Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/28914dd1-0593-3a05-8bae-dc7ef054b587.roa
File: 28914dd1-0593-3a05-8bae-dc7ef054b587.roa (raw, json)
Hash identifier: kBz9eqyH1bxpqRJ6jvvQBH/zJhgZ3bc08y4kN6Kz2WU=
Subject key identifier: CD:A2:86:D3:5C:EF:67:D7:C3:CA:BD:CB:B3:13:7C:0B:93:03:61:65
Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial: 010D0C9F43285848424AE19F2F9E9CD48A8EDF80
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/28914dd1-0593-3a05-8bae-dc7ef054b587.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 26744
IP address blocks: 68.170.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4a:e1:9f:2f:9e:9c:d4:8a:8e:df:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=ea69313c-29c7-4373-b3f6-be8eae5bc5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d5:55:f1:51:0f:14:d6:6c:81:c7:9f:33:de:
cd:99:54:85:a5:70:a0:a8:03:77:a9:88:04:2a:94:
4f:a4:bd:fd:67:84:e5:d5:6a:db:28:f1:5f:a8:99:
59:4f:fa:96:92:f8:83:c6:33:9c:c8:b3:04:42:8f:
63:34:35:c3:d7:7e:ee:43:37:d0:d8:e2:16:0b:12:
ba:6d:7f:90:a0:c0:b8:26:28:e5:28:ec:be:60:9d:
02:52:c3:16:51:26:c0:4f:29:65:fe:26:5d:d0:3b:
b2:d1:da:cc:1c:60:70:bd:52:54:61:ce:70:e1:1a:
91:a3:16:e2:11:f5:61:0d:c3:34:b4:b1:55:a9:05:
aa:a9:7f:bc:56:fc:e5:f6:91:6b:c9:bf:4c:e1:ab:
33:f0:88:23:3d:75:09:08:d1:76:3e:fb:09:18:07:
11:40:86:d8:79:68:e1:11:bb:c7:05:f3:75:f7:9e:
f8:1f:e1:35:74:67:38:63:90:a6:0b:eb:90:99:b4:
0a:41:06:c3:b0:3b:6e:22:26:90:5f:75:a5:02:75:
dd:82:2c:64:ea:c5:8f:88:e3:86:60:ed:ce:4f:85:
a4:94:a4:93:08:c2:d8:47:43:a8:cd:55:4a:a7:44:
cd:2b:f8:9c:20:d6:af:16:43:af:bb:41:75:f5:08:
78:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A2:86:D3:5C:EF:67:D7:C3:CA:BD:CB:B3:13:7C:0B:93:03:61:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/28914dd1-0593-3a05-8bae-dc7ef054b587.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
X509v3 Authority Key Identifier:
keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
sbgp-ipAddrBlock: critical
IPv4:
68.170.254.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:d9:8c:87:a7:ef:1c:2b:3d:c6:08:bd:39:df:ac:81:a7:2e:
96:ce:ea:9f:79:44:ea:96:d9:55:44:6a:12:af:fd:2c:c2:d8:
76:b9:90:9d:e8:fd:d5:73:5c:07:48:fe:cf:d5:e9:6d:20:75:
00:9f:a7:d8:1a:07:2c:35:ec:22:0c:ae:c9:24:51:59:0e:d7:
64:30:5b:00:1b:84:c0:81:1f:0b:5e:12:ed:48:a8:86:90:e0:
78:71:ca:f9:80:24:9f:5a:10:6a:20:36:a1:23:55:a0:01:83:
89:b2:3e:c2:b8:5f:7c:8b:87:dd:85:97:53:96:d7:86:9f:0c:
80:e4:80:0c:f1:28:75:e5:4d:b3:5c:2f:6a:ab:b5:af:bf:69:
6a:a4:8c:20:69:39:1f:32:ca:51:92:1b:60:5c:fe:e8:d2:21:
ce:91:4c:18:ea:c4:0b:f2:94:c3:8d:f7:c7:46:91:bf:b3:d8:
7f:f8:13:1d:cd:70:75:df:85:e5:12:b8:0f:8d:8d:8c:32:95:
a5:c6:8f:87:0d:7c:44:24:f4:0b:87:05:46:7d:35:aa:8e:c4:
fc:9c:7b:e1:b3:24:11:11:18:56:8d:65:94:4c:e6:d6:f8:dd:
dd:08:fe:3c:46:6b:df:f2:6d:3d:26:75:9c:b2:60:0c:a5:db:
27:fb:4c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:54:37 2025 by rpki-client