Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/3e4faa23-8443-3d90-82ac-ccf2625a1375.roa
File: 3e4faa23-8443-3d90-82ac-ccf2625a1375.roa (raw, json)
Hash identifier: tbnXGLoFjC1LUncaVNUpaons+tU9iqZKp93AiiFwjKw=
Subject key identifier: F4:90:56:96:40:64:28:60:D9:4C:05:55:4A:61:31:6E:0B:45:01:CA
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F4328584869606D7406C0799271F46600
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/3e4faa23-8443-3d90-82ac-ccf2625a1375.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 14618
IP address blocks: 67.217.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:6d:74:06:c0:79:92:71:f4:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=556427e7-ecc4-4dd1-86d3-f886e477a97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:63:53:91:8e:e0:b5:7f:8b:44:87:4e:dd:c6:
ee:32:40:43:32:d1:db:a2:c3:f1:9c:aa:42:ef:ca:
2e:ac:c0:54:c2:49:7d:7e:2b:67:3e:1f:11:5a:73:
4d:02:a4:21:65:ce:bb:9a:07:15:b0:c0:40:c7:a1:
1f:3c:a4:72:70:5d:df:fc:84:de:fc:fd:3a:8b:0b:
3f:c0:56:e8:6c:14:ba:88:34:98:0d:21:79:8c:3d:
8f:18:3b:ac:29:9d:41:ce:8a:7b:3b:c9:d2:81:28:
7b:c3:19:ee:72:2f:e3:22:ee:87:61:96:75:d6:b8:
b5:54:5a:16:19:3e:c7:48:93:5b:2e:e9:e2:b7:d4:
9d:82:da:35:09:04:c2:21:f2:51:1b:19:8f:ce:11:
5d:22:fe:da:d4:ca:38:6c:87:fd:3c:30:10:e7:4a:
19:d3:aa:45:e6:a7:b7:87:83:4a:cd:73:fc:2a:0c:
d2:79:56:f0:95:17:42:05:2f:17:bb:39:dd:1c:cb:
88:60:97:f0:64:f7:17:79:c3:ab:4e:c0:ea:ae:56:
0c:cc:71:bc:44:16:a6:7a:85:ee:a4:84:aa:a7:50:
97:67:a0:c8:10:2e:1a:94:79:d5:98:46:33:5c:f1:
89:42:68:26:c9:77:30:13:9c:58:43:a1:e5:91:5e:
68:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:90:56:96:40:64:28:60:D9:4C:05:55:4A:61:31:6E:0B:45:01:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/3e4faa23-8443-3d90-82ac-ccf2625a1375.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
67.217.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
e6:80:6b:cc:a3:21:91:92:06:1e:ba:ef:ef:5d:10:11:df:1e:
bb:ac:7e:34:3d:93:08:ef:24:32:1a:0a:e6:a5:68:8a:7d:61:
47:e5:48:42:20:2b:ea:69:b9:fc:2a:2f:7e:ad:95:1c:e6:eb:
1e:65:2f:fc:c2:2f:f6:d6:27:85:a9:da:87:68:4c:71:35:43:
7b:5d:78:ce:98:d0:4e:f4:90:5b:02:98:ed:3f:8b:b9:b8:26:
b9:3c:1a:12:a3:f5:29:c6:71:82:f6:ac:5d:0c:3a:90:f2:09:
86:0a:41:6d:17:af:be:06:ba:7e:bd:f4:ef:b5:37:b0:98:70:
b2:1a:28:1c:4e:aa:9b:5c:23:76:55:06:7a:a9:7e:5c:d1:19:
bf:8b:c5:bb:cc:bf:1d:c6:a8:68:12:c8:0b:45:67:8f:57:92:
a6:9d:02:10:ab:15:a9:41:15:35:bb:62:36:ad:e5:b8:2f:96:
a9:19:d0:eb:12:43:7b:e8:8f:3f:97:3d:c3:30:64:d6:d6:b0:
ee:5f:75:b3:97:0b:85:82:5f:c9:40:41:4e:d2:25:01:a4:47:
5b:d0:7e:f5:cf:1e:5a:7d:39:c7:ab:19:c2:21:1b:77:b8:7f:
eb:7e:59:72:a8:a2:d1:46:a6:68:7c:78:ef:27:fe:2b:b2:7b:
3e:45:68:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:20 2025 by rpki-client