Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/3bef1ca5-cfef-3976-8bac-4ed9d9a3fc44.roa
File: 3bef1ca5-cfef-3976-8bac-4ed9d9a3fc44.roa (raw, json)
Hash identifier: NXSUwkzxNrVKkQPJPgw947k1qK2pKa4ZW2XnO8sVolw=
Subject key identifier: F1:7F:26:7C:52:83:B6:80:BB:B8:77:0A:E5:9B:78:6E:19:B6:01:0F
Certificate issuer: /CN=65c5bdcb-94ea-482f-989f-a6367adb24b4
Certificate serial: 010D0C9F432858485E35B3EC7E3025BEFFEB14A0
Authority key identifier: 1F:97:F6:35:B5:4F:0B:8B:88:38:C4:9D:5D:11:A5:73:F9:59:F1:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/3bef1ca5-cfef-3976-8bac-4ed9d9a3fc44.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 27630
IP address blocks: 67.43.160.0/20 maxlen: 24
69.166.0.0/21 maxlen: 24
72.34.224.0/19 maxlen: 24
207.246.192.0/20 maxlen: 24
208.122.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:b3:ec:7e:30:25:be:ff:eb:14:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c5bdcb-94ea-482f-989f-a6367adb24b4
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=ad12de4a-68d4-49f3-954a-d99df17d4ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c1:7b:03:26:f9:08:10:2d:ef:99:95:68:67:
13:7a:bf:2d:f3:30:f2:c5:be:eb:66:ae:31:eb:8a:
b5:b5:aa:94:53:ac:f5:ff:e0:57:81:f3:2d:dc:67:
29:3b:33:a3:f1:1a:07:82:f6:b4:b4:41:31:48:43:
b3:cc:5c:20:fe:12:e1:db:c9:b9:d4:d2:b2:fe:e9:
3d:ca:bf:59:ce:97:a2:43:0a:f5:f6:66:b4:e7:fa:
ac:17:41:b9:fc:59:32:0f:0e:f8:2f:ca:c9:b4:14:
80:d5:4f:eb:f8:f8:96:c0:89:8c:42:aa:dd:3d:4e:
81:d3:7e:f8:fb:f1:16:0c:d2:56:0a:04:15:bd:d0:
40:9d:3c:ac:ad:f0:c7:26:cf:47:45:51:22:ff:b4:
07:91:95:9d:75:5e:38:2e:b5:54:f5:b1:70:bc:d4:
07:ec:fb:cb:f1:3c:ae:af:b3:15:f0:37:30:21:c0:
76:84:05:36:39:5b:67:a0:f3:2d:6f:0e:3d:5a:00:
48:84:fd:ea:c1:ea:d5:dd:31:66:ba:cb:01:a5:c9:
92:45:11:9e:d7:b2:e4:bc:9a:c1:f9:9f:fa:cc:b8:
dc:dc:27:34:7d:8e:6d:ce:ed:dc:f4:ea:f3:49:8c:
eb:3f:22:17:41:fa:ce:f9:1f:1f:44:dc:44:e1:2d:
c7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7F:26:7C:52:83:B6:80:BB:B8:77:0A:E5:9B:78:6E:19:B6:01:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/3bef1ca5-cfef-3976-8bac-4ed9d9a3fc44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/65c5bdcb-94ea-482f-989f-a6367adb24b4.crl
X509v3 Authority Key Identifier:
keyid:1F:97:F6:35:B5:4F:0B:8B:88:38:C4:9D:5D:11:A5:73:F9:59:F1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4.cer
sbgp-ipAddrBlock: critical
IPv4:
67.43.160.0/20
69.166.0.0/21
72.34.224.0/19
207.246.192.0/20
208.122.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:18:6e:ef:c8:d4:f1:8a:79:0d:d5:80:af:5d:65:41:cc:93:
92:11:1b:93:1c:38:24:54:a0:db:92:e1:99:7c:ae:fe:89:25:
eb:33:6b:57:db:c4:32:3a:84:a7:37:02:99:dc:ba:18:dc:59:
6a:7a:50:ae:22:84:52:b0:8d:de:17:e5:10:ac:8f:d0:88:bc:
b5:2b:f2:da:03:2d:ad:8e:17:dd:f2:ae:2c:32:5a:88:1c:20:
d9:f5:50:7c:32:97:01:7c:91:99:6b:f6:e4:f3:b6:47:ae:3a:
7c:f9:4d:19:31:c4:a5:55:97:31:a5:f3:b3:03:77:d2:af:5f:
7c:9a:0f:ee:60:c1:c8:06:4a:a2:29:c4:3a:ef:7e:e3:bf:a0:
14:11:db:9d:6e:ce:f0:49:12:97:50:4c:25:fb:83:10:86:95:
1d:93:93:11:ba:cb:f7:70:8f:90:68:e1:e4:05:ca:d6:e8:10:
4f:5b:39:89:a3:5f:f1:46:71:53:3d:ff:7b:59:3c:a3:75:98:
45:59:1c:cb:48:4a:67:53:71:11:a0:6c:83:6a:7b:a3:47:7b:
74:84:99:b2:27:df:f2:3e:df:67:51:4e:49:33:a0:7e:95:9a:
c5:d2:1e:b1:f4:1d:e9:95:0a:61:d2:73:ed:4f:c6:01:07:8a:
2e:05:28:54
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:52 2025 by rpki-client