Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/7cf1b155-1ef2-3673-9779-9ab9f58972da.roa
File: 7cf1b155-1ef2-3673-9779-9ab9f58972da.roa (raw, json)
Hash identifier: W/gJ/03Z9cFOLFsXH3x1EhfWVrmnft6tet65RzPUROY=
Subject key identifier: D0:C9:BA:70:0C:81:72:E1:78:BA:DE:EB:A4:F0:14:8B:6D:76:9C:92
Certificate issuer: /CN=cc39a973-cf2e-44b1-984a-6596dc0b6963
Certificate serial: 010D0C9F4328584832F03407FD5AC8D93295F400
Authority key identifier: 45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/7cf1b155-1ef2-3673-9779-9ab9f58972da.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 4476
IP address blocks: 192.68.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:34:07:fd:5a:c8:d9:32:95:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc39a973-cf2e-44b1-984a-6596dc0b6963
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=22807000-4da3-4244-b9f9-357f16a7a8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e2:54:3b:f6:bb:b4:e9:bb:1f:09:84:6c:ef:
72:0e:eb:44:ca:77:93:6a:1a:53:47:a7:fd:51:40:
1d:25:62:99:c4:ab:7a:b7:17:4b:15:2f:06:42:ac:
dc:79:8c:74:16:79:21:f9:72:22:9a:f0:99:5a:a4:
4b:1d:a5:a1:8c:95:07:4c:48:4d:48:2a:98:db:19:
fb:f5:05:ed:68:4f:4b:08:ec:9c:13:e5:e3:a0:97:
15:a4:41:7d:ad:a7:09:11:c7:0b:76:e0:18:de:4a:
12:f8:8d:58:3c:1b:7e:4d:d9:fc:4b:53:52:d7:f4:
c2:85:91:17:81:b6:5d:cf:94:6a:92:1a:7b:05:fb:
80:eb:73:75:33:28:9b:75:44:f6:18:3e:40:ba:51:
39:60:fc:65:7b:6a:47:76:95:a1:fc:15:c9:37:aa:
8b:23:38:dd:59:6e:aa:38:14:18:b0:d7:75:35:ef:
1a:ad:e1:55:a0:9f:ed:08:1f:ae:dd:80:5f:59:fd:
8d:ea:dd:89:b7:14:60:df:e8:ef:cf:28:1e:9e:3f:
c0:9a:85:d1:0b:5f:0b:34:da:cc:ca:7d:d6:de:99:
bd:b1:80:34:80:0d:c0:c8:5b:23:a4:34:4b:7f:ce:
fb:f2:8c:dd:14:b7:39:05:d7:c9:46:37:01:50:d6:
d9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C9:BA:70:0C:81:72:E1:78:BA:DE:EB:A4:F0:14:8B:6D:76:9C:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/7cf1b155-1ef2-3673-9779-9ab9f58972da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl
X509v3 Authority Key Identifier:
keyid:45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:fa:a0:ad:85:b9:8b:df:e6:1e:71:a9:fa:96:4c:77:40:ba:
d4:99:d0:79:d4:e4:ce:83:5b:c1:3c:58:68:f3:6a:60:39:a8:
48:cc:3d:26:7f:dc:cb:5e:dc:7e:30:db:5e:91:47:49:ed:3b:
6c:77:30:dd:4e:1a:50:48:c3:c0:cd:ee:c1:28:c9:8b:ca:43:
5b:44:80:9a:9b:ee:ce:ab:23:75:2d:c5:49:a3:3f:b5:6f:19:
5e:46:66:89:78:aa:3f:97:b2:cd:b2:0b:b3:02:9a:44:50:d9:
a6:d7:46:bc:7a:05:15:59:7b:77:8c:2e:b0:85:b2:7c:07:5f:
69:67:8a:12:7d:e6:95:bb:71:95:3e:30:ff:64:90:f9:88:71:
14:3a:b9:45:12:7a:88:b7:be:8b:8b:dc:f6:9e:81:93:6a:ad:
a1:47:57:f2:b7:d6:07:0f:ce:43:fc:b8:46:6f:57:09:b5:c3:
50:22:eb:af:c7:3a:c8:5f:44:4c:78:d9:23:53:2d:bd:64:c5:
88:a7:18:82:07:fc:a8:1a:f5:2c:6d:89:9b:ab:8b:2f:24:4c:
76:29:c7:ae:6a:44:3f:1a:66:da:17:1d:6c:5b:00:e1:45:cb:
d8:dd:69:d4:c1:74:94:ee:5e:f1:06:be:fb:9d:09:9b:e7:41:
57:cd:e0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:55:52 2025 by rpki-client