Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/939344cc-2583-384f-989a-b044342d604e.roa
File: 939344cc-2583-384f-989a-b044342d604e.roa (raw, json)
Hash identifier: 3VEJ5Zlgmv8Ts5VwYcZ0BWJvkjuYSGLUzBt6MJ6VKpE=
Subject key identifier: 92:4B:B8:11:D8:08:C1:2B:D7:E9:68:25:71:59:3E:94:81:EA:1D:00
Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial: 010D0C9F4328584820CA930BECF43AD553D247C0
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/939344cc-2583-384f-989a-b044342d604e.roa
Signing time: Sat 07 Dec 2024 14:00:51 +0000
ROA not before: Sat 07 Dec 2024 14:00:51 +0000
ROA not after: Fri 07 Mar 2025 14:00:51 +0000
asID: 834
IP address blocks: 67.43.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:20:ca:93:0b:ec:f4:3a:d5:53:d2:47:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Validity
Not Before: Dec 7 14:00:51 2024 GMT
Not After : Mar 7 14:00:51 2025 GMT
Subject: CN=52132beb-5a82-454d-9eda-880adf0d5d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6a:cf:e4:b0:97:36:ed:b2:86:5f:dd:6c:44:
80:d7:ea:1b:9b:dc:dd:c9:06:d4:51:0d:82:a3:36:
13:6e:f3:d2:de:e1:38:d3:2d:b0:f8:75:4e:0c:41:
37:0c:7b:a7:08:4a:98:09:ae:3f:5a:fd:2b:6f:44:
1d:0d:d5:83:9d:be:a7:b4:4b:82:ed:ce:2f:e3:09:
d9:cc:68:3c:55:a2:f0:52:2e:1a:51:d1:44:9c:c1:
44:30:c3:00:fe:07:90:05:68:24:b9:df:7b:e9:d0:
65:37:52:2d:30:8c:5d:27:36:2f:a8:63:18:2b:2d:
30:b5:a2:ca:69:be:6c:b6:34:5d:0a:f0:b0:85:fc:
92:48:06:73:8b:30:0f:38:21:c6:7d:32:dc:51:2a:
ab:70:f0:d1:48:01:e0:c8:aa:b6:75:c1:af:23:1f:
70:98:cb:1e:35:06:71:52:65:80:b1:99:de:cb:ef:
86:4e:c6:f3:eb:75:2a:34:21:14:64:8e:74:ec:52:
bd:9c:1c:bd:24:7e:ff:55:13:06:14:9e:42:ad:c8:
df:24:a4:a7:d8:d8:4a:db:a3:d0:13:6b:5a:fb:24:
f3:12:b2:0f:56:75:a7:dc:30:59:b0:2b:77:08:49:
0d:80:78:e1:21:94:31:a7:2c:88:63:83:49:e6:32:
dc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4B:B8:11:D8:08:C1:2B:D7:E9:68:25:71:59:3E:94:81:EA:1D:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/939344cc-2583-384f-989a-b044342d604e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
X509v3 Authority Key Identifier:
keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
sbgp-ipAddrBlock: critical
IPv4:
67.43.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:1a:6e:48:6e:b7:cf:bf:5c:45:b2:8a:4f:24:eb:a7:5b:0d:
e4:96:60:55:d1:39:7e:fb:60:9a:78:fa:d3:99:32:de:2f:f3:
7a:9d:2d:98:70:3d:73:db:83:66:20:f0:51:fa:8a:be:9b:37:
e6:d8:04:15:dd:2f:55:e1:53:1a:06:73:04:f8:51:88:45:12:
5a:11:50:ee:a7:f8:66:f4:c9:d2:f5:77:b8:a6:07:26:98:14:
92:40:c3:54:5f:d5:b0:80:78:c1:e7:7b:fb:8e:61:16:85:d3:
b1:5e:1b:b3:d6:13:d4:47:9e:dd:29:71:93:51:53:5c:6e:12:
ff:69:99:f9:1f:d4:98:ca:df:9c:6d:cd:52:bc:09:47:b1:3c:
f9:1c:19:84:a6:60:6e:e3:23:5d:f7:3b:c5:a0:8a:b9:e8:fd:
f2:93:1f:c0:05:b3:1d:06:24:5d:cb:9c:04:cd:ca:fa:1c:23:
36:35:ce:2f:29:e3:5c:ba:9a:ee:f9:e8:46:f1:25:dd:57:f0:
49:df:1a:04:e3:43:c6:ea:f9:5c:b0:47:8e:30:9a:13:b8:ce:
14:d8:a6:82:1b:56:e3:90:e1:55:ff:69:6a:ba:9a:74:b3:d8:
d4:8c:29:55:33:f8:6f:e7:18:da:12:c8:49:e8:de:74:03:f2:
5a:24:18:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:29:37 2025 by rpki-client