Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/68297118-8e1b-3493-8b7f-527471d8a180.roa
File: 68297118-8e1b-3493-8b7f-527471d8a180.roa (raw, json)
Hash identifier: 46rcxAhVvSNQbJqOUjqyIUX8hMowftgul1jmcYKCm7A=
Subject key identifier: 45:26:BF:0E:76:58:A8:F1:B6:9A:7B:FF:E1:80:69:C5:3C:46:2D:FA
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F432858486D9055F716C0F20C362D7690
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/68297118-8e1b-3493-8b7f-527471d8a180.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 30058
IP address blocks: 67.159.24.0/23 maxlen: 23
67.159.28.0/24 maxlen: 24
67.159.29.0/24 maxlen: 24
2001:49f0:d11a::/48 maxlen: 48
2001:49f0:d124::/48 maxlen: 48
2001:49f0:d125::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:55:f7:16:c0:f2:0c:36:2d:76:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=b5a8b2cb-8194-44e5-a10f-7a2706d1b338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:43:5c:e9:ec:d4:d2:0d:86:b7:7c:7d:c8:dc:
f5:2c:2a:e0:09:de:c8:8f:10:25:3e:13:a5:94:fa:
ab:3d:31:11:69:a0:fa:2b:8b:e2:5c:0b:3b:0b:58:
09:a6:41:ff:c8:56:1b:6e:2f:9f:ce:8e:0a:af:51:
1d:e9:8c:c7:38:c1:77:bc:de:c8:12:d0:e4:5b:dd:
6a:54:a2:5b:66:71:37:93:1c:ee:d3:4c:22:d1:ef:
f0:2c:b2:51:72:ab:9a:1d:8e:a8:ba:eb:9b:dd:7a:
37:81:8e:85:9c:be:16:23:34:7a:51:ec:a8:30:06:
2a:94:b2:01:30:c9:fc:f2:57:bf:37:5f:33:a0:be:
47:68:e1:ab:09:bc:a5:59:5e:7d:62:b0:c4:60:93:
20:b3:20:f4:8d:32:15:37:b7:23:55:e9:6d:6b:da:
41:60:b6:ea:87:21:6c:c7:84:f2:8c:c0:c4:70:f9:
26:27:d6:4f:31:1c:5b:1f:23:4d:0f:63:a7:aa:2a:
8b:e8:3c:92:51:0a:c4:3b:d4:29:21:0b:ad:60:b8:
67:28:a8:68:12:93:7c:34:0d:0b:2a:bb:55:60:48:
d6:8a:b7:af:bb:5f:80:a7:20:c9:66:35:9b:35:3c:
96:36:d9:0f:6b:9f:16:07:fe:13:33:00:91:b6:a8:
f0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:26:BF:0E:76:58:A8:F1:B6:9A:7B:FF:E1:80:69:C5:3C:46:2D:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/68297118-8e1b-3493-8b7f-527471d8a180.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
67.159.24.0/23
67.159.28.0/23
IPv6:
2001:49f0:d11a::/48
2001:49f0:d124::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:9c:7c:e4:09:80:6a:90:f9:51:ad:17:fd:e1:1f:db:17:07:
8c:5b:18:bb:50:ed:9a:95:16:47:dd:8f:68:a1:7e:76:4f:bf:
04:74:a4:ba:f7:ba:ce:65:04:67:f7:c8:f9:e4:ea:a1:56:fd:
13:5f:9e:50:c9:e0:b4:7c:d4:94:22:2e:23:ed:ff:42:53:f2:
93:a3:bd:85:d8:2b:34:5b:44:f6:81:78:1a:c7:df:ef:cd:89:
3c:7a:99:c3:f7:b0:a0:c5:7e:75:af:5f:e6:c3:9f:20:b1:3f:
e7:be:6a:f4:db:9d:ff:a0:95:87:a6:5f:c9:b0:02:e4:ea:4d:
09:5c:1a:56:32:b4:ea:7e:b0:2e:f4:a1:19:b4:2d:8a:36:a5:
19:be:00:c5:2a:a1:b6:93:f8:ab:4d:ac:ec:90:1b:86:48:85:
d3:bc:68:28:17:e9:eb:d9:29:31:de:76:8a:a9:c0:01:2b:64:
1a:85:ad:f6:45:b4:1e:6c:97:86:ba:92:fd:7b:1d:f0:98:f7:
f6:8f:79:d4:cb:32:50:d3:d9:f7:be:55:5a:be:3c:a6:d1:8c:
4e:2b:bd:49:f9:27:8e:d2:99:be:61:fc:13:5e:b7:bf:2b:38:
40:8c:e0:f9:7c:47:b7:53:3c:49:85:65:dd:a9:99:50:ee:98:
d2:7b:c9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:42:38 2025 by rpki-client