Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1df4824f-cad9-3e2d-885e-82b97814e305.roa
File: 1df4824f-cad9-3e2d-885e-82b97814e305.roa (raw, json)
Hash identifier: YqIBRxBAhkQbxuDBlC/9Fvly6E4XuFuT5qUQeBG0JxM=
Subject key identifier: 2D:BF:85:C9:FF:11:E8:20:B9:C2:48:2F:1D:14:F4:B6:A4:91:7E:0C
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F432858487755D7A8594E427EA001D4C0
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1df4824f-cad9-3e2d-885e-82b97814e305.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 22781
IP address blocks: 68.68.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:d7:a8:59:4e:42:7e:a0:01:d4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=4e510b38-b929-48ea-a677-101e291b8c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9e:fc:d3:03:10:f7:e4:31:e5:dc:ef:06:7c:
26:49:74:02:f9:11:7b:0a:89:ac:62:2e:a7:88:12:
7d:1e:d5:ad:b6:74:02:80:f9:60:0b:43:12:b3:1a:
c3:c4:92:67:ef:2a:70:9f:2b:ac:29:4c:30:3e:16:
e1:78:28:11:65:6b:56:88:02:fb:10:fb:cf:be:40:
52:35:7c:c5:79:82:a2:02:ee:8e:20:9d:45:a9:2c:
b0:f3:52:0c:cc:b3:34:98:91:5a:b6:d5:79:45:92:
03:f6:66:6d:4b:0c:ee:88:8c:84:a5:9a:a0:f1:dc:
25:c3:70:ee:c6:6e:8f:78:a9:cd:e0:c5:b5:b5:48:
5b:f6:cb:01:72:aa:b1:07:be:1f:eb:e8:34:c6:4a:
6d:7f:30:1d:29:1d:af:fd:59:89:0a:1b:19:c8:ce:
02:df:9b:26:91:7b:eb:d0:c3:d9:35:5a:d3:32:ff:
6c:57:e7:aa:01:86:cd:8a:21:d3:e5:bd:8c:6e:d1:
ee:fc:f1:97:b8:8c:1c:50:72:da:a6:56:98:36:3c:
9f:1f:47:a2:8f:47:ac:2f:ce:a2:45:95:01:0e:48:
92:41:95:93:fc:92:65:c9:1d:30:62:34:55:3d:bf:
fa:13:3b:43:0d:dd:2f:51:36:2b:66:5d:c0:1f:e9:
34:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BF:85:C9:FF:11:E8:20:B9:C2:48:2F:1D:14:F4:B6:A4:91:7E:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1df4824f-cad9-3e2d-885e-82b97814e305.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv4:
68.68.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:a2:d1:0f:92:5c:6a:b9:56:a2:07:7d:65:33:f4:1c:7b:fd:
4d:47:e2:27:0f:92:a5:09:a5:ac:58:eb:36:f0:7d:78:8c:34:
f2:40:99:79:f8:69:06:15:e9:9f:31:a6:17:26:bc:a0:43:4e:
94:e0:90:02:63:88:3f:58:5e:ab:99:68:57:23:26:12:21:90:
c0:2b:45:10:bb:87:73:82:11:1d:f0:b4:13:66:c0:88:f0:15:
bc:d9:47:ec:ad:a0:02:f7:f1:39:91:ee:35:de:c0:b9:dc:81:
08:15:e0:7e:42:a0:df:78:a5:37:10:1e:1f:d3:ec:74:ab:2a:
20:27:ce:f8:5b:31:12:bb:9d:66:95:dc:20:0f:52:1c:0b:5a:
f9:52:d1:6c:d9:47:eb:d3:36:54:68:c3:93:c0:a9:c2:86:58:
18:01:e5:b0:e4:40:22:e4:e8:d4:92:e2:46:0e:56:37:07:89:
cf:1c:3b:f7:34:11:2b:88:80:58:e1:48:46:74:48:32:2d:98:
9d:f5:d0:27:f2:e2:a1:6f:e1:4b:2f:64:d4:f5:ef:bb:1b:c7:
fd:4b:78:6b:07:47:f8:f7:10:f0:61:84:46:f2:ac:8f:f2:65:
b3:94:2c:e8:65:8a:9b:b0:bd:48:94:1e:30:19:fc:52:79:49:
b7:dc:37:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:20:10 2025 by rpki-client