Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70b87c46-4f8e-49be-90ee-60fc32ee36ca/c4e77cc9-b642-381c-a023-73ef0a7e1fb0.roa
File: c4e77cc9-b642-381c-a023-73ef0a7e1fb0.roa (raw, json)
Hash identifier: Up+W31RmQPLnCHy2+VOJh9hgbcbyZDuGGe6lcwuCXGY=
Subject key identifier: EB:FB:85:F8:F1:C4:54:42:98:2A:5D:A7:82:B2:0C:39:36:37:C4:A4
Certificate issuer: /CN=70b87c46-4f8e-49be-90ee-60fc32ee36ca
Certificate serial: 010D0C9F4328584865303BA04BDC2E66C37D9E40
Authority key identifier: F3:83:50:2E:C7:C2:65:E5:71:04:B3:F8:C8:4A:C6:D1:7E:12:94:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70b87c46-4f8e-49be-90ee-60fc32ee36ca.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70b87c46-4f8e-49be-90ee-60fc32ee36ca/c4e77cc9-b642-381c-a023-73ef0a7e1fb0.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 204903
IP address blocks: 67.217.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:3b:a0:4b:dc:2e:66:c3:7d:9e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b87c46-4f8e-49be-90ee-60fc32ee36ca
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=4b61349a-fc17-4dd9-ad3f-de5a5e25cc2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ae:1e:5e:ac:16:30:41:86:c9:4b:91:84:e5:
71:15:33:b0:12:67:6b:c6:c9:63:a3:b3:cf:e1:1d:
5b:cf:66:49:e3:07:8d:0c:07:62:bf:cf:ea:6c:19:
e7:8b:9b:4d:49:f8:48:86:76:43:56:50:65:71:e7:
cd:29:dc:2c:2e:d2:8d:d3:15:cd:4c:04:c1:80:61:
61:ce:3c:79:87:a5:38:f9:e4:06:12:8b:bc:b7:9e:
86:87:38:c5:24:2d:42:20:1e:a0:b2:22:32:57:6a:
fc:4b:46:80:43:57:13:b2:0f:93:bb:ff:e5:fb:0c:
50:cd:10:c0:4f:e0:4b:d3:ea:cb:cd:4b:bc:fd:1a:
8f:b0:8e:af:80:51:ef:b0:d5:97:de:ab:e0:1f:89:
cd:34:07:51:f6:8f:28:a7:17:35:07:cb:e3:dc:f9:
6f:5d:d8:8c:5a:68:0a:c1:ab:ad:83:15:98:f8:16:
15:67:c4:7d:fa:49:37:ec:56:2f:24:0a:3f:94:55:
b1:0f:99:0e:e8:e5:90:ed:c3:64:03:fa:16:6c:12:
79:ad:4e:e3:86:2a:2e:0a:1a:36:8d:5a:6e:32:10:
39:33:25:dd:6f:0a:9a:c4:53:84:6d:0d:58:a9:0c:
3f:3f:0f:42:b5:0f:ab:19:89:50:37:4f:6c:92:20:
69:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FB:85:F8:F1:C4:54:42:98:2A:5D:A7:82:B2:0C:39:36:37:C4:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70b87c46-4f8e-49be-90ee-60fc32ee36ca/c4e77cc9-b642-381c-a023-73ef0a7e1fb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70b87c46-4f8e-49be-90ee-60fc32ee36ca/70b87c46-4f8e-49be-90ee-60fc32ee36ca.crl
X509v3 Authority Key Identifier:
keyid:F3:83:50:2E:C7:C2:65:E5:71:04:B3:F8:C8:4A:C6:D1:7E:12:94:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/70b87c46-4f8e-49be-90ee-60fc32ee36ca.cer
sbgp-ipAddrBlock: critical
IPv4:
67.217.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:e7:cd:75:d6:48:91:0a:fc:f5:49:f1:5f:ee:ba:54:87:60:
db:85:87:53:40:c9:61:7f:03:64:09:1f:04:a8:3b:5a:37:7b:
11:dd:bc:e4:1e:56:3f:6f:f9:cd:51:a6:9f:8b:4f:1f:a5:36:
a3:1a:10:07:f6:28:d0:48:e2:f3:b6:99:69:bc:36:e1:9a:70:
dd:aa:bc:2e:9d:fd:15:9f:17:ab:8c:bf:ef:a3:5b:bc:e1:b6:
dd:40:9a:92:91:0f:18:38:e4:64:39:98:52:68:40:e3:9c:bb:
01:fe:bf:24:c4:4d:96:f4:ff:d3:72:c4:03:c1:1f:10:1c:c9:
62:82:af:e5:0c:70:fd:5c:06:dc:ad:af:0d:2a:4e:74:e2:d9:
7f:99:6b:a8:4c:59:8b:a1:7f:d3:a1:4e:86:5a:55:f2:85:31:
1a:e4:b4:d4:67:5c:53:cc:39:c6:34:bf:8a:77:ba:11:56:fc:
85:cd:56:bc:67:14:15:c6:65:6a:a9:02:88:39:f0:fc:e8:03:
bf:7c:01:60:0b:b9:e5:de:c4:cf:d7:11:1e:be:e5:08:15:c0:
f0:2a:31:75:5a:d5:2b:f8:73:99:f1:b6:3d:a5:ef:c3:a7:84:
f1:8a:46:f9:c9:3d:bd:ae:da:cd:86:20:46:1e:f7:9f:73:f6:
4f:6a:05:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:53:09 2025 by rpki-client