Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/f4b3055f-e01b-3212-af78-b1a9c2a1fc98.roa
File: f4b3055f-e01b-3212-af78-b1a9c2a1fc98.roa (raw, json)
Hash identifier: 8XkCbfF+RD74ON4FmMgtZhVRX1TZ0yoBUepb2CsWbHE=
Subject key identifier: D5:B5:81:CD:1B:A1:AB:9F:06:B3:59:49:9C:D7:F5:0A:59:7B:DF:0B
Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
Certificate serial: 010D0C9F432858484C102CC1366C2A60691A6380
Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/f4b3055f-e01b-3212-af78-b1a9c2a1fc98.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 14618
IP address blocks: 68.71.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:2c:c1:36:6c:2a:60:69:1a:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=836416c4-8cd6-47c9-ba6e-d434244fb867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:42:45:1b:40:de:99:7a:32:72:91:0a:44:7e:
6b:b6:00:20:e6:99:e5:48:31:c9:cc:18:0b:f6:b9:
86:f8:69:2a:ea:2f:27:11:67:21:d8:6f:d0:e2:89:
bb:e7:2a:99:e9:28:6c:83:14:28:e2:a0:64:f9:a8:
7a:62:1f:5b:09:1e:79:09:d9:ce:29:c5:03:22:f5:
9f:48:4d:ff:d1:7f:df:e8:b0:a4:e5:76:20:e0:39:
dd:20:ae:9a:d8:26:01:af:b0:f7:12:88:fd:7e:84:
be:66:45:cd:27:92:81:a9:94:0e:de:e1:65:68:55:
b5:0f:d4:52:01:e8:19:2d:39:9f:23:6f:34:98:7b:
dd:f2:c2:e1:19:ab:fa:8d:7c:ea:a5:91:af:0a:96:
9a:63:d3:37:f5:4b:00:fa:b6:bd:6e:a3:d9:75:5c:
79:85:e9:40:c3:e1:22:9a:85:0e:79:b0:40:2e:81:
4e:a6:3a:e1:3b:ae:2c:51:b2:6c:8b:a0:12:21:00:
2e:64:1b:02:e3:f0:9f:d2:ca:1f:7d:52:08:67:4d:
37:80:f0:de:15:64:fe:a0:c1:18:cd:9f:53:45:2f:
97:47:00:d0:0b:a8:db:71:be:12:ea:75:e8:6d:e9:
50:5d:7b:79:67:0f:78:bd:f0:bc:24:b0:6c:b0:bb:
a1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B5:81:CD:1B:A1:AB:9F:06:B3:59:49:9C:D7:F5:0A:59:7B:DF:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/f4b3055f-e01b-3212-af78-b1a9c2a1fc98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl
X509v3 Authority Key Identifier:
keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
sbgp-ipAddrBlock: critical
IPv4:
68.71.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:87:59:43:b5:1e:cd:9d:0c:68:5c:cb:6e:98:81:0c:5e:65:
a2:45:b1:44:a0:c9:79:df:f0:21:a9:5a:d0:96:8c:c8:56:33:
a4:a3:fc:9c:66:af:2d:c6:8a:d2:db:1b:a8:19:e9:28:63:fa:
d5:15:1d:1f:a8:c2:72:5d:eb:d9:4e:23:41:9a:a2:c6:28:6a:
62:60:60:2d:72:91:82:57:b1:45:27:02:36:2a:15:3e:ce:e0:
4b:8f:13:db:d0:ec:42:f6:79:0d:71:e8:bc:27:df:0d:e1:47:
85:19:4b:6e:2d:0f:be:49:ce:49:84:d2:5f:7f:31:2b:fd:c5:
4c:5f:b0:8b:2b:0e:6a:2a:11:79:37:ec:bb:05:0e:d7:a6:3e:
3d:a9:50:20:92:e7:42:ce:74:67:5f:ed:3b:9a:ae:d6:95:00:
e2:23:3a:fa:5d:46:21:ef:de:17:1c:02:4b:3f:b8:9f:d5:68:
1b:3f:ac:73:62:dd:b3:8d:14:96:a3:29:b7:07:1f:e4:43:8e:
7f:8d:11:61:37:1e:38:cb:fd:8c:ba:29:3d:ff:ab:e5:81:e1:
e1:45:e7:23:7c:44:d5:59:b8:73:03:e1:94:d1:9d:d4:08:d4:
a8:ce:09:da:13:ea:3f:9b:0b:ef:5b:74:87:13:57:89:13:88:
f5:a5:48:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:35:37 2025 by rpki-client