Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/27495369-f50d-3ffe-af45-6c407307205a.roa
File: 27495369-f50d-3ffe-af45-6c407307205a.roa (raw, json)
Hash identifier: bXNCQKwsixyWv+WM2MlI9dsnVbZYqC9NnrDB6Im1Mh4=
Subject key identifier: F6:7E:01:5A:0F:3B:51:74:48:96:C4:A4:C3:61:B0:DB:70:E5:83:F8
Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial: 010D0C9F4328584837B04515B96732A8A5EE6F80
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/27495369-f50d-3ffe-af45-6c407307205a.roa
Signing time: Sun 15 Dec 2024 18:51:30 +0000
ROA not before: Sun 15 Dec 2024 18:51:30 +0000
ROA not after: Sat 15 Mar 2025 17:51:30 +0000
asID: 63023
IP address blocks: 68.168.29.0/24 maxlen: 24
186.190.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:b0:45:15:b9:67:32:a8:a5:ee:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
Validity
Not Before: Dec 15 18:51:30 2024 GMT
Not After : Mar 15 17:51:30 2025 GMT
Subject: CN=d3befe26-a935-43df-aa39-d0bb1846ebdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:48:d4:6f:7b:ee:63:f6:a1:bc:d2:c9:16:71:
8b:3c:eb:75:ba:14:95:7e:f0:8d:36:15:8c:f6:8e:
66:a1:2a:5a:6c:12:cb:0b:df:3a:a8:25:e1:12:92:
6c:31:cf:90:5f:bc:c4:87:44:64:24:99:63:5a:86:
cb:c1:e3:63:9f:b1:83:0d:58:ed:8b:f6:a6:a2:cb:
e6:cf:4e:d8:c1:c9:f0:2a:f1:84:60:f5:f7:69:fd:
ec:41:d0:9d:e9:68:d2:2b:81:f4:b9:3e:03:18:9a:
a0:14:6a:bf:dd:cc:00:b2:d6:b6:10:ce:c9:b9:21:
bf:2f:84:78:43:c6:4a:86:c4:a0:9d:fb:e4:43:e8:
2b:6a:57:09:a1:71:3b:8f:c7:9e:e4:b3:5b:68:0f:
d9:d6:9b:4a:17:54:fb:10:74:4a:0f:36:ee:22:c1:
96:7e:84:2b:c4:6d:a7:e2:f0:6e:b5:cb:21:60:4e:
21:5d:9d:fb:b2:80:5c:12:56:7d:d7:d6:ee:cc:b9:
35:5c:20:15:28:98:9f:76:5d:cb:29:e8:e8:3f:42:
8a:2a:96:b6:3d:a2:c3:57:5e:39:1b:82:3c:96:a4:
e5:81:9a:9f:68:b0:c0:c3:47:d3:10:e3:49:1f:67:
55:d6:ba:0b:67:40:3f:9e:bc:81:9d:25:14:f9:71:
e4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7E:01:5A:0F:3B:51:74:48:96:C4:A4:C3:61:B0:DB:70:E5:83:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/27495369-f50d-3ffe-af45-6c407307205a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
X509v3 Authority Key Identifier:
keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
sbgp-ipAddrBlock: critical
IPv4:
68.168.29.0/24
186.190.213.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:aa:70:9c:c9:d3:d4:19:eb:68:b1:bc:77:17:f2:07:e8:c2:
28:96:a7:ff:9e:16:b9:94:cd:00:5b:29:4a:68:71:16:ed:7b:
63:09:ab:50:ce:ff:57:e6:ff:47:bd:1c:cc:f9:c6:26:94:d6:
2f:26:2c:9f:53:3b:e4:11:ca:ae:1e:53:8b:3c:46:39:f3:12:
b1:09:57:da:38:83:ff:cf:81:d5:e3:ef:7b:ae:3e:81:9c:50:
bf:aa:49:c8:e0:aa:25:34:37:a5:f6:5e:de:04:f6:a3:4c:b2:
1a:0d:a9:13:17:fb:8d:fb:30:eb:2f:51:5d:6c:72:02:9b:07:
8f:b4:91:e3:a7:64:7b:fe:ec:f2:08:9b:4d:fc:db:08:47:b5:
6d:13:4c:2e:34:32:a6:ff:7d:7f:3f:3f:fe:ff:cd:56:7a:25:
a7:dc:db:0d:91:82:bc:b6:40:52:a8:3e:2e:56:42:43:c0:bb:
02:b5:57:bc:c2:d9:59:3e:df:9e:61:0f:29:1a:87:4f:47:ce:
64:d1:2c:7a:af:16:bb:5c:bc:7a:3b:a4:52:0c:f1:a5:1f:98:
d4:89:fd:50:fe:aa:ed:5e:36:6d:f1:0b:4b:b5:63:7c:59:af:
73:4b:d0:f8:a2:ee:ce:6d:61:b4:26:57:e7:1e:eb:d6:8c:13:
c6:27:61:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:46:36 2025 by rpki-client