Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6986273c-343b-39c2-9dd1-bb8ca363c568.roa
File: 6986273c-343b-39c2-9dd1-bb8ca363c568.roa (raw, json)
Hash identifier: HmM5otcnaxL9rstfdVdahd+TZh5pbpRlaDO2oo9nZfE=
Subject key identifier: B6:74:3F:7D:38:9B:58:78:6B:E0:65:FF:E8:8C:C0:78:D8:62:5F:86
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F43285848562F3F903FAB0D261EB65480
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6986273c-343b-39c2-9dd1-bb8ca363c568.roa
Signing time: Thu 26 Dec 2024 17:01:36 +0000
ROA not before: Thu 26 Dec 2024 17:01:36 +0000
ROA not after: Wed 26 Mar 2025 16:01:36 +0000
asID: 8069
IP address blocks: 40.87.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:56:2f:3f:90:3f:ab:0d:26:1e:b6:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Dec 26 17:01:36 2024 GMT
Not After : Mar 26 16:01:36 2025 GMT
Subject: CN=f0b44eda-0727-4f3d-9eb9-d281ae4fc6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5b:f9:33:e2:d8:6f:52:d9:98:30:75:a1:91:
a0:b3:ac:ac:43:5c:8c:69:f7:17:46:13:86:ff:bc:
34:8a:e4:08:4f:7c:57:8b:f6:e4:4a:09:9b:91:e4:
1a:b4:57:62:4f:c8:08:21:21:07:b7:ea:af:d7:b6:
78:32:6e:48:3e:2c:3b:ab:cf:4d:79:4d:b3:f9:fa:
90:5c:f6:45:ae:f0:97:43:cd:dc:67:6d:e2:38:de:
41:c6:8e:c8:30:d8:4d:8d:91:fe:d6:2a:24:c4:56:
93:4b:00:1a:a5:bb:37:1c:f1:2e:f0:39:66:8c:bd:
3f:4a:c8:67:a9:9a:fe:78:54:55:26:15:a5:6e:d2:
de:01:f8:30:63:ba:ab:d5:6d:8e:9c:9c:9f:a0:a2:
73:e9:e6:a3:36:f3:b3:e1:08:02:a0:fd:1c:f4:c6:
4d:9b:e5:6c:04:d4:a6:33:92:85:a2:67:5b:e0:9f:
fc:6d:ae:1a:14:ff:50:d4:43:4e:ad:a0:15:1d:52:
90:9a:bc:7c:c9:9c:a8:63:95:f9:fb:3a:2d:0e:c3:
d7:58:43:8e:d5:50:c4:fc:c8:60:84:f9:9f:f1:42:
96:b6:5e:82:3f:b9:f4:35:0b:4d:ab:a7:32:b4:b2:
06:0f:93:07:0c:6a:d4:b4:88:b5:fb:d1:59:e5:42:
6a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:74:3F:7D:38:9B:58:78:6B:E0:65:FF:E8:8C:C0:78:D8:62:5F:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/6986273c-343b-39c2-9dd1-bb8ca363c568.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
40.87.39.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:de:66:5d:f2:74:fe:be:ef:be:cd:08:f7:7c:ff:87:72:a0:
d6:f0:89:9b:5f:00:81:19:26:e3:c5:1e:a6:f4:38:a0:dc:3a:
8e:10:ce:8b:2b:5c:f5:93:d3:2f:23:35:69:0d:e2:b2:b0:2b:
4e:ee:9a:13:e0:4b:d1:09:e6:36:c6:c5:3c:25:99:51:7e:6a:
95:01:e6:59:ef:74:22:ba:50:52:73:d5:29:57:d7:6c:ca:92:
0a:45:18:5b:03:20:c7:a8:5a:aa:a8:bf:ff:e0:f3:03:40:ac:
b3:1d:8a:fa:ef:39:e7:e3:7c:12:b0:a3:0e:25:dd:3d:cb:4d:
a9:c5:23:66:4f:be:35:be:26:81:d1:2c:d1:6e:dd:4d:d6:19:
eb:a6:01:b4:95:93:10:d5:9d:5e:13:fb:93:18:f6:c2:91:5a:
0e:36:e3:85:ab:5c:20:c7:b4:50:09:8a:fa:68:f9:ae:11:22:
64:51:36:e4:4c:da:73:c1:1e:d5:bc:5d:e1:62:3e:60:ff:eb:
6c:f0:58:48:57:f0:73:62:3f:ca:f0:3e:0d:1a:5d:7b:08:55:
c1:d3:17:01:e6:93:3f:48:ec:5d:e8:5d:05:00:74:54:e1:dc:
d1:5a:76:89:d1:5f:1f:53:0b:82:e5:e3:77:3f:b3:18:e6:76:
2a:c3:7d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:28:54 2025 by rpki-client