Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/1e51682c-b9d8-3bf4-ad93-42f10f661e4f.roa
File: 1e51682c-b9d8-3bf4-ad93-42f10f661e4f.roa (raw, json)
Hash identifier: YA0y6W9JnEa84HSWZmEdaWsJsEjiN8etnADmiiNdas8=
Subject key identifier: 94:FB:98:A7:FB:0F:A3:3B:05:87:91:F3:55:52:A3:BF:AC:11:2B:78
Certificate issuer: /CN=945a7f76-bce3-4d85-a81e-c84df8d5197a
Certificate serial: 010D0C9F432858486D904C7147DA174631EC9580
Authority key identifier: C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/1e51682c-b9d8-3bf4-ad93-42f10f661e4f.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 21803
IP address blocks: 67.223.160.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:4c:71:47:da:17:46:31:ec:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945a7f76-bce3-4d85-a81e-c84df8d5197a
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=c6d63766-860d-4939-a795-55f6e40652e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:98:ab:97:89:ef:7c:26:66:83:46:5e:6a:3f:
b7:61:60:f9:9e:92:6c:e6:e1:bc:88:cd:66:8a:7c:
93:54:5e:10:2b:81:c4:af:e4:e7:5f:9c:e6:15:e0:
10:bf:59:a4:f7:3c:49:e8:8f:a9:0d:06:1f:23:63:
6f:f9:b3:61:6d:a3:89:e9:97:b8:51:33:f3:c1:7f:
bf:ac:3b:d2:e9:36:cf:98:13:c7:20:48:dd:7f:5e:
15:6d:c6:b8:c6:99:35:ee:11:30:39:18:4d:92:91:
40:81:4f:8e:c5:39:d8:51:75:34:70:db:97:07:22:
86:d4:22:91:c0:da:34:af:6f:28:54:50:ef:47:f6:
b1:3c:0a:0f:e7:68:da:b1:ec:51:69:a1:72:cb:c6:
7a:e2:ff:f7:6a:3d:de:5b:4e:46:f8:50:8e:cd:eb:
e1:25:f3:72:f5:7a:48:7b:81:28:af:f1:3f:e4:2e:
10:48:8e:05:e6:5d:8c:97:c3:c8:b1:b9:93:68:3f:
93:93:eb:49:eb:30:e7:08:e2:70:62:0c:bc:e2:2f:
84:c9:7f:18:61:22:3c:39:d7:1d:7e:5b:46:8d:e9:
45:74:b2:94:4f:15:7a:2d:21:85:46:78:17:d7:f9:
e7:7b:33:e0:80:e9:9e:dc:08:2a:fb:09:0a:46:d6:
f7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FB:98:A7:FB:0F:A3:3B:05:87:91:F3:55:52:A3:BF:AC:11:2B:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/1e51682c-b9d8-3bf4-ad93-42f10f661e4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl
X509v3 Authority Key Identifier:
keyid:C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer
sbgp-ipAddrBlock: critical
IPv4:
67.223.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:f5:da:03:fd:6a:06:e7:d5:02:fa:2d:2d:e9:db:73:27:6f:
98:7a:c2:48:20:1f:81:27:d3:5c:29:eb:ff:63:12:e9:b7:08:
58:c9:3b:4b:d7:a5:45:66:77:6e:c2:aa:d9:11:87:67:16:38:
f3:f8:ca:0c:0f:1b:94:25:c1:c1:a2:b2:76:85:2c:7e:e4:4b:
ec:2a:36:85:d7:99:29:76:ed:9b:69:0a:b8:39:5e:61:c9:f9:
8d:58:70:ea:d0:68:82:da:ef:1f:52:a4:36:b6:9d:c5:72:10:
99:86:e4:62:59:5d:5b:b6:42:57:30:92:8d:e4:9a:f4:b3:25:
5a:f1:be:ae:b7:75:09:25:8f:82:1a:c7:ed:3a:ec:7b:8c:33:
d3:ce:2f:4f:bd:8c:ca:9e:7a:9e:71:94:89:e3:7d:01:e6:e2:
a6:61:16:a3:6d:51:71:06:c0:32:58:dd:67:a8:4d:80:04:c3:
78:61:5d:85:b3:0e:62:54:29:fd:1e:05:63:74:6f:ca:d7:60:
b3:cb:6a:bc:f2:81:df:f2:fa:cb:ee:3d:e4:37:f1:6d:df:64:
bb:23:45:b9:f1:ca:17:6f:0b:48:37:3e:ec:4f:b3:13:c7:52:
1e:7d:43:1d:ad:6e:f2:ca:d9:c1:2c:47:91:ba:51:f8:c6:55:
ab:13:36:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:42:42 2025 by rpki-client