Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/2d398258-1b86-35d8-933f-e3df7eab5377.roa
File: 2d398258-1b86-35d8-933f-e3df7eab5377.roa (raw, json)
Hash identifier: vx8gelwEiaRhYxhpA0avq5HkPVzh9Mx1rp9j0xzC754=
Subject key identifier: 39:90:1B:D8:4C:3E:AC:F8:7A:75:01:F3:AE:2A:15:24:43:76:D8:9C
Certificate issuer: /CN=0eb1645c-1aee-439b-8505-4341c9574690
Certificate serial: 010D0C9F4328584875F057B564F3E753F98939C0
Authority key identifier: 8C:8F:65:60:F6:34:70:EF:39:A8:B0:4C:B4:E7:8D:9C:E9:DA:FF:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/2d398258-1b86-35d8-933f-e3df7eab5377.roa
Signing time: Tue 07 Jan 2025 02:00:39 +0000
ROA not before: Tue 07 Jan 2025 02:00:39 +0000
ROA not after: Mon 07 Apr 2025 01:00:39 +0000
asID: 396239
IP address blocks: 68.69.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:75:f0:57:b5:64:f3:e7:53:f9:89:39:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb1645c-1aee-439b-8505-4341c9574690
Validity
Not Before: Jan 7 02:00:39 2025 GMT
Not After : Apr 7 01:00:39 2025 GMT
Subject: CN=a3255cad-a513-46ef-be55-4fdedf4641b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7f:52:a1:03:d8:74:41:f3:d3:94:ee:36:af:
57:d8:a3:34:c1:15:c4:05:42:79:70:be:ce:5a:ac:
79:02:a9:12:80:51:87:6a:b1:25:cd:c5:ed:16:13:
9d:2d:0c:d2:cc:1e:62:d6:2b:36:08:61:5b:65:06:
31:80:df:46:39:49:c3:ee:6b:5f:bd:20:59:b6:f9:
3b:6c:d2:e1:bb:c4:35:f6:7b:e7:fe:14:d3:ae:34:
f4:37:19:e5:d4:28:89:eb:82:82:26:ea:d0:ad:9d:
e2:c3:3b:a5:9e:f6:b5:a4:81:89:f7:93:67:8b:a6:
f2:a2:2a:2f:c2:d7:1e:d6:bf:b3:d3:0f:c1:7c:a2:
57:ea:5d:8e:a6:c3:e4:bb:27:4a:bb:29:c9:fe:1f:
f6:b8:d8:eb:4b:83:60:c7:74:4f:5f:6b:65:fe:86:
c0:2e:1a:1a:ef:e2:4e:1d:1b:73:e5:87:30:ad:47:
f8:b3:9d:1d:55:a1:8c:8e:28:da:74:ab:52:c2:5d:
06:31:87:b8:74:80:b9:b5:76:67:cb:bb:8b:2d:d1:
50:40:aa:d2:dd:39:ef:9b:d4:8c:a1:58:3b:bd:eb:
c9:07:bf:33:6c:bc:b8:31:b2:01:5c:07:c4:a6:73:
1b:a0:3b:00:aa:09:6e:36:ce:d0:10:ce:b1:23:ff:
1e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:90:1B:D8:4C:3E:AC:F8:7A:75:01:F3:AE:2A:15:24:43:76:D8:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/2d398258-1b86-35d8-933f-e3df7eab5377.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.crl
X509v3 Authority Key Identifier:
keyid:8C:8F:65:60:F6:34:70:EF:39:A8:B0:4C:B4:E7:8D:9C:E9:DA:FF:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer
sbgp-ipAddrBlock: critical
IPv4:
68.69.116.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:6f:b0:37:a6:bf:b1:6a:1b:b8:58:42:0c:e1:a4:fe:7e:4c:
ad:3e:0d:d6:cb:ba:bf:8e:e7:ac:82:25:89:7b:dd:a6:cc:1f:
9c:af:09:dd:17:5b:af:dc:7b:ad:54:10:50:2b:b8:6d:3a:86:
0c:f1:0f:63:b3:d4:31:32:c8:38:1f:86:5f:55:12:df:0a:6e:
29:62:ba:e1:eb:26:79:41:cb:84:eb:e9:68:23:d9:5b:a7:a1:
17:f9:36:67:0e:97:be:b7:d7:e9:43:7d:9d:58:b3:09:92:0a:
76:17:0d:0f:e4:eb:ba:2d:0e:be:59:33:65:54:b0:e9:e1:17:
45:ee:93:b2:d1:e9:92:00:30:43:49:37:c8:cb:3c:74:a3:e6:
77:33:26:d5:a0:51:75:1d:3c:2f:15:d7:c1:be:2c:22:0f:2e:
49:ae:f0:c3:bf:5a:fb:79:93:4f:86:56:e1:5d:b2:9d:33:59:
04:42:62:92:fa:0c:38:b0:c7:2b:85:51:99:98:0f:85:a6:a6:
80:36:93:58:61:59:a8:eb:94:6b:f1:ce:5c:1c:e1:e8:9c:ce:
0e:3a:64:07:37:ae:d3:e2:cf:2c:6b:1f:15:7b:4e:7e:88:1a:
4d:f1:09:5c:bd:61:30:42:af:84:64:22:5c:0d:e7:5f:3a:52:
0c:a7:01:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:36:14 2025 by rpki-client