:01:3f:10:80:f5:3b:ec:de:65:
a6:37:69:72:48:a1:2c:b2:e4:d4:ee:58:84:85:65:
b0:84:4b:7d:13:b6:6f:72:ea:4a:79:ef:f0:fb:f4:
47:00:5c:93:be:1d:ec:bf:24:d4:5f:0b:e3:e1:05:
4c:be:b8:45:6a:2c:f8:6e:27:7e:91:a5:00:72:2c:
56:74:b4:5f:58:02:50:3b:87:51:37:2e:24:3c:cd:
5b:14:2b:4a:47:46:bf:f5:89:09:23:13:4b:3e:af:
ce:42:23:b9:a6:d9:e0:5c:8b:c2:26:b4:45:6e:f4:
be:e8:32:98:49:08:73:ac:a9:68:1c:3d:c0:d3:f7:
81:29:12:54:5a:3e:0c:ed:2d:64:75:31:9e:2e:59:
9a:d8:71:d7:58:2e:c4:0d:74:66:31:f6:a8:6a:bd:
6e:c1:2d:90:d3:2e:43:af:4b:31:ba:19:a0:a1:c6:
b2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:19:63:C8:E3:C0:0F:C9:75:AB:4C:06:F8:C1:AE:BE:FD:EA:E7:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/9dc53f79-5229-395e-abe4-ac308a1251e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
X509v3 Authority Key Identifier:
keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
sbgp-ipAddrBlock: critical
IPv4:
67.220.90.0-67.220.93.255
68.168.16.0/23
68.168.22.0/24
68.168.24.0-68.168.28.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:97:55:ab:24:98:25:b1:aa:3f:a5:56:0f:8c:73:aa:37:ea:
7e:6a:60:49:a0:a4:42:da:80:c3:5f:7a:cd:e1:2a:bb:b5:2f:
cf:3b:4c:1c:b4:21:f4:df:48:46:0c:f7:28:6a:61:e7:3d:3b:
4a:74:11:3d:e3:d0:84:f3:a8:cc:48:de:5c:20:d6:ed:cc:f8:
ed:32:b1:ab:db:80:a4:f7:2d:17:c0:c6:2e:d7:39:22:db:a0:
03:0e:bd:b9:64:01:3a:09:85:57:95:a6:7f:53:d0:1c:42:3b:
79:21:ba:d6:51:24:58:05:a8:8e:13:26:cc:f7:f0:d4:0b:92:
89:a2:24:d6:78:7f:97:4a:0b:4f:38:2b:9f:95:b7:53:3d:f6:
76:f7:38:4b:e7:83:6c:8d:ef:f1:21:1c:2d:69:b8:cb:2e:e1:
d7:2d:54:52:3f:5a:78:1f:58:71:60:5f:83:34:34:05:91:aa:
e1:0b:a1:1b:a2:a4:3d:f9:34:98:9b:33:2a:b1:fb:f3:ab:dc:
22:fa:b6:f4:a5:3b:47:aa:2f:60:38:4f:57:79:ef:b4:b0:de:
f4:81:db:a9:61:cf:e3:67:06:09:62:4d:ac:2a:82:d3:0e:87:
c0:1e:d4:11:61:23:a1:4d:ff:e6:0b:27:70:18:77:16:51:c3:
05:49:20:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:32:36 2025 by rpki-client