Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/af6da1df-6310-375d-ba7f-a2f60512f77a.roa
File: af6da1df-6310-375d-ba7f-a2f60512f77a.roa (raw, json)
Hash identifier: OqbF+TI9yOWQNL08hQtApPI4I7BTloW7cvVzCUVPeYU=
Subject key identifier: 70:21:C5:18:7C:AD:2E:13:7D:F1:86:67:FD:59:60:7D:22:91:4F:C4
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F432858487FB5D5905ED1E5A852D4EDC0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/af6da1df-6310-375d-ba7f-a2f60512f77a.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 31898
IP address blocks: 67.217.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:d5:90:5e:d1:e5:a8:52:d4:ed:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=87c5bfda-f7bb-4844-9cc7-4083f5db43fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:28:bb:3c:e6:d6:f0:79:20:4f:8e:b9:29:ad:
12:a3:84:c9:98:b6:73:b3:b3:b3:c9:ba:08:df:72:
04:41:20:19:f1:db:99:01:09:2f:89:72:ee:2b:e1:
06:4c:af:c1:b7:a3:1b:53:49:47:64:c7:b9:cc:c1:
5e:ab:eb:8a:fb:49:f5:88:4d:d4:29:da:55:47:17:
ac:f8:1b:8d:1e:46:31:b4:d2:1b:7d:b4:24:38:ad:
46:c4:b4:a1:52:cc:8a:f3:31:ad:3f:67:78:8c:c1:
67:a9:bc:73:cc:bb:f4:69:78:f4:be:93:24:d3:87:
07:82:50:df:46:71:f5:4b:2a:04:f4:c1:e7:d9:c1:
7c:0f:07:84:60:b2:e7:75:77:5b:3b:fd:94:c1:ef:
44:60:5f:30:39:eb:4a:70:d7:28:94:3d:c2:5d:38:
00:b2:9d:0c:91:20:d5:af:88:08:c0:36:54:89:7d:
ea:8f:3e:e1:b1:27:04:d6:cf:ab:ea:c0:16:d3:12:
1d:00:ca:62:bb:4f:b5:9b:60:c7:85:7d:9e:ae:07:
7d:f4:44:44:84:50:ec:79:a0:86:8b:9a:e6:0c:d5:
2a:e5:9d:a0:15:00:28:82:c3:29:ac:14:2e:4b:ec:
c2:f3:55:b9:59:f5:fd:02:43:f6:a4:71:3f:c9:1b:
f3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:21:C5:18:7C:AD:2E:13:7D:F1:86:67:FD:59:60:7D:22:91:4F:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/af6da1df-6310-375d-ba7f-a2f60512f77a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
67.217.93.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:a8:75:88:e1:7a:3c:59:72:0d:29:5c:4b:e6:9a:4e:c2:c0:
a4:66:27:64:4f:c6:53:f8:3a:27:22:fc:44:f3:ab:75:cf:cf:
09:8e:f3:4f:52:57:3d:a6:f1:1b:30:a2:18:03:48:ae:d3:e5:
a2:17:9e:de:a3:e3:9e:ee:8b:97:63:b3:00:1f:0e:2b:cf:48:
3b:11:11:dd:1b:bc:4a:64:43:bb:4a:fa:c3:e0:b2:ba:b7:da:
a3:d8:22:95:0a:b3:9a:98:88:59:db:27:b1:c0:c3:bf:91:18:
47:9a:8f:7d:28:00:dd:43:88:1d:42:7e:60:af:70:43:21:c3:
fa:11:11:fa:80:88:57:76:ea:03:26:fc:c1:26:85:a3:b3:00:
4c:5f:05:0b:2b:79:3b:dc:76:5e:73:07:6d:9a:10:ba:40:e0:
f1:2b:93:41:17:5b:ef:62:6c:f1:b7:21:df:6f:00:d6:41:36:
e1:dc:37:16:3a:0f:59:dd:ea:8f:06:42:37:10:62:9b:13:b1:
40:59:03:73:6c:40:be:50:86:a6:1f:5a:ab:2b:cd:99:74:16:
e2:28:0e:c9:ce:af:f7:86:72:1b:b2:c6:e8:c6:c0:66:ca:e2:
30:71:40:ca:c2:89:1a:7a:4b:2c:59:c3:f8:e7:3d:22:75:e3:
27:11:3a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:37:34 2025 by rpki-client