Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/7c39b49b-d4f3-3baf-902f-83a43c864e62.roa
File: 7c39b49b-d4f3-3baf-902f-83a43c864e62.roa (raw, json)
Hash identifier: O0YxXJ5UF+eP3kycslh07l1MVOpA1iG22FZkP7lftxg=
Subject key identifier: 24:4D:B6:C4:41:94:AD:04:E9:8D:A4:BF:DE:E0:8C:84:66:71:27:71
Certificate issuer: /CN=68dde036-7a4c-4a69-930a-c6ac94a87e56
Certificate serial: 010D0C9F4328584865303D2F45D929E083F7C110
Authority key identifier: 6C:C2:8C:B2:DE:FF:56:76:1D:35:CF:47:00:09:3D:94:61:40:B0:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/7c39b49b-d4f3-3baf-902f-83a43c864e62.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 36704
IP address blocks: 138.67.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:3d:2f:45:d9:29:e0:83:f7:c1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68dde036-7a4c-4a69-930a-c6ac94a87e56
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=49c4258a-f383-410a-9043-2d3125dc29f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d2:32:2b:ca:2f:e4:10:75:2d:f9:e9:24:84:
97:f6:b4:40:ea:22:95:3b:b9:ec:57:51:56:29:c5:
eb:f3:7d:c2:28:55:3d:dd:68:3c:e0:3f:57:24:8f:
6e:c9:47:c2:72:58:17:c0:ea:32:6d:0a:26:2d:a9:
df:d9:21:22:de:2d:e2:93:0e:4a:1c:4e:dd:36:02:
64:04:c1:07:b3:2b:b9:01:58:bf:cb:f9:22:da:45:
dc:f6:0b:5a:f2:a8:aa:d4:c3:65:65:e3:b6:fe:58:
19:97:fa:b5:b2:bc:d2:2d:bd:46:2d:f2:81:c9:a1:
b3:ec:30:85:10:fb:8e:b8:d4:e3:52:72:9e:07:0c:
f7:6e:43:3b:82:4a:46:da:2a:f2:52:ff:9f:23:5c:
60:bc:1c:21:09:6a:68:8c:c3:49:e9:08:78:20:74:
3a:10:a1:d7:1b:89:2c:64:c4:05:c1:45:14:79:24:
1c:7c:3e:a6:54:9c:70:6d:c1:9c:5a:f4:da:2b:6e:
fd:77:6d:92:38:77:92:4a:8f:84:81:31:b0:d3:61:
80:1c:fd:ab:0d:7f:2f:cc:de:24:59:05:a1:3f:8d:
79:3f:b8:ac:5d:df:1a:f3:15:56:20:e3:0a:8a:0c:
2d:b8:11:c2:de:16:bf:4f:87:75:0e:5a:fa:68:62:
e4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4D:B6:C4:41:94:AD:04:E9:8D:A4:BF:DE:E0:8C:84:66:71:27:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/7c39b49b-d4f3-3baf-902f-83a43c864e62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/68dde036-7a4c-4a69-930a-c6ac94a87e56.crl
X509v3 Authority Key Identifier:
keyid:6C:C2:8C:B2:DE:FF:56:76:1D:35:CF:47:00:09:3D:94:61:40:B0:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56.cer
sbgp-ipAddrBlock: critical
IPv4:
138.67.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:41:25:1d:31:46:9c:c0:4b:28:48:f8:6d:b0:0e:a1:27:6d:
9e:8b:ab:94:89:37:ea:df:6b:7e:36:10:97:f3:1a:37:6b:a7:
53:8f:ba:e5:ac:f3:17:2f:68:70:71:6a:c7:15:7a:f7:1b:09:
8f:a0:3e:1f:50:81:40:0e:1d:87:4c:3a:fa:8d:5f:b1:c2:d3:
77:54:83:03:1d:9e:00:a2:e6:d1:85:6d:15:b6:f9:dc:a3:49:
c1:d4:f3:b0:cd:a8:05:63:40:72:b9:16:16:ad:9a:48:49:20:
57:0a:20:55:0c:bf:c3:35:11:73:e7:db:30:20:8e:10:37:ac:
e9:5c:50:f1:56:d4:1a:e6:bd:c7:e4:c7:f0:e3:78:73:e9:82:
c5:5d:43:7d:7d:35:94:39:ba:26:58:c4:f3:c1:54:3c:80:73:
11:8a:8d:bb:8b:ae:40:39:ce:47:d7:b2:71:c8:7c:c3:ee:c3:
ae:b9:cf:58:01:cb:25:cc:ab:de:6b:d6:a0:30:d2:37:33:49:
5e:0f:48:64:56:73:10:f4:d1:62:d1:a4:0a:f7:e6:ee:8d:92:
b9:2f:74:52:a8:5b:44:6a:52:ae:ae:2e:d4:4e:03:ae:0c:34:
3a:72:23:0f:02:ed:77:80:f6:09:f6:3b:70:01:a8:3a:d4:e7:
74:73:69:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:55:01 2025 by rpki-client