Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/5214e82b-d1ec-36d6-b58a-04d845aed9cf.roa
File: 5214e82b-d1ec-36d6-b58a-04d845aed9cf.roa (raw, json)
Hash identifier: jYAKuza4MVUp0Zu1JOu5DKu7Y9UhJuUuB0VvOrKKNDQ=
Subject key identifier: 15:58:E8:B7:65:1B:F9:8C:A5:C6:5E:2E:78:D8:77:28:31:B7:9D:BC
Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
Certificate serial: 010D0C9F432858484C102CB0F29E3B403A1D5180
Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/5214e82b-d1ec-36d6-b58a-04d845aed9cf.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 16509
IP address blocks: 68.71.232.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:2c:b0:f2:9e:3b:40:3a:1d:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=1e58d56d-7208-472b-bde9-aa1ec89b74b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1f:c8:33:e5:6d:23:06:5c:e2:a6:73:53:83:
9f:a4:71:38:fd:12:51:ef:f3:ed:b9:02:33:35:c1:
8a:4d:6b:8c:f3:5a:61:c2:c1:e3:be:31:81:42:ca:
fc:96:fc:a1:8f:86:de:db:6d:c5:e7:9e:d0:e7:cc:
09:57:fa:9f:36:e3:28:35:0a:69:04:6d:8e:a8:aa:
17:bb:44:07:d2:29:98:e4:b3:36:7d:e4:3c:8f:2d:
18:0b:de:3b:75:02:e4:ac:51:4e:37:da:bb:cd:d8:
b8:55:86:83:9b:ee:17:92:52:d7:3e:6a:9b:3c:79:
37:0b:46:93:2e:e9:a1:d3:f0:0f:d8:01:f1:f3:ed:
eb:a5:83:c4:65:45:be:38:19:a8:f3:55:6b:1c:75:
5d:d5:35:8c:f8:29:71:e4:41:71:75:74:2c:ec:d1:
5c:4d:0d:27:25:bb:e7:b5:aa:cc:b0:b6:06:28:d3:
cc:99:a8:6e:03:01:02:61:98:51:39:82:fe:6d:01:
d2:10:b1:29:3f:e9:fd:5d:56:5a:57:e8:8c:68:00:
c7:17:4f:92:5a:bd:6f:8d:6a:40:11:5c:6d:c9:eb:
0f:34:78:f1:fd:ee:08:a6:f6:53:43:d6:db:cd:7d:
ac:7e:bc:2c:7b:3e:71:03:86:7c:5e:09:ab:25:f5:
b3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:58:E8:B7:65:1B:F9:8C:A5:C6:5E:2E:78:D8:77:28:31:B7:9D:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/5214e82b-d1ec-36d6-b58a-04d845aed9cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl
X509v3 Authority Key Identifier:
keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
sbgp-ipAddrBlock: critical
IPv4:
68.71.232.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:ff:fc:28:7a:f9:e1:a9:25:59:da:66:ec:6f:89:59:92:59:
3b:6f:2a:b8:9c:5c:51:a0:af:fa:51:b6:5b:d7:4b:e3:48:2c:
d0:ab:2a:67:ca:2b:14:b2:24:c4:ac:f7:2b:15:36:81:df:d5:
27:39:80:9f:09:40:79:3b:7e:9c:19:66:75:9f:d8:ee:af:72:
8f:54:08:05:d7:dc:76:f5:9a:ff:22:27:51:9e:49:97:0b:a2:
b4:ab:b5:11:2b:a5:0e:cc:1a:e0:8c:c2:37:5e:c5:45:94:2d:
5b:82:29:a5:2d:33:8a:fa:f1:24:13:a7:3f:05:79:2c:22:2b:
45:1c:2d:b0:98:a3:88:18:72:31:81:eb:ac:d4:dd:5a:b2:a6:
f6:f7:01:97:d8:e8:6d:f5:27:c3:34:25:b7:02:40:4d:90:64:
ea:b2:ed:f1:b2:df:7e:7a:c4:df:5f:8b:f2:54:61:5c:ff:63:
fe:65:f0:2b:b1:4c:06:e3:94:21:6e:85:fc:f6:e7:70:d0:b3:
98:eb:b6:de:c3:a2:24:76:d9:ba:5d:08:58:8b:ba:c1:20:f6:
29:47:0d:ea:69:ad:05:96:cc:07:ac:3b:41:6b:bc:8d:b3:af:
77:2f:06:5b:bc:15:9f:7d:8b:94:07:d5:b4:a2:ae:92:c4:d1:
a0:fc:29:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:14 2025 by rpki-client