Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8c03a67f-b0a7-3c8a-9cab-d27202ea0e2b.roa
File: 8c03a67f-b0a7-3c8a-9cab-d27202ea0e2b.roa (raw, json)
Hash identifier: t/SpHUWbc+8se2eCOF2zMorEorR1CtPrfROrz6C4Cls=
Subject key identifier: 05:23:06:B6:99:8C:3E:A3:BB:C5:2D:F1:FA:42:28:66:BB:A8:89:28
Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
Certificate serial: 010D0C9F4328584839EACAF723405F214612AE80
Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8c03a67f-b0a7-3c8a-9cab-d27202ea0e2b.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 21663
IP address blocks: 68.71.224.0/24 maxlen: 24
68.71.225.0/24 maxlen: 24
68.71.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:ca:f7:23:40:5f:21:46:12:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=b365edbf-831c-4d62-8041-ef18eaeec0d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d7:b7:f8:7f:c8:70:6c:7a:8d:0a:11:80:c4:
7a:bd:a6:d1:4f:70:64:d3:4e:94:cb:26:f0:94:e2:
8b:b5:6d:f4:80:59:70:86:53:21:d2:b1:10:56:ae:
fe:34:5c:63:d8:f2:22:9a:aa:b7:99:44:01:21:6a:
3d:98:c9:c1:6a:be:17:4a:a8:ed:8f:fe:cd:b0:b6:
1a:62:43:e3:63:96:f1:5e:4b:a6:98:f8:3b:43:f4:
d3:85:65:20:39:25:88:65:37:0a:ca:f6:0e:2d:42:
43:eb:f8:eb:53:32:78:0a:ac:ee:c5:88:d9:90:71:
5f:88:10:f5:d5:bf:0b:4c:0f:f4:06:d9:90:99:d8:
52:70:9b:66:cc:89:64:0b:59:46:66:de:0d:8e:64:
8a:dd:dc:10:cc:ac:04:2f:9d:f4:89:97:39:a0:a8:
68:1f:20:1e:99:07:47:83:69:cf:cf:e2:21:c3:db:
a5:9f:3c:23:5c:5f:ff:25:91:13:15:5e:07:ae:52:
28:7e:6e:43:f3:ad:7b:df:b5:ab:fd:25:50:1d:09:
86:d9:cb:7a:de:f6:39:4f:b5:fd:ee:c7:22:ca:c6:
51:6f:e3:30:e6:29:af:68:f4:a0:48:47:92:4e:01:
8a:db:c9:67:f2:34:4e:3f:fb:ea:a6:75:8a:f6:a7:
d7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:23:06:B6:99:8C:3E:A3:BB:C5:2D:F1:FA:42:28:66:BB:A8:89:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8c03a67f-b0a7-3c8a-9cab-d27202ea0e2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl
X509v3 Authority Key Identifier:
keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
sbgp-ipAddrBlock: critical
IPv4:
68.71.224.0-68.71.226.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:6a:c8:fc:c6:bd:cb:c8:d2:27:6e:04:31:d2:51:26:39:d7:
5e:21:1a:fe:8f:ce:3d:8c:74:01:55:c3:d4:cd:36:62:0f:72:
2a:cc:ef:24:c7:85:e6:e6:26:df:91:6b:d2:01:71:8e:76:fb:
a2:39:d6:cc:1a:4a:e7:6c:7b:5c:2f:3e:4e:67:8f:58:d4:29:
e5:41:17:d8:16:48:a2:cd:bb:81:f6:e6:f4:be:3c:3b:33:24:
57:3e:49:74:58:1a:8c:08:a0:46:f2:f6:4a:4d:b4:c6:d9:10:
80:b8:e0:3d:17:72:98:2b:6f:04:38:81:f2:00:bf:b0:2b:5b:
a4:eb:69:c3:bc:6a:f5:24:3c:10:80:cc:60:87:2e:54:46:10:
73:6b:6f:c9:09:1e:7c:38:f3:80:e6:28:9e:54:8b:21:a8:f9:
48:34:8c:30:c8:6c:c2:33:f3:df:65:a8:a1:31:06:13:39:ac:
ee:b2:58:f8:dc:27:c8:e8:fc:4b:36:27:07:c1:b0:3c:72:d2:
57:4d:dc:45:a6:93:47:8c:d6:5c:3f:d7:36:fd:df:19:b1:f2:
aa:4b:0e:f2:ff:3f:b5:38:f8:4c:fc:ca:8f:03:17:b4:eb:6c:
86:9d:7f:02:7f:2b:70:94:ea:8a:e0:2c:81:3f:62:8c:46:4b:
b4:09:3e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:27:43 2025 by rpki-client