Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4cca9e6f-b651-337a-a853-6ae4a3de1de8.roa
File: 4cca9e6f-b651-337a-a853-6ae4a3de1de8.roa (raw, json)
Hash identifier: 0FLTpEOmBN9zf9PQBjPPKC5rjEFKi7Y4MD7nXXDETuc=
Subject key identifier: DF:75:25:6D:0B:63:D2:AA:66:F6:58:AC:C2:05:B4:1F:FB:78:E1:12
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285848143A6B6C7AE1935DE9BCC580
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4cca9e6f-b651-337a-a853-6ae4a3de1de8.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 22773
IP address blocks: 68.107.236.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:6b:6c:7a:e1:93:5d:e9:bc:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=9f5565d8-0a73-45b8-8a94-6fbe86733c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:73:bf:b6:66:ba:47:bf:2c:b0:d7:69:f8:66:
39:87:70:c2:de:3d:f3:16:3d:32:ec:42:ca:07:0c:
60:2a:59:9e:19:f9:18:ff:b2:e8:f9:68:f6:25:f5:
97:97:5c:ca:5b:7d:a9:41:da:b6:b9:61:4b:c5:f9:
e9:74:a2:68:8f:6e:ca:eb:4b:75:28:ac:a1:b5:21:
49:2c:7f:77:b6:18:b1:d9:cd:e4:6d:8b:f9:67:ee:
70:12:ca:34:8a:08:f6:28:76:74:9b:22:71:52:d8:
79:bf:39:f1:fc:88:aa:03:98:d4:90:b5:43:5e:81:
e5:fe:cb:4b:51:bb:dd:45:95:b1:22:c5:57:d3:42:
2c:03:17:0f:cb:a4:cc:7d:7c:a1:03:b5:b8:29:ab:
f7:f1:80:72:32:9c:58:d6:ff:b5:63:0e:34:e3:54:
6a:51:ed:a1:e8:b3:94:c7:f9:91:db:5f:bf:7b:f3:
9e:c1:1f:8f:5c:f7:65:b5:dd:7d:05:c9:0f:e0:9e:
aa:69:65:6b:81:60:74:63:f2:fe:c7:00:41:0c:1b:
24:1a:ac:3d:13:92:3b:d9:11:26:c4:5d:32:a8:cf:
9f:51:c0:e8:b6:13:70:65:af:75:9c:93:ee:68:26:
e4:4d:44:3b:85:0a:c4:11:e1:d9:8d:5a:b2:7c:b5:
7d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:75:25:6D:0B:63:D2:AA:66:F6:58:AC:C2:05:B4:1F:FB:78:E1:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4cca9e6f-b651-337a-a853-6ae4a3de1de8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.107.236.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:a0:38:a8:c5:3d:c5:8e:f5:9e:19:c2:d4:ff:a2:96:1f:e1:
4d:7e:fb:ab:5e:d2:d0:eb:1d:fd:a5:b5:98:ca:9f:aa:23:05:
9f:10:da:e8:ac:16:20:38:3a:3a:86:32:f8:45:46:36:5e:20:
78:87:90:bf:84:30:47:d9:84:35:40:1b:04:9c:85:dc:39:21:
37:a4:07:4c:16:89:16:4a:54:4f:2e:82:23:26:7f:61:7d:96:
61:11:07:78:52:c1:11:0d:43:5e:71:90:bd:df:d2:b6:ca:0c:
d8:fe:a9:85:30:54:51:28:71:ac:98:e0:46:4b:b5:f6:77:8e:
e3:e5:85:9c:36:9b:3f:bd:0b:a0:f0:e2:bb:a6:e3:f9:c8:d5:
5b:49:f1:19:83:9c:a0:aa:31:69:be:01:af:eb:1c:f8:0e:d4:
2d:20:bd:8f:bc:70:aa:38:a0:66:81:8a:b5:e1:90:60:8e:33:
e9:3f:9d:ea:47:2d:41:22:c0:b1:0c:df:1e:a8:b1:b1:6e:b3:
8c:ee:4f:9d:af:3f:23:5c:c5:89:e8:b6:39:43:4c:c8:31:08:
2b:7f:bb:cd:86:28:d0:9d:23:71:47:78:d8:19:20:6b:36:13:
e6:97:71:72:90:6a:8e:4a:b4:f7:eb:65:6c:9c:ab:5e:ac:d6:
59:4d:73:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:21:24 2025 by rpki-client