Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/67505067-b175-3e55-83cd-81aeb5b4bbc1.roa
File: 67505067-b175-3e55-83cd-81aeb5b4bbc1.roa (raw, json)
Hash identifier: IRSdJ7tFIQ8GkDF6oqNmNHf3qvDnG6vef0UF4+8gAUg=
Subject key identifier: 5B:64:81:D8:82:9D:06:29:84:FD:09:D7:58:1F:A1:BD:05:E7:B4:79
Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial: 010D0C9F4328584827C5464021E746C1F5C82780
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/67505067-b175-3e55-83cd-81aeb5b4bbc1.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 3356
IP address blocks: 67.215.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:46:40:21:e7:46:c1:f5:c8:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=425e7d44-4271-40c7-a968-1c3bc229ac56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:40:42:d6:62:5b:01:c8:f8:72:52:eb:e9:65:
5b:3c:ce:46:c0:ea:be:65:98:d2:25:ea:ae:02:d4:
b1:af:4e:51:d8:d0:2e:da:fd:df:8a:c1:73:78:79:
ff:03:35:cf:6d:22:09:44:4b:dd:db:d0:52:fd:e8:
de:52:99:68:4f:f9:d6:0f:18:b4:63:44:c6:24:4e:
c0:b2:87:a0:22:64:60:d4:b7:07:7c:f4:cc:13:d4:
f0:97:41:46:08:87:3c:ba:5d:c1:87:42:aa:cc:3d:
d5:b5:f0:d8:be:dd:cb:14:1d:3b:42:5e:3f:72:7a:
02:d0:70:9c:ba:ad:22:33:42:de:73:c9:d5:03:ff:
45:84:39:90:2f:69:12:75:e8:34:7d:ed:d8:86:5d:
32:e7:1f:7b:fc:ef:73:d4:1e:79:1d:46:3d:78:16:
af:6e:ae:aa:7a:ce:f9:2b:34:d1:fd:a8:ea:22:c6:
1b:fd:68:3f:20:3e:41:fe:93:53:17:0f:c9:32:ff:
b2:0f:65:03:80:82:60:28:cc:4f:e8:9b:b5:fc:36:
9f:a0:ae:97:c1:65:97:fe:60:5c:6e:33:ed:7b:72:
b5:27:ee:f7:41:73:02:66:cb:2d:67:09:e3:4e:24:
f1:2f:cb:e9:75:5b:35:b1:58:8f:70:90:9f:f2:0e:
00:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:64:81:D8:82:9D:06:29:84:FD:09:D7:58:1F:A1:BD:05:E7:B4:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/67505067-b175-3e55-83cd-81aeb5b4bbc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
X509v3 Authority Key Identifier:
keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
sbgp-ipAddrBlock: critical
IPv4:
67.215.81.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:0f:f4:c9:2b:83:db:0e:30:9a:11:95:12:28:33:38:b9:3e:
e8:f3:e8:7f:a9:1d:37:45:11:99:74:f9:de:09:fe:83:5b:07:
1b:2f:ea:04:96:45:3b:8e:b5:87:87:dd:7f:96:47:f6:ad:d5:
f7:54:92:f2:94:b1:e6:31:0d:f4:f3:3e:98:54:8f:d9:dc:70:
19:7f:7f:99:19:f3:06:6f:0c:37:5e:9f:6a:aa:07:7a:d5:9d:
fe:e9:40:c0:f8:34:b9:18:6e:01:c6:fc:14:45:7f:32:fd:58:
19:ce:ff:d1:75:e9:f5:65:13:38:84:de:df:57:25:71:a9:84:
3a:81:06:dc:b6:cd:2b:78:ce:2b:97:52:e7:be:73:ca:2a:5f:
ef:7f:94:78:db:99:a3:f6:b8:a1:e8:b3:e7:df:af:ec:ff:b4:
c0:62:60:98:68:8d:18:65:d0:dc:fe:21:ae:34:0f:94:6f:78:
c8:16:5f:5f:d2:7d:a9:73:e5:cc:35:bf:0c:de:81:c2:57:15:
2d:f1:69:49:fd:b2:23:91:6b:af:9d:8e:98:7f:b6:a3:81:3c:
cb:68:a8:d8:77:a9:d2:d2:e2:71:11:31:24:30:cc:e8:06:a7:
55:d3:2a:ee:b9:0d:76:4e:f0:da:11:4c:32:b8:c5:ca:13:8f:
80:87:be:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:09:44 2025 by rpki-client