Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/6bdab0f1-1b45-3cbc-8c4f-1ffd6d888184.roa
File: 6bdab0f1-1b45-3cbc-8c4f-1ffd6d888184.roa (raw, json)
Hash identifier: lDHuTcm4eDdo6xuBIHgQuCnVCOHYWtl3qR7dMHpH5r4=
Subject key identifier: 59:3E:36:74:C9:87:89:85:75:E8:1D:67:49:E9:EF:B7:77:A8:5F:07
Certificate issuer: /CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
Certificate serial: 010D0C9F4328584834556075EEFFE4EDA3B013C0
Authority key identifier: 5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/6bdab0f1-1b45-3cbc-8c4f-1ffd6d888184.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 203993
IP address blocks: 67.221.252.0/24 maxlen: 24
67.221.253.0/24 maxlen: 24
67.221.255.0/24 maxlen: 24
2607:fae0:f000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:60:75:ee:ff:e4:ed:a3:b0:13:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=1a7a72c1-a8b7-48bc-bbd6-f4a60714c099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:89:21:0c:53:0f:c4:5c:f7:7b:33:43:93:1e:
50:00:a5:7b:6c:30:79:96:49:34:be:05:f6:0d:ec:
63:36:a6:5b:22:18:db:84:8d:9b:8e:76:ff:5e:0f:
1d:31:3d:8b:01:f4:d2:f6:92:93:69:ac:6b:fa:6f:
98:7d:ea:0c:08:dd:3d:33:d6:05:14:53:a8:05:92:
dd:4c:51:33:c7:b3:1d:94:8c:5d:82:d9:b6:a1:f5:
c0:d9:bb:c6:8e:d4:b5:49:6a:6d:73:e0:d4:48:20:
1a:60:18:2a:93:bc:07:98:3d:5c:22:c2:44:97:84:
e0:03:68:e1:80:1d:3b:60:f2:dc:4c:ca:d0:9a:d7:
97:ee:8f:b7:55:5e:1a:61:2b:13:5d:ba:99:47:81:
2b:2e:77:42:2e:cb:ef:03:0b:6a:96:2d:0e:6a:a0:
a1:0c:1c:78:40:83:1a:07:02:88:4a:24:16:0b:81:
a9:69:b5:8e:32:b3:c2:c0:91:69:f0:c2:ab:7d:fb:
75:45:64:d8:45:4f:0f:b1:c7:aa:61:c8:87:46:0b:
90:28:35:73:34:f6:59:57:57:ab:80:94:9f:e8:8a:
05:4d:f3:95:fc:fa:31:76:6f:9b:85:be:2f:a6:fc:
9e:a9:20:e2:90:cb:e9:52:38:b7:99:72:ba:a8:5c:
e6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3E:36:74:C9:87:89:85:75:E8:1D:67:49:E9:EF:B7:77:A8:5F:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/6bdab0f1-1b45-3cbc-8c4f-1ffd6d888184.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl
X509v3 Authority Key Identifier:
keyid:5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
sbgp-ipAddrBlock: critical
IPv4:
67.221.252.0/23
67.221.255.0/24
IPv6:
2607:fae0:f000::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:4d:f3:a6:41:d3:0b:f7:23:81:91:56:d6:1f:60:08:ef:ea:
3d:51:cb:8f:11:29:02:96:ef:bf:72:70:02:4a:df:4a:a9:a1:
13:0e:7a:d9:48:db:75:2f:60:8c:19:5a:31:fd:c9:fd:55:93:
56:db:26:12:39:31:6f:fd:6c:bd:ef:99:bd:24:b8:3a:e6:e0:
6b:f2:03:df:06:52:57:9e:8c:9b:39:cb:18:c7:1a:bf:b0:40:
70:68:aa:75:26:11:1d:7e:6b:e0:ad:3c:87:17:f5:84:48:b9:
f0:5c:2f:07:2e:44:97:82:18:c3:f5:b9:0c:fb:53:c6:97:08:
5b:d4:3a:98:8e:a6:fb:57:7a:7a:7b:8c:64:0a:7d:c4:ee:d5:
d6:57:01:d3:bb:3e:09:a2:14:57:90:bd:a6:78:d1:ca:c1:bd:
01:14:82:5c:0e:35:71:8a:c0:c3:f6:83:be:9a:49:fb:f7:a8:
9c:dc:e3:de:75:30:7b:c6:c9:c3:22:8f:9d:fa:c9:82:3e:8c:
75:bf:28:c4:6c:b3:62:53:61:29:86:30:54:09:91:e8:00:3c:
b3:03:c1:02:9a:b9:5a:7f:7e:3a:2b:6c:39:01:88:db:c4:18:
eb:5e:dd:8a:34:05:16:14:16:50:72:2d:f7:2f:76:ab:58:42:
78:35:2f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:44:37 2025 by rpki-client