Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/f1e5fe4f-72e7-3a39-a046-dd4f666c3204.roa
File: f1e5fe4f-72e7-3a39-a046-dd4f666c3204.roa (raw, json)
Hash identifier: CleKFgBD+uc4RiHFn/qUWTMXyidtv9XkTOS4A8NzeXU=
Subject key identifier: 13:F7:BC:27:F1:60:27:38:8E:C6:39:0B:A4:AE:87:A5:2D:F8:6B:B0
Certificate issuer: /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Certificate serial: 010D0C9F4328584819CFE1519C04ECDE038C0EC0
Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/f1e5fe4f-72e7-3a39-a046-dd4f666c3204.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 25899
IP address blocks: 67.59.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:e1:51:9c:04:ec:de:03:8c:0e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=7349654d-fb11-4267-a56a-6a643bd6d3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b1:ec:46:bf:0c:38:ee:57:0b:1f:f5:f8:75:
a7:23:e8:ce:76:ac:96:f1:ea:49:5a:c2:0a:56:6f:
cc:34:1e:d3:ef:8d:a9:d3:cc:a2:57:1c:2e:94:4a:
47:d5:82:70:a1:00:fe:5f:ac:e2:3d:08:aa:1f:97:
83:a3:00:7b:39:f5:2c:85:b7:41:51:66:97:ea:da:
fb:e4:31:09:f8:1d:5b:5e:e6:c6:2f:b4:86:61:4e:
28:82:0f:04:85:60:80:1b:dd:4f:fc:d8:32:8a:16:
9e:5d:2f:ec:bb:1c:5f:2f:10:ac:f7:68:1f:48:35:
83:29:96:6b:ed:a0:6a:58:80:a1:06:fa:42:0c:a4:
7a:75:0f:12:8b:81:d8:7b:5a:d0:45:c8:dc:e0:0c:
22:53:6f:35:8c:92:cd:fb:4b:30:ab:43:3f:fa:44:
a6:85:5d:c2:be:dc:1c:84:21:f6:5b:ce:b8:ec:e6:
69:8d:c9:58:e7:80:54:8a:3c:8e:5f:e7:e3:58:2c:
e5:65:18:8c:fd:7a:3a:88:84:74:c1:36:fe:d1:8e:
65:a1:cc:9e:ad:eb:bf:18:7e:7c:93:fe:08:23:1c:
2d:1d:dd:83:a4:13:24:39:2b:c1:16:20:fc:02:79:
78:6d:65:2f:e1:e8:dc:06:d4:79:88:ae:ea:0f:92:
d6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F7:BC:27:F1:60:27:38:8E:C6:39:0B:A4:AE:87:A5:2D:F8:6B:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/f1e5fe4f-72e7-3a39-a046-dd4f666c3204.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl
X509v3 Authority Key Identifier:
keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
67.59.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:32:46:47:f6:a8:c5:68:52:6a:9e:0f:6e:83:e5:29:96:43:
cf:32:8c:ca:de:02:3d:18:c5:7d:5e:32:be:2e:d1:44:c0:e0:
83:86:cc:00:0b:65:f1:77:e2:1a:26:ae:d3:bf:29:cd:71:06:
1f:d4:a9:b9:7b:5f:6c:cd:db:02:99:81:39:99:ac:49:24:cb:
17:8b:67:5c:e8:0e:9c:7b:93:d9:65:b3:be:69:1d:b1:fe:57:
1e:94:2c:b0:f9:6d:c5:b2:8d:6b:8b:bc:ff:32:fc:25:82:5a:
24:64:68:44:6a:84:5b:cf:dc:af:2c:0d:83:e0:5e:f0:99:9d:
7b:a9:f2:4b:65:fd:10:1f:39:60:49:e4:71:ef:bf:50:dd:dd:
8c:6b:aa:0e:c1:a1:31:86:bc:7f:46:ad:fe:54:f1:91:18:df:
bc:e1:b9:5a:f7:1a:19:f7:b8:72:66:22:33:3c:62:20:7c:95:
8c:a3:16:de:2d:6b:39:fb:ea:4e:e9:51:e6:06:c9:f1:e2:e0:
45:b3:7f:d1:fd:d8:de:5e:c9:f1:e1:db:1b:62:0e:c8:21:ee:
69:61:f4:38:15:57:46:5f:63:4b:9a:ed:e8:8f:7f:7c:73:0f:
04:8e:f0:51:f3:68:3d:3c:95:d6:1a:5d:29:77:c7:08:71:23:
cc:f2:7b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:01:24 2025 by rpki-client