Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/66d28256-cbf5-3b31-910e-e10623aa8600.roa
File: 66d28256-cbf5-3b31-910e-e10623aa8600.roa (raw, json)
Hash identifier: TJ6wYwdgLRqD+XFws18rF0bWPEn0wqLRXe7SERK6kkU=
Subject key identifier: 8E:FD:21:E0:A4:E6:08:A3:0D:1A:7C:4D:CE:1E:B7:4F:1D:D0:75:62
Certificate issuer: /CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2
Certificate serial: 010D0C9F43285848663AE6988F87FCBD692D2000
Authority key identifier: E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/66d28256-cbf5-3b31-910e-e10623aa8600.roa
Signing time: Wed 01 Jan 2025 10:58:01 +0000
ROA not before: Wed 01 Jan 2025 10:58:01 +0000
ROA not after: Tue 01 Apr 2025 09:58:01 +0000
asID: 7018
IP address blocks: 216.40.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:3a:e6:98:8f:87:fc:bd:69:2d:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2
Validity
Not Before: Jan 1 10:58:01 2025 GMT
Not After : Apr 1 09:58:01 2025 GMT
Subject: CN=8a6753cb-e15b-44cb-b18a-167d4cccb3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9d:30:9d:89:f9:4e:c7:54:78:b7:8f:ba:83:
8b:38:f9:2c:7b:8d:3b:fc:66:6e:cf:1a:69:d8:15:
d8:2d:5d:31:97:0a:58:7c:5c:34:2b:ff:0f:2a:30:
06:f6:d8:52:73:05:88:3b:00:3c:29:5a:11:30:40:
ab:7d:63:af:a8:c9:56:74:10:5d:f3:4d:54:89:3d:
ed:ff:ed:11:e0:2c:5e:d6:14:2a:fe:56:9e:7f:43:
d5:6c:ef:69:d8:0a:f2:6d:8a:09:82:00:bc:75:25:
72:12:00:cc:2c:85:d3:f4:a7:0c:f9:94:76:86:c8:
75:91:6a:7f:36:14:88:f4:8c:34:e2:b3:d4:35:d2:
0f:7e:1c:3b:06:dd:66:1d:be:01:c7:1a:a6:7b:10:
cd:08:f1:c6:e5:f9:70:f8:90:99:b4:22:b3:ad:6e:
25:3f:e9:1b:31:0a:ae:5f:7e:6d:66:27:86:10:60:
84:1a:68:0e:84:4f:d3:23:67:99:63:ac:2b:84:ea:
6c:54:46:60:48:a4:23:af:f9:c8:80:2e:6e:e7:a9:
7a:11:b2:24:7f:2b:eb:54:04:38:f6:65:51:9d:33:
7a:17:bb:fc:ff:9c:67:21:14:73:ca:1b:71:4d:53:
b8:cd:f9:87:81:f2:81:60:65:48:c1:a9:36:d7:01:
2c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FD:21:E0:A4:E6:08:A3:0D:1A:7C:4D:CE:1E:B7:4F:1D:D0:75:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/66d28256-cbf5-3b31-910e-e10623aa8600.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl
X509v3 Authority Key Identifier:
keyid:E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer
sbgp-ipAddrBlock: critical
IPv4:
216.40.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:ae:4c:22:72:1b:0f:65:90:12:39:45:33:2b:a8:ec:22:c3:
fd:1b:8d:a1:19:1b:fe:49:b2:4b:c6:0f:93:fb:7d:71:2d:fb:
9b:bc:bf:cd:36:17:09:c4:77:70:b0:7b:b0:51:c8:85:d6:0c:
78:8b:31:15:5d:e7:b2:21:47:19:3c:03:74:ab:b7:48:9e:52:
1e:49:3b:9f:1d:c4:7b:ad:36:6b:6e:28:53:aa:b3:63:34:bf:
57:05:f3:c1:1c:b5:23:9c:46:b0:2c:c9:e4:23:55:0c:ff:4f:
ba:a9:93:9c:6d:57:ba:c5:67:a4:69:ae:7a:c7:28:92:47:a2:
7f:a7:9a:17:dd:1d:fb:d2:20:4b:bb:a7:2a:a7:99:61:fa:94:
58:a5:b4:43:0b:e4:63:be:0e:e4:3e:c6:5e:58:44:e9:0e:cf:
2e:f2:07:6e:39:22:7a:8c:1c:fe:8e:b4:89:23:6f:5f:fe:d8:
7f:c1:a9:0c:b2:dc:71:8e:b4:61:97:c6:99:15:c7:3e:03:65:
d3:58:72:35:96:7d:00:a2:fb:e4:32:82:19:50:ad:80:c2:90:
c2:7d:db:90:02:81:f4:c8:9d:7a:30:43:af:b3:85:d0:a0:2b:
40:b6:1c:c0:d4:fc:8d:c8:75:3d:bc:b7:66:6f:8c:de:6d:55:
4a:b9:bf:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:53:43 2025 by rpki-client