Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/699b8c0d-b668-3aa7-93f5-0b36e116f993.roa
File: 699b8c0d-b668-3aa7-93f5-0b36e116f993.roa (raw, json)
Hash identifier: w3HEXhJmo00io3a1thLFbz/CBJMZJ4rFIvbmRcDOdXA=
Subject key identifier: F2:5F:C1:30:61:70:07:6C:8F:B7:49:CF:90:C2:B3:A8:B5:6E:BE:23
Certificate issuer: /CN=3b0b4e45-c916-48be-ae0d-b57b80a30cdc
Certificate serial: 010D0C9F4328584819CFCF0F156630191BE33100
Authority key identifier: CD:F0:0E:4B:F1:FB:B5:39:ED:3F:7A:94:3C:D7:4A:2B:C2:0E:F7:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/699b8c0d-b668-3aa7-93f5-0b36e116f993.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 399612
IP address blocks: 68.68.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:cf:0f:15:66:30:19:1b:e3:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0b4e45-c916-48be-ae0d-b57b80a30cdc
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=5dd32095-e2b2-4fa7-94da-0b419e085390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5c:ae:a1:3f:0b:ad:fd:48:21:a1:fe:e5:fb:
0a:9c:98:0c:6e:a3:d9:91:ff:c4:64:31:3e:50:04:
88:d9:f0:1b:a0:a3:4d:4d:61:ae:a3:ca:41:84:5f:
01:e6:b3:48:41:30:c2:1b:96:02:04:7a:30:0b:8e:
d5:77:1d:ce:cc:69:f1:eb:4d:ee:b4:cc:5d:67:1b:
30:a1:f9:c4:26:ab:6d:67:96:b8:0b:07:fc:58:6b:
1b:eb:43:a7:dc:99:c2:68:33:f9:9c:1e:c7:4e:d5:
e8:ae:92:e9:27:3f:6d:52:3f:e6:f0:be:4e:dd:c3:
8e:31:fc:2e:2f:1d:8b:2f:70:d6:eb:3c:c7:13:8c:
25:50:39:64:d1:4c:c9:5c:75:c5:1d:87:9a:3c:a1:
4d:ca:50:45:78:35:fe:88:b6:b5:0c:0b:ad:20:1a:
b1:1c:4b:76:85:88:bd:12:ef:ac:34:af:dd:8f:61:
a0:af:88:cf:66:e5:a3:41:e6:50:9f:47:7b:d3:1b:
68:64:80:cd:d9:67:34:3b:8f:86:90:95:26:ef:42:
99:76:76:fb:4e:64:4d:07:dd:da:0b:40:27:3e:7f:
bc:e9:6e:d5:da:e5:89:42:86:36:c4:44:e9:66:43:
1a:5c:cd:58:80:17:dc:77:9c:9d:f4:38:74:6b:9c:
d8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5F:C1:30:61:70:07:6C:8F:B7:49:CF:90:C2:B3:A8:B5:6E:BE:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/699b8c0d-b668-3aa7-93f5-0b36e116f993.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.crl
X509v3 Authority Key Identifier:
keyid:CD:F0:0E:4B:F1:FB:B5:39:ED:3F:7A:94:3C:D7:4A:2B:C2:0E:F7:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3b0b4e45-c916-48be-ae0d-b57b80a30cdc.cer
sbgp-ipAddrBlock: critical
IPv4:
68.68.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:f2:d6:83:b5:23:df:90:83:ec:1b:5d:42:4f:da:63:72:2a:
c2:19:d9:25:e7:57:e0:44:a7:f8:f7:fa:d9:89:17:2e:04:50:
2d:4d:e3:0a:c9:93:cb:53:8b:3b:6c:88:c0:20:b0:48:15:ce:
3b:e5:2d:8d:a8:cb:b0:67:a7:93:45:82:29:8c:0c:1b:52:bf:
c3:5a:6d:64:4e:f7:d0:79:ac:e3:24:b5:79:0a:19:57:07:9b:
a4:ca:7e:79:b4:80:80:99:fc:8a:47:f5:fe:f4:6a:3f:d2:7d:
11:99:f8:91:5b:17:67:5a:33:c8:1a:83:e7:42:f1:12:9b:a4:
0d:90:05:99:66:79:a1:76:97:3a:e2:a4:8c:25:5e:cd:1f:27:
fa:3b:80:29:36:16:31:3e:50:ea:31:da:fe:53:6c:32:ef:2b:
6f:fd:c1:43:41:55:04:c9:db:7a:40:0d:38:38:81:bb:90:40:
cf:14:b5:f6:0a:3a:9f:9d:dc:1e:d3:f0:9c:09:a2:c1:c3:aa:
68:90:96:ca:3e:f7:89:6a:0e:ef:57:1e:d1:ab:50:82:d9:02:
9a:67:fd:24:c6:2d:ee:f2:60:90:77:58:3b:dd:33:5c:68:a4:
b9:10:4b:7f:2d:15:7d:0a:8b:38:5a:66:78:4e:46:b4:f4:8e:
3c:89:31:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:06:32 2025 by rpki-client