Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/829ea07d-9dbe-36fd-b4aa-c7b38034f13c.roa
File: 829ea07d-9dbe-36fd-b4aa-c7b38034f13c.roa (raw, json)
Hash identifier: AoUDN7sWC0jRYndeQD6t8HYcGkFBsUywXevYTtVfdig=
Subject key identifier: EE:1A:A8:D8:A3:0F:D7:C1:3A:2F:7F:F8:AD:3A:84:7B:01:F7:95:8D
Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
Certificate serial: 010D0C9F4328584839EACB168B8EAC0C0DFB8940
Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/829ea07d-9dbe-36fd-b4aa-c7b38034f13c.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 14618
IP address blocks: 68.71.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:cb:16:8b:8e:ac:0c:0d:fb:89:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=6022c213-4250-466f-b87a-e5aab0e37866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:29:bb:40:e4:aa:02:8c:38:83:a9:f8:e4:1e:
b0:15:8c:e6:da:bd:90:95:41:ec:19:64:13:7d:9b:
72:48:86:d9:f0:ab:f2:ee:f3:69:19:96:92:d8:6f:
32:e2:aa:32:32:81:4e:8d:b5:95:5e:6b:44:a7:07:
29:95:c1:f9:75:63:13:f2:c3:43:80:aa:10:e7:53:
47:67:72:2d:c0:63:2e:35:a3:57:ef:a3:34:c0:7e:
cf:a9:3c:7a:34:5e:5d:7f:1c:b9:2c:07:70:fb:17:
46:04:9a:82:1b:03:97:a9:bd:81:1a:2d:8e:cb:ad:
45:a2:f9:19:87:50:6f:a8:d5:18:87:d2:8d:85:cf:
09:1f:a5:de:11:38:e3:36:c0:74:83:8a:a8:58:1c:
d6:42:1a:cb:b8:1e:3a:12:22:86:cb:c3:7e:8c:79:
9e:4d:f8:9e:10:4d:17:82:fd:1b:61:0f:87:46:f2:
38:b7:93:e6:ac:e8:72:d2:6a:16:f4:d9:2a:f4:d0:
90:2e:e9:d6:12:88:80:11:93:54:70:2b:30:e2:a7:
4d:b8:27:cc:3d:eb:92:a0:7b:6a:2a:b6:3d:eb:66:
98:ca:1e:5d:6a:30:34:b8:96:dd:9c:83:aa:f4:33:
60:13:f1:da:43:63:32:54:f0:e1:1d:91:80:25:4c:
9c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1A:A8:D8:A3:0F:D7:C1:3A:2F:7F:F8:AD:3A:84:7B:01:F7:95:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/829ea07d-9dbe-36fd-b4aa-c7b38034f13c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl
X509v3 Authority Key Identifier:
keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
sbgp-ipAddrBlock: critical
IPv4:
68.71.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:60:09:8d:30:a5:60:a0:bc:e6:77:31:5e:d3:ea:53:6f:44:
a1:25:0b:6e:fd:a6:d2:c2:56:c3:f8:be:54:35:e8:46:75:6f:
41:41:87:56:d2:e8:b0:ee:a8:8b:07:1c:e2:26:61:5f:45:46:
71:61:7e:e7:35:db:0b:01:e1:42:3b:19:ac:8d:27:54:a9:99:
c7:7f:5d:c7:de:86:c7:9a:ba:ec:50:b6:68:62:69:b4:5e:8f:
57:de:95:98:21:9b:08:10:92:b4:d3:e2:75:6b:16:74:de:34:
55:03:52:5f:e9:e7:85:e9:4e:62:bd:4b:f6:06:c4:6f:fa:67:
a5:42:d2:00:91:35:65:0d:4b:54:f0:16:c1:8b:45:54:7a:7b:
18:ce:b9:c9:4e:e9:7e:ec:e8:2c:da:c3:fb:aa:6e:38:1f:dd:
11:64:ca:70:39:ac:5c:70:ac:8d:24:3b:9a:5d:d0:15:f2:02:
8b:4f:da:1c:63:90:69:9c:5b:b0:35:39:15:a1:07:b9:fa:8b:
9d:cf:84:0a:56:1c:c6:5e:43:c8:05:07:84:ab:b0:e5:58:15:
cb:f9:16:f4:64:e3:f8:a3:89:d0:35:dc:f5:fa:82:af:b1:ec:
37:a1:a0:22:48:cd:5e:fd:a7:c1:79:55:b7:a2:49:38:b9:8b:
97:75:2f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:35:28 2025 by rpki-client