Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/7acb58bc-b9ac-3d38-b68d-661cd6f2bc81.roa
File: 7acb58bc-b9ac-3d38-b68d-661cd6f2bc81.roa (raw, json)
Hash identifier: kjiQ+GRzroUhRoW/naqhN/pVuYFHb8XGA/sB4f0v5rk=
Subject key identifier: D1:E6:CF:C0:E5:D7:81:0C:1F:92:FB:59:5B:C7:4F:1B:62:66:E3:AE
Certificate issuer: /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial: 010D0C9F432858484EDACC0B641561EE7FCDB7D0
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/7acb58bc-b9ac-3d38-b68d-661cd6f2bc81.roa
Signing time: Tue 24 Dec 2024 02:00:38 +0000
ROA not before: Tue 24 Dec 2024 02:00:38 +0000
ROA not after: Mon 24 Mar 2025 01:00:38 +0000
asID: 25804
IP address blocks: 68.142.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4e:da:cc:0b:64:15:61:ee:7f:cd:b7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Validity
Not Before: Dec 24 02:00:38 2024 GMT
Not After : Mar 24 01:00:38 2025 GMT
Subject: CN=3e5a7a89-e4d1-4235-b871-20ae99702d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:84:7f:8e:2a:cb:6c:a8:d7:5c:bb:6a:0b:fa:
fd:cf:07:c4:01:f3:27:f5:2a:ef:f2:62:8c:62:b6:
61:e5:d0:53:b2:95:b4:83:11:02:98:42:a6:b4:72:
27:20:c0:35:b1:ce:6e:b6:0b:3c:ae:94:ff:2b:da:
75:72:ed:68:d0:c7:df:3d:44:23:42:5b:72:cb:09:
12:73:a7:79:74:b6:64:5f:a1:5e:1c:00:10:ea:fb:
20:92:fa:2d:42:25:c2:62:fa:95:be:9f:16:f7:75:
22:dc:77:c2:56:6c:8e:a6:67:32:3b:90:dc:d2:26:
89:a0:7d:a4:96:10:54:03:5f:2d:9a:84:aa:72:5d:
f6:f9:ee:9d:34:4f:7c:85:33:5d:73:01:b5:70:21:
01:8b:90:40:68:b8:9a:47:b9:7f:b3:a6:d1:bf:9a:
4d:98:1f:86:04:ee:ee:eb:bc:43:14:ba:c9:31:5b:
c5:48:e5:45:2b:d9:e0:e0:05:93:f9:b1:7a:b1:09:
8f:85:d3:ef:a1:51:9b:58:68:86:de:21:eb:07:8e:
2e:63:cd:50:46:cd:75:6c:c2:2d:93:e7:1c:aa:c2:
56:de:9d:28:b9:c9:bd:2c:b2:59:63:8c:27:bc:c8:
3c:86:9f:3b:99:23:ba:d6:24:22:a5:31:8a:79:4b:
57:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E6:CF:C0:E5:D7:81:0C:1F:92:FB:59:5B:C7:4F:1B:62:66:E3:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/7acb58bc-b9ac-3d38-b68d-661cd6f2bc81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
X509v3 Authority Key Identifier:
keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
sbgp-ipAddrBlock: critical
IPv4:
68.142.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:b7:d4:c3:92:c3:09:c6:1a:7d:e3:39:30:9f:91:a6:54:cd:
24:3e:8a:31:f8:a5:36:08:1e:77:e8:b4:9a:d8:d2:db:f5:92:
e0:42:9c:aa:da:62:ab:c0:ad:43:8c:e6:fd:51:4b:f9:56:22:
24:eb:86:ba:d6:3e:5d:ee:d7:0a:1f:99:ee:ab:a3:2e:76:ec:
5f:b6:ca:11:58:51:60:01:5a:aa:b3:30:66:3d:b7:94:31:48:
3a:04:6e:d5:9e:be:a3:b4:38:66:e0:62:d5:dc:ee:84:2f:95:
e6:94:9e:01:10:8c:e3:4e:ac:19:5c:26:a3:e0:8b:4a:86:7c:
ec:c7:fd:84:3a:d4:01:7e:ab:eb:b3:e3:71:86:8d:2d:97:e4:
9c:3d:27:cd:98:4f:a1:f8:4e:cb:86:d3:95:db:fb:97:ec:35:
36:27:bd:4d:11:9e:ce:c7:8b:33:aa:77:a1:67:e4:3b:4b:46:
89:1f:e1:f8:af:f5:bf:bf:22:2a:84:03:6a:0a:b5:f9:9f:3d:
ee:b7:df:94:11:f9:db:35:b8:dd:dd:90:fc:6b:1e:ce:07:12:
4d:bb:31:01:15:d6:7f:75:cf:75:fa:dc:50:ed:f2:0e:3f:24:
f8:38:d5:29:40:d2:4b:41:25:6a:f1:a2:45:70:2e:a5:9b:0c:
ff:af:a9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:22:49 2025 by rpki-client