Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14c3f237-275e-3833-a08b-5bf8d7087ed1.roa
File: 14c3f237-275e-3833-a08b-5bf8d7087ed1.roa (raw, json)
Hash identifier: 0DUXo5AndwMzZS/O4+Ba5qvQdUOFlfqcrwgLHIlsbrY=
Subject key identifier: B6:46:E7:B6:4C:41:B1:4C:BF:BA:89:9D:BB:45:BF:C5:98:D2:C4:B9
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F04C0001C417CCB547B460
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14c3f237-275e-3833-a08b-5bf8d7087ed1.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 68.238.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:4c:00:01:c4:17:cc:b5:47:b4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=898dc741-bb2c-449f-bb7c-a9745114cf0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:32:73:3c:f6:c4:b2:68:95:1c:78:33:12:75:
8c:e7:69:c1:da:24:f3:0e:3e:3e:46:27:72:86:b8:
f1:94:d7:59:95:c1:43:09:2c:76:21:1a:4b:14:79:
82:4e:f8:25:b8:d1:30:bb:86:e3:02:af:d6:18:9c:
c1:e3:a5:78:9e:b5:61:a3:89:eb:df:86:dd:80:43:
23:ea:13:d8:00:cb:d1:1a:18:fe:1b:f3:57:f4:cb:
d9:5a:ca:b7:6e:1d:c1:9d:58:7d:2a:b1:0c:e1:9a:
7c:b8:bb:60:a9:1e:09:ff:65:89:2d:d5:b6:38:5d:
9e:5e:eb:5d:13:71:49:e2:2d:df:2a:28:53:fb:d9:
95:b0:37:d1:4c:c5:49:ba:36:63:24:4e:3f:53:1f:
e0:d7:26:f6:49:32:db:8a:30:81:33:5a:51:07:7e:
4b:e8:e8:7f:ce:b8:91:38:bb:c2:6c:25:56:1d:c6:
c7:8a:a4:3a:a4:c1:89:af:8b:d5:24:f0:34:81:df:
99:59:d8:f5:e9:69:70:51:97:f6:bd:86:be:3c:72:
40:28:ae:30:bc:5f:21:48:7c:02:6a:9d:1a:54:c8:
b4:c0:03:ff:55:5f:a0:c3:d3:c4:2b:4c:9a:68:17:
92:e1:6b:9e:5c:50:8c:f6:fa:22:8d:87:21:13:4a:
ab:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:46:E7:B6:4C:41:B1:4C:BF:BA:89:9D:BB:45:BF:C5:98:D2:C4:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14c3f237-275e-3833-a08b-5bf8d7087ed1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
68.238.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:2a:fc:e7:d2:51:7d:0f:dd:c6:bc:b5:8b:00:d8:1f:6c:2a:
1b:c0:62:32:e0:97:8e:81:c2:bb:67:38:8f:8b:53:5d:8b:21:
2b:4c:ea:ca:c1:3a:df:25:49:be:c2:24:fa:69:65:bb:60:cf:
4d:eb:72:cf:87:bf:ce:42:fe:d8:5c:14:d8:84:c8:65:d8:18:
08:66:70:1e:d0:b0:86:e4:b2:95:c5:31:5b:c7:7f:84:a2:df:
ce:f3:7a:7d:80:d0:21:93:75:bc:30:70:ee:71:7d:ce:c7:20:
15:6d:78:d2:2a:aa:b5:11:1b:1d:36:07:ff:fc:c3:2c:70:1f:
2f:93:da:13:8c:01:42:eb:f3:41:79:f2:76:5e:59:36:63:40:
a5:ec:57:54:c2:46:85:c0:20:ce:87:92:fb:99:b7:e7:d7:63:
a9:62:68:cb:ab:cc:c3:4e:d5:1e:f1:e8:34:ef:1f:62:7e:41:
be:7d:76:1f:bd:53:29:d0:3e:a5:84:70:83:d1:82:3d:77:79:
b4:90:bf:ea:93:b6:a6:5c:a9:2c:35:26:45:ad:f9:6c:d5:f5:
89:4f:46:aa:06:1a:30:17:0d:30:f7:9e:96:70:f6:19:8c:23:
15:c9:b5:2e:f8:0d:19:0a:78:91:ca:e6:62:92:45:c9:7e:db:
5d:eb:0b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:04:12 2025 by rpki-client