Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/3d2884eb-84c9-34ac-97d1-34b7790d7bc2.roa
File: 3d2884eb-84c9-34ac-97d1-34b7790d7bc2.roa (raw, json)
Hash identifier: 5oAWyKtpf7Xz8hx+t8z+QuBI4E08kOIeRjTjS85c2RY=
Subject key identifier: 64:6C:AB:E4:C4:E6:25:D3:B0:52:3E:F3:D2:5D:6C:12:F1:40:DA:FD
Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial: 010D0C9F432858483E1AA4278B6BE0DC129BFFC0
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/3d2884eb-84c9-34ac-97d1-34b7790d7bc2.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 19107
IP address blocks: 68.235.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:a4:27:8b:6b:e0:dc:12:9b:ff:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=4b836e48-cc9e-439f-b610-89e1930dd1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:76:92:2b:6f:7e:a4:4c:ce:1a:6d:cc:9b:94:
a9:d5:d4:d6:49:80:e6:5c:b2:05:e2:31:83:f4:b3:
14:da:72:0c:08:28:4f:ca:36:36:03:c4:77:96:9f:
02:33:e3:95:10:e9:a8:79:c3:d9:24:40:52:54:cc:
45:4d:33:71:a4:cc:a8:30:c9:12:f6:e4:7e:d4:cd:
81:77:53:82:5f:2e:23:bc:c3:6b:15:ed:33:64:10:
a9:a8:7b:6d:8f:e7:a5:18:0e:c6:e8:ae:2d:1d:12:
72:a6:61:e8:b1:e6:c9:af:8c:32:0c:50:06:80:14:
97:f9:36:a5:1a:b8:25:6f:e6:fd:07:71:70:81:db:
a5:f6:90:f5:c4:2f:fa:cc:c4:dc:2b:cc:d6:3a:cf:
15:03:7e:41:32:e2:21:6f:f1:18:2c:42:58:f2:ef:
2d:25:d8:1b:32:68:e1:65:b6:71:e8:27:47:60:63:
ec:b1:61:da:d4:9e:79:9f:f4:ed:de:03:cb:46:30:
61:f6:81:67:5e:60:dd:f7:b0:33:28:28:d6:23:bc:
86:1c:18:7a:06:3d:12:9a:cd:70:8c:5a:b2:2a:89:
d5:16:c5:42:f7:28:61:f7:1e:fa:76:99:a0:3e:45:
49:ec:a3:10:ad:06:91:88:5c:0f:7f:36:8e:5c:39:
8f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6C:AB:E4:C4:E6:25:D3:B0:52:3E:F3:D2:5D:6C:12:F1:40:DA:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/3d2884eb-84c9-34ac-97d1-34b7790d7bc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
X509v3 Authority Key Identifier:
keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
sbgp-ipAddrBlock: critical
IPv4:
68.235.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:f2:ad:ed:d8:bc:aa:29:5e:74:61:d2:6e:99:85:8b:c7:68:
97:a3:e6:69:9d:a3:6f:d6:8c:85:19:20:8a:d3:3c:fc:28:8c:
59:c0:e6:0d:ff:2f:ed:de:9a:b6:47:15:ab:ba:09:b2:6d:2d:
54:dc:1f:e9:6e:4f:ff:f4:bc:e6:6f:04:91:03:71:ba:a6:1e:
22:67:7f:69:5a:27:26:03:a2:51:6b:e9:de:a5:13:bf:5c:dd:
6a:38:a4:d8:dd:ad:30:d0:20:e8:07:be:0d:1a:9e:dd:bc:a3:
d5:71:69:f2:e1:04:1c:f1:de:57:3b:af:2d:bc:e2:1b:a6:d0:
6e:9c:d0:48:ff:7d:44:ad:ef:25:96:8e:44:f1:45:b5:bf:c1:
e6:8d:4a:9e:ed:89:0b:5f:b5:15:76:99:e2:31:3f:d7:db:b0:
4f:e3:93:f3:64:e3:10:31:3d:e0:6c:b6:a3:f8:77:90:7b:c6:
36:ac:27:89:1e:17:a6:5b:0a:46:07:c6:c9:1d:c7:13:f0:f0:
9b:ba:9e:18:10:e8:c5:db:e1:81:8e:18:9b:5e:ef:4a:32:04:
1a:99:1f:c4:15:c0:74:4f:3c:0a:c0:0e:f4:23:db:e1:31:78:
85:04:a8:79:7c:bc:14:54:94:4d:d9:17:be:71:2a:68:09:bc:
31:dc:87:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:49:39 2025 by rpki-client