Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/09a05594-2aa3-3548-8e60-1c580a66bcd7.roa
File: 09a05594-2aa3-3548-8e60-1c580a66bcd7.roa (raw, json)
Hash identifier: GA3+hjFJWJKeqKMO4LAKU2P9cF//myIHM/78gNDYo+o=
Subject key identifier: A1:23:2F:9A:D0:15:D8:42:3A:58:C7:3D:B2:A4:A7:B4:43:0C:E4:1C
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F432858486D9055E8FEBA3169B78A87A0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/09a05594-2aa3-3548-8e60-1c580a66bcd7.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 1299
IP address blocks: 67.159.24.0/23 maxlen: 23
67.159.28.0/24 maxlen: 24
67.159.29.0/24 maxlen: 24
2001:49f0:d11a::/48 maxlen: 48
2001:49f0:d124::/48 maxlen: 48
2001:49f0:d125::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:55:e8:fe:ba:31:69:b7:8a:87:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=22a22ea9-1be0-4883-807d-512a21089574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d7:dc:01:f4:c7:1c:a4:62:ce:15:f5:e5:43:
49:8d:f0:5b:ee:81:32:07:d2:e9:60:65:85:3d:ad:
b4:8d:f0:d6:12:0d:ac:f7:f6:50:fd:78:fe:b1:45:
ff:af:9f:02:8e:30:c0:fa:b3:f7:26:4c:a1:16:1b:
5f:e3:e5:08:65:47:06:b3:8c:34:a4:77:6a:49:20:
1a:97:d3:fe:60:94:9b:20:1f:61:89:24:1e:fd:0c:
28:20:8f:a3:fb:de:6a:96:05:5c:8e:54:d6:db:77:
c2:b5:93:99:3f:e0:d1:e0:0f:39:7f:ef:1c:f1:c6:
02:51:04:32:dc:a5:09:35:f7:af:3b:12:0c:36:d0:
9b:14:8f:4c:c3:1d:8f:1b:93:d6:a4:1b:ba:e4:b3:
9a:2d:8c:89:10:b5:d6:49:98:77:f8:6d:3e:73:e2:
e5:0f:7a:4f:8e:9d:27:07:69:0c:2a:87:ba:b9:5c:
ab:d7:18:b9:14:a9:09:ef:b4:9a:6b:a6:84:d5:79:
5d:57:40:0d:67:32:48:ed:57:29:91:5f:fe:12:ca:
f9:34:c0:a9:55:2e:a8:c0:c2:76:d1:03:df:82:af:
f4:8f:10:85:97:a0:f2:8a:df:95:07:78:4d:65:73:
aa:fe:9f:32:a8:a4:ff:14:dd:62:3a:30:e1:3e:19:
aa:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:23:2F:9A:D0:15:D8:42:3A:58:C7:3D:B2:A4:A7:B4:43:0C:E4:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/09a05594-2aa3-3548-8e60-1c580a66bcd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
67.159.24.0/23
67.159.28.0/23
IPv6:
2001:49f0:d11a::/48
2001:49f0:d124::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:e7:50:92:75:48:fd:57:8c:4d:c6:53:75:f0:56:5d:eb:0b:
0e:6f:33:22:f9:38:75:fb:9a:4b:da:f7:bb:fe:fb:4a:01:15:
96:1e:f4:3f:3d:27:b8:74:75:bd:c2:8d:a2:7f:b1:a9:30:29:
8c:ea:9f:c0:af:2a:cc:a7:2e:85:c3:e7:dc:51:a8:f5:10:8c:
cb:b4:5e:a3:7e:77:f1:22:5d:8a:3d:f0:c9:4a:ed:fe:32:dd:
65:fd:7a:41:71:f0:80:61:11:34:a1:1e:c7:92:6b:02:f4:70:
1d:0e:67:d4:04:9b:96:65:d6:a4:db:e3:4f:d5:d1:20:b6:83:
3e:bf:11:87:9a:1a:7d:23:f7:66:51:d6:f1:30:ae:42:10:21:
17:f8:a8:91:b2:82:8e:fb:b3:05:f5:12:92:5e:a8:39:99:c0:
83:3a:81:f6:6a:7b:48:e8:15:25:82:66:3e:64:25:b0:9b:60:
61:2f:0a:69:7d:d7:26:cf:7b:3b:10:d0:8f:11:d5:81:78:c5:
58:1a:98:74:76:dc:12:2c:af:f7:e6:29:57:80:6f:31:a5:7a:
be:86:a1:22:31:81:9b:0e:c9:84:4b:1e:74:5a:ef:32:3e:2f:
9d:28:e8:d6:c2:1a:da:66:31:8c:c4:50:66:6c:f2:6c:f4:09:
f5:fa:27:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:15:24 2025 by rpki-client