Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8a75fa10-6d06-3ea4-b35f-413e2481dcfc.roa
File: 8a75fa10-6d06-3ea4-b35f-413e2481dcfc.roa (raw, json)
Hash identifier: SkmJddyz5ic6OxUM6n+8ne7d9NCJKQUMpp2grGqOFaw=
Subject key identifier: E8:E8:4D:C4:22:6C:C9:93:D5:32:8D:AD:99:0B:E7:61:63:41:7D:65
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A9964983E2DDDCFA8A7E2100
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8a75fa10-6d06-3ea4-b35f-413e2481dcfc.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397229
IP address blocks: 199.7.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:49:83:e2:dd:dc:fa:8a:7e:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=8f6e32d1-99f4-46b2-a525-6ba537902fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:01:b0:e0:7f:16:10:3a:00:50:47:c2:3c:f2:
b4:ac:2a:b6:64:42:59:6d:54:3a:32:f4:1e:c7:9d:
8d:44:e3:6a:6f:75:c7:e9:06:f0:4a:56:a3:2c:5d:
35:e4:e4:e5:e6:65:fe:86:ca:bb:95:f8:2d:6f:1c:
ce:df:82:32:75:58:5b:55:ad:6f:64:e4:9b:45:28:
32:9a:85:f8:5b:f1:7c:73:b7:c0:71:55:8f:12:11:
a5:d4:20:50:91:12:f8:90:33:09:bf:5c:c3:b0:a7:
86:ed:0d:2e:12:00:84:18:94:b0:0b:ab:dd:0f:50:
43:ac:f6:6a:18:01:1d:bb:65:74:4a:25:27:6c:5e:
fc:60:0f:b7:a5:10:74:86:b7:19:cb:37:64:bb:37:
84:5b:8d:11:51:22:d1:b1:41:dc:8a:b9:9a:85:30:
c7:53:2a:47:6b:ec:37:46:a1:ea:c8:f0:db:82:3d:
1b:e6:c6:a7:fd:9d:07:a5:70:d3:d5:d2:a6:57:23:
0d:a6:6f:57:fc:b2:d4:e8:dc:58:63:3e:57:4a:0e:
3c:29:d5:78:fc:04:86:c7:67:88:b8:74:6c:54:30:
d2:e2:62:60:40:3b:dc:f9:8b:4a:29:88:1f:e0:ad:
62:fc:9f:eb:4c:99:af:62:94:4c:78:1b:e0:a9:68:
33:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E8:4D:C4:22:6C:C9:93:D5:32:8D:AD:99:0B:E7:61:63:41:7D:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8a75fa10-6d06-3ea4-b35f-413e2481dcfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:aa:62:46:0c:35:7e:83:7c:2d:3d:3b:a5:e5:e9:e9:b4:5c:
de:f6:12:10:d2:dc:32:0d:68:6c:d0:bc:f0:71:9f:da:91:5f:
46:7f:9c:82:e5:55:1f:47:ab:13:0f:ef:24:ee:ee:4a:9b:39:
32:a5:01:51:85:76:47:ad:44:c0:ef:79:be:20:af:6a:17:a7:
cb:36:bd:e1:12:ad:11:c0:af:dc:bd:2c:ae:95:63:c4:f9:68:
cc:e2:57:6d:77:f1:fa:25:05:22:5a:c7:22:10:10:9a:ce:90:
70:d8:05:84:c7:d3:66:cc:65:24:a3:73:95:87:b1:6f:6a:d2:
63:cc:4f:f8:e7:6e:1b:7c:57:69:07:da:92:ec:1f:d8:c2:6b:
6b:33:36:87:8d:a7:50:ad:13:38:b8:93:f6:f3:18:43:02:1c:
ab:84:ba:8b:ca:db:7d:03:77:7c:86:a5:2c:4d:16:56:fb:5c:
1e:14:78:a4:4e:77:51:71:2a:bb:68:0f:6d:e0:bc:64:a7:73:
38:05:af:4b:ab:3f:ef:ed:2b:5e:6e:20:81:4a:95:b9:17:56:
0b:f4:ee:41:0b:72:1f:fe:7b:ce:39:d2:b3:ac:4f:37:17:04:
72:c6:ca:3a:29:fd:58:32:3f:bb:74:04:c6:ab:55:17:e2:7a:
4c:09:8a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:40:26 2025 by rpki-client