Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/4588b8db-2d89-391c-b639-d0961c021e24.roa
File: 4588b8db-2d89-391c-b639-d0961c021e24.roa (raw, json)
Hash identifier: RV/JnKQrZelhMQ//+5Pgjbkm6CH+0WCI2a5AvbCMWsI=
Subject key identifier: 10:8E:50:B5:BF:79:6F:EA:BC:C5:F5:07:72:60:E3:F4:31:1F:FC:C9
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F4328584858A04330FCA2B541721090B8
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/4588b8db-2d89-391c-b639-d0961c021e24.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 1239
IP address blocks: 67.159.40.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:43:30:fc:a2:b5:41:72:10:90:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=d95618b9-5157-44ff-9bed-165d453b7432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5f:3c:e4:96:96:88:fe:05:af:15:2b:6b:30:
a4:46:f1:b0:53:13:81:6e:56:00:f6:a4:68:dc:03:
eb:96:86:5b:a9:b5:17:de:fa:ef:4c:43:93:ab:93:
26:ea:99:d9:b4:e1:3c:bf:2f:3f:80:12:59:d6:c8:
98:3d:bf:4d:76:ef:a1:81:0b:9c:55:20:24:d3:ab:
a5:2b:27:b0:0b:ae:8a:4f:45:ce:d0:18:7d:9c:be:
9d:8e:22:d1:af:b7:8e:ef:02:94:54:4d:33:c1:5f:
a7:4d:8f:4b:41:f1:d1:ee:10:23:7f:44:d5:f7:da:
8f:a6:42:3a:92:6a:13:11:58:0b:08:34:42:f1:7a:
8b:52:1d:18:2a:28:1a:76:e7:82:68:7d:0e:b0:c0:
d8:b8:e6:6a:9a:7c:2d:49:cf:c1:db:9c:65:cd:3e:
23:05:f1:85:14:98:65:48:f8:1a:9d:df:e8:da:30:
12:d4:a6:2e:76:59:14:dd:44:6f:df:79:e5:af:c4:
01:a7:6d:22:8b:c1:a2:2b:f5:95:3a:bc:06:6b:92:
a3:ed:5b:e8:d3:9d:6b:c1:c4:65:60:e8:9b:bc:7f:
be:9b:4c:61:7e:9a:00:b9:bb:d0:65:dd:2b:4e:51:
89:3b:2a:aa:c6:5b:d1:17:f1:5e:80:b9:ca:0b:55:
9c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8E:50:B5:BF:79:6F:EA:BC:C5:F5:07:72:60:E3:F4:31:1F:FC:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/4588b8db-2d89-391c-b639-d0961c021e24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
67.159.40.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:6e:0a:a5:16:f0:b3:76:ec:29:9d:fa:46:9f:17:30:bb:0e:
d1:a7:fd:d6:1d:fb:ac:ce:fe:b3:0e:94:e7:40:3c:36:79:3f:
0e:35:45:bd:74:10:43:a5:54:a1:94:f3:0c:72:bf:f2:78:05:
e9:fa:59:ec:5c:9a:e0:e6:41:a2:ce:d8:a0:b7:70:2f:d6:51:
2b:d5:14:52:72:18:65:0b:0b:42:b0:89:9f:50:75:d8:a3:3b:
15:61:5d:71:ad:f5:37:56:63:0a:04:ca:dd:60:5a:50:10:e6:
be:69:17:99:62:d5:41:26:c9:09:ff:8c:e7:53:c9:b5:ca:2d:
9c:7f:95:21:4c:6f:10:9e:08:d7:4f:e7:07:f5:bd:2f:bb:84:
f9:53:9f:8b:d0:1d:c8:02:2a:26:19:8a:03:d1:d0:dd:a7:3f:
f7:6a:02:b7:28:7d:38:05:00:91:39:6c:b6:21:34:0d:06:77:
e5:fd:d4:74:f3:1a:84:e4:c0:78:fe:66:76:0c:98:09:5e:b4:
5e:4a:18:eb:1e:c9:16:17:78:25:f0:89:27:d9:b1:ba:df:d7:
c4:42:f0:f9:c7:98:5c:c1:15:6f:ff:a1:ac:bb:b1:9a:2a:b7:
b8:a4:f7:be:f9:ae:02:44:88:32:9f:09:92:53:52:59:ed:38:
05:10:43:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:34:45 2025 by rpki-client