Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6cd3fc02-66ef-35c8-8b8c-fa62d121d9bb.roa
File: 6cd3fc02-66ef-35c8-8b8c-fa62d121d9bb.roa (raw, json)
Hash identifier: VRfBu9Mkj5ANj0a0vA9GX4WZzEc4oDFbBc2+CHCcQgk=
Subject key identifier: D7:E3:53:6C:4C:74:B3:7E:EF:51:46:97:41:B3:3D:11:C1:25:89:93
Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial: 010D0C9F432858483E1AA3460E5591A1F68C3400
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6cd3fc02-66ef-35c8-8b8c-fa62d121d9bb.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 19107
IP address blocks: 68.235.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:a3:46:0e:55:91:a1:f6:8c:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=6a14f72d-18fe-414d-8eaf-6cc7c11d0ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:88:cc:ef:41:95:30:cb:7d:ed:2d:91:0c:7e:
21:ec:c4:2f:69:8e:d7:07:67:49:f8:df:cb:1d:b5:
ce:a8:53:b7:5e:bd:7b:5c:2d:d5:62:4c:4a:69:15:
a2:15:a3:63:d9:9d:94:10:01:70:51:b5:e1:9c:ac:
11:29:22:cc:f1:5d:39:de:ff:82:ad:05:e3:97:0c:
aa:80:b8:33:1d:a3:4e:28:ef:88:bc:da:d6:22:b5:
4a:67:0f:68:1b:08:17:f4:d7:67:80:cb:1f:1f:77:
0b:6d:2e:bf:eb:25:ae:1f:50:0b:25:e2:fc:76:bc:
07:6e:e6:a6:8e:0b:cf:9e:0b:db:36:f0:69:f8:4b:
4a:eb:df:e7:ed:ac:ff:78:35:18:e2:1e:ed:a0:56:
77:a8:af:2e:75:37:c7:83:bc:c3:f7:55:1f:c9:46:
ad:8a:66:54:41:9b:24:22:24:35:66:69:32:86:fd:
d5:fa:a2:f3:e5:a8:cb:93:db:92:cd:f3:06:7c:d7:
2d:26:25:2e:98:2d:e8:c2:9d:ec:af:46:96:42:b3:
53:31:48:2b:3a:9d:b4:f6:6b:15:73:dd:9c:e5:c0:
c6:ee:5d:af:92:33:20:12:b9:3f:e2:ab:3b:85:d3:
8b:94:0a:61:24:5f:5d:e4:10:5f:72:3d:e1:5a:0e:
0a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E3:53:6C:4C:74:B3:7E:EF:51:46:97:41:B3:3D:11:C1:25:89:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6cd3fc02-66ef-35c8-8b8c-fa62d121d9bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
X509v3 Authority Key Identifier:
keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
sbgp-ipAddrBlock: critical
IPv4:
68.235.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:70:ba:9e:96:60:9e:b9:00:56:29:be:1a:ae:33:9d:6f:0f:
16:01:ca:57:48:f5:09:75:88:01:2f:ec:1d:31:2c:dc:d2:61:
84:e5:c4:24:05:86:b6:7c:c2:ce:64:ba:bd:b5:ba:06:60:1e:
04:ae:c2:f3:b8:bf:9f:85:9e:50:0f:8d:81:32:fe:18:6b:7f:
0d:ee:95:cf:f8:d9:a3:89:eb:d0:47:13:33:c5:8b:9d:1e:57:
d2:ac:fd:66:e0:45:35:bb:5e:0b:b9:d8:4e:73:f3:2b:c1:16:
16:ca:1e:da:26:6c:fa:ff:6b:fa:bf:b5:7c:d0:a6:80:64:d3:
be:5b:8a:02:36:a2:84:b7:ff:c6:cd:6b:fb:7f:8f:7e:fe:12:
73:18:d9:a5:20:ae:4b:e1:47:03:78:cf:75:18:27:bc:3c:07:
01:5a:9c:d5:70:37:30:93:17:3a:0c:dd:7b:98:55:1f:14:cd:
7e:d3:26:72:85:04:6d:de:0a:c0:fc:fa:23:04:18:46:14:2e:
fe:19:1b:6c:cc:c3:b4:a7:ae:ab:c2:e1:c7:14:af:5f:7d:39:
2f:96:ec:6a:cb:64:07:0f:c3:e5:f7:1b:6a:28:51:3f:72:ac:
1e:4b:6a:e7:1a:0f:0e:f1:a7:5d:37:92:50:e1:21:87:9c:9a:
68:40:63:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:09:20 2025 by rpki-client