Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4de974c0-a88b-3292-9f16-0430edcbd00d.roa
File: 4de974c0-a88b-3292-9f16-0430edcbd00d.roa (raw, json)
Hash identifier: wJLvzhW+dDedmo+tS00QjP5sowRN28W4QzW+vq0bYYQ=
Subject key identifier: F4:FF:8D:59:4B:07:00:24:0F:FB:46:4B:BA:EC:D9:89:FE:3D:84:B8
Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
Certificate serial: 010D0C9F432858484C102C9F1442DD8D1FAB3700
Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4de974c0-a88b-3292-9f16-0430edcbd00d.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 14618
IP address blocks: 68.71.232.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:2c:9f:14:42:dd:8d:1f:ab:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=431e9cfe-a66c-474d-8935-bd32b1bf3f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:74:98:7d:31:29:7d:dc:69:70:56:d1:13:0b:
5e:e5:6a:b8:59:a4:50:66:ea:87:a6:2b:1c:95:80:
2b:8a:43:d0:38:6d:86:c0:93:fc:c1:52:2f:20:ae:
ad:6a:aa:9c:a1:8f:0a:4d:dd:f3:6f:bd:2a:8e:f3:
43:3a:ce:4f:44:84:cc:8e:40:5a:05:12:8b:3d:f2:
1f:8b:91:af:ac:78:ab:81:42:a8:8c:b3:be:10:e7:
84:12:e8:69:00:52:a7:13:c6:77:4c:44:25:2d:22:
78:3e:a8:9c:1f:85:ab:69:e2:40:67:62:8b:d0:b8:
27:bc:f6:9f:00:02:88:98:13:e2:58:b5:3a:25:ca:
7a:17:a8:7f:c8:e2:3a:57:26:79:e4:c9:c5:87:fa:
f1:18:8a:e6:5a:0b:21:98:a2:4e:31:c5:64:64:7d:
de:2b:3f:ad:06:b8:a6:87:ca:5e:ea:e7:a3:aa:05:
26:9b:60:6f:7e:be:31:6d:6d:e7:bb:e4:95:c7:d8:
8e:1c:5c:44:d3:c1:1b:3c:0d:3d:5d:92:28:75:d5:
6a:50:9f:4e:d0:ff:45:18:1a:83:8d:77:1a:14:e9:
e3:ff:9b:90:5e:7c:b5:8c:e0:c0:09:ad:7b:14:dd:
a8:2c:91:89:b7:22:bc:3b:af:d9:db:b4:79:d5:b9:
0c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FF:8D:59:4B:07:00:24:0F:FB:46:4B:BA:EC:D9:89:FE:3D:84:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4de974c0-a88b-3292-9f16-0430edcbd00d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl
X509v3 Authority Key Identifier:
keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
sbgp-ipAddrBlock: critical
IPv4:
68.71.232.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:11:7c:3f:fd:e7:5d:7d:23:90:62:66:b8:13:af:df:b9:ce:
0b:4a:92:3d:74:96:09:a3:bb:01:42:b7:ff:db:4f:9f:56:28:
16:62:77:2f:23:20:b5:31:88:79:e1:8f:fe:d4:3d:35:f3:3d:
6b:be:6d:dd:03:f4:31:09:bd:46:3a:f0:56:37:e0:77:1e:0f:
9d:96:b5:32:35:e4:59:2a:47:5e:1d:c4:7d:fb:73:4d:d1:15:
2d:8f:3f:7f:47:35:38:30:fe:91:f3:68:73:0e:7e:df:74:dc:
2e:e9:62:5b:04:ac:7a:0b:d9:82:19:5a:40:a8:8a:c3:60:55:
3f:10:bc:1b:12:a4:64:0a:72:c0:6a:02:2a:8b:d4:fd:50:dc:
ad:4d:24:39:2f:ba:63:f8:fe:5c:7b:75:7d:4a:2a:39:9b:4b:
d7:2e:f2:dc:15:93:a3:72:46:4d:be:a4:c3:25:0d:59:77:b2:
18:ce:d5:ef:19:06:ee:3d:f5:7f:e6:d5:b8:39:d1:63:1a:9d:
95:be:89:1a:c9:b9:5e:e0:2d:16:97:47:c1:50:ed:c0:d3:35:
74:3e:e0:df:51:08:4b:cb:ad:79:0f:b9:f1:59:36:9b:d0:8a:
de:b2:40:1e:da:ad:a5:8c:5d:e3:11:13:1f:21:56:92:f8:ba:
f3:43:57:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:29 2025 by rpki-client