Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/b0219dec-4d15-370a-af72-f5dd0679b13a.roa
File: b0219dec-4d15-370a-af72-f5dd0679b13a.roa (raw, json)
Hash identifier: Ln+FTokfhy+4xFwStaFEDXjZULfT/yOYE21jVIeo3s8=
Subject key identifier: AB:91:47:C6:A9:D4:92:D0:2A:63:BD:28:90:42:CF:DE:E9:1E:98:A7
Certificate issuer: /CN=de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7
Certificate serial: 010D0C9F4328584851A57B0FC7DB6D0EEA705080
Authority key identifier: B0:5C:9D:61:87:E0:4C:3D:C2:68:B3:7C:B8:CE:51:99:8C:88:A8:33
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/b0219dec-4d15-370a-af72-f5dd0679b13a.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 20388
IP address blocks: 68.70.123.0/24 maxlen: 24
148.59.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:7b:0f:c7:db:6d:0e:ea:70:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=7a84f88e-500c-4537-bb66-0415efb42b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6a:94:2a:33:ef:a8:74:c6:3f:c5:24:3f:6a:
37:d4:5e:a9:ef:1f:cf:c2:4d:9d:27:ad:82:72:8f:
2d:6c:9a:d5:ff:1f:50:4a:a7:f9:ef:c6:05:8e:0e:
d5:bc:0f:8b:bd:91:ef:bd:3a:76:f3:40:a6:30:38:
16:1f:3f:d4:71:c5:7d:9f:4f:7d:9a:75:06:00:01:
75:0e:6e:82:cd:e1:77:0c:bd:55:7a:91:1c:58:16:
1a:95:91:1d:d4:48:b3:d8:8a:03:fc:16:78:32:ad:
ea:17:59:d3:f8:4d:bd:38:cf:75:4e:6c:82:b0:0f:
61:33:67:b1:a9:13:a0:5f:32:1e:6b:f0:c5:e5:41:
a9:ca:e0:17:1e:eb:77:8a:86:b9:48:3d:b5:74:de:
03:cf:15:0f:02:cb:85:35:40:8c:37:15:8c:07:82:
af:28:29:8b:2a:11:b7:19:b0:28:e1:75:9a:42:55:
6b:4b:e8:1e:bb:02:a2:f2:90:4e:6a:6b:d2:c2:3a:
61:43:cb:26:28:6e:9d:52:de:57:8f:59:78:b2:68:
82:d8:26:9d:0b:df:08:6e:d2:25:cc:da:32:c2:e7:
e2:e5:8d:30:8a:49:c2:3e:61:ed:a0:0f:40:18:4a:
25:85:22:4b:5b:36:c7:03:17:47:64:95:2e:73:4e:
f4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:91:47:C6:A9:D4:92:D0:2A:63:BD:28:90:42:CF:DE:E9:1E:98:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/b0219dec-4d15-370a-af72-f5dd0679b13a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.crl
X509v3 Authority Key Identifier:
keyid:B0:5C:9D:61:87:E0:4C:3D:C2:68:B3:7C:B8:CE:51:99:8C:88:A8:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de8fb4c4-0bce-4439-ac70-12b1ab7c3dd7.cer
sbgp-ipAddrBlock: critical
IPv4:
68.70.123.0/24
148.59.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:75:00:d0:e5:aa:b0:34:b1:b9:cb:01:00:87:8c:c8:61:7c:
55:49:7f:b1:f4:c0:10:2a:a8:a4:b9:39:46:c1:44:cf:5f:41:
8f:86:dd:d1:4b:67:c6:50:de:91:0e:f3:e3:b7:e4:70:22:5f:
e8:1b:2c:3e:20:01:a7:e6:d3:42:b2:be:47:f6:d0:7a:e5:d1:
3d:a7:eb:ae:71:6e:0f:b7:0a:bc:5f:a1:86:87:79:1b:51:36:
6b:4d:e1:86:1f:c2:d7:76:34:c3:e6:9c:51:b4:db:c2:2d:1c:
01:87:f0:30:de:bb:fb:1a:d6:a2:83:ca:a6:f1:fd:dd:e5:e2:
6e:5c:05:ad:af:4a:d7:8f:f9:01:46:38:58:45:98:50:d6:73:
6f:74:a9:93:00:15:cc:6b:b9:cc:e7:ba:c3:52:ce:70:0e:db:
68:d3:8c:1b:1e:5d:92:94:34:13:d6:2b:31:24:9f:c0:1f:bb:
f9:59:63:61:dd:55:93:8b:52:7c:eb:40:26:11:82:c2:45:aa:
f0:55:99:2b:c2:bf:f6:fd:75:71:4a:f9:a4:73:45:81:90:fc:
e4:36:b8:9c:00:4b:88:38:8c:40:3b:34:85:a9:df:3b:8f:b7:
bf:d2:cc:6e:a4:fc:90:6a:38:91:34:d1:6e:cc:58:82:26:46:
53:c0:0d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:47:49 2025 by rpki-client