Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/5fa0521b-a1e5-3ac5-9554-724b61c72923.roa
File: 5fa0521b-a1e5-3ac5-9554-724b61c72923.roa (raw, json)
Hash identifier: 5mDqqsbP9qhGdvicOhHgjc6Az1ejEhOViCsUorc9cuo=
Subject key identifier: 37:09:7B:1C:F3:66:08:3F:83:CF:57:33:F0:D4:84:B4:AB:06:42:23
Certificate issuer: /CN=928cccc8-4c1d-457b-a709-2f2c5d83c939
Certificate serial: 010D0C9F432858481C9A8A9E4CEFB3DD5B1F3740
Authority key identifier: E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/5fa0521b-a1e5-3ac5-9554-724b61c72923.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 16509
IP address blocks: 67.226.220.0/24 maxlen: 24
67.226.222.0/24 maxlen: 24
204.110.221.0/24 maxlen: 24
204.110.222.0/24 maxlen: 24
204.110.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:8a:9e:4c:ef:b3:dd:5b:1f:37:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=928cccc8-4c1d-457b-a709-2f2c5d83c939
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=7a378341-7f46-4578-aab1-13ddca8d3163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e8:48:96:3c:ba:f7:d7:e3:5d:2d:00:a2:95:
06:89:78:4e:d7:94:04:4e:01:eb:41:d1:df:83:bf:
06:cf:92:80:61:b7:a2:9f:cf:f3:47:97:d8:5e:c4:
07:ba:e7:68:39:10:f3:01:5e:91:f8:ae:02:5e:4e:
e6:96:09:4a:41:f5:44:ad:bc:38:0d:2c:3e:57:c8:
97:4b:8c:bd:07:fe:67:bb:cd:fa:18:71:56:0d:6e:
76:c7:a3:1f:3a:ba:0d:ff:d6:a9:48:0b:f1:83:32:
36:d8:75:e1:d7:6b:db:32:58:18:61:ab:8c:7f:9a:
48:3f:da:57:25:99:89:8e:71:90:ab:cc:70:47:9c:
dc:c9:e8:3d:55:e8:2d:fc:8c:84:f2:f0:dd:b8:98:
fe:25:4a:08:75:ac:24:2c:11:7d:87:1e:94:f3:64:
f0:6a:fb:82:bb:47:93:1b:0f:f7:4a:85:7a:f0:78:
df:89:c4:a2:35:82:7c:36:06:25:d6:c9:3a:8a:dc:
23:c7:2f:7f:37:24:d7:91:5e:95:23:b2:bc:cf:2d:
bf:7a:15:cf:41:eb:e2:76:ad:a5:46:56:98:31:31:
5a:1f:1e:80:3f:d2:48:76:65:b7:46:85:55:75:ff:
ac:e6:72:be:16:88:ea:1f:41:3f:82:bd:0f:b7:5c:
80:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:09:7B:1C:F3:66:08:3F:83:CF:57:33:F0:D4:84:B4:AB:06:42:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/5fa0521b-a1e5-3ac5-9554-724b61c72923.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl
X509v3 Authority Key Identifier:
keyid:E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer
sbgp-ipAddrBlock: critical
IPv4:
67.226.220.0/24
67.226.222.0/24
204.110.221.0-204.110.223.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:39:33:84:c3:f7:60:22:06:21:22:fb:c5:1d:16:ff:e4:02:
b2:ba:20:01:fa:5b:64:f7:e8:7a:fc:fd:34:f1:ff:7b:24:83:
f4:a8:94:bc:34:12:23:2c:38:4b:72:6c:14:5f:ad:24:f2:cb:
d4:67:26:c6:e3:77:00:f1:b2:31:20:79:69:64:2a:73:77:46:
22:1e:7e:26:c1:3c:63:dc:37:d7:e0:41:e2:67:e5:92:41:6b:
af:ac:0d:b6:23:a8:dc:af:79:1f:d1:82:53:6b:b4:a4:68:91:
b3:c7:c0:f4:2c:61:41:9f:dc:de:f1:63:ed:73:f0:fd:14:22:
0e:76:68:39:6d:1d:72:ed:a9:0a:bd:50:0a:d4:b9:98:6b:b6:
d8:3e:db:31:2c:a7:81:0d:a8:fc:de:d2:17:53:ba:8c:09:de:
a0:70:57:8f:cd:9b:36:59:34:75:86:2b:4d:a8:66:a2:c3:78:
37:35:56:c3:d8:97:ee:6c:39:a4:e8:b8:7b:ba:8b:ba:f9:06:
cb:35:9f:2d:c8:8d:12:be:05:17:48:65:e4:ed:18:6a:5c:b1:
7b:de:a3:cc:5e:02:0c:d2:90:b0:ab:03:d5:c8:cb:9a:0f:96:
f8:ef:03:81:56:ac:ac:a8:19:a8:e2:53:07:5f:70:43:c2:44:
70:eb:c0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:35:25 2025 by rpki-client