Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4b63a081-9d93-3de1-8d23-f282154d9442.roa
File: 4b63a081-9d93-3de1-8d23-f282154d9442.roa (raw, json)
Hash identifier: PygVacJm8JOi66acYE9bmzrwPIOnuM71miHyoEO0Yfo=
Subject key identifier: 7C:AD:3D:F8:85:97:7E:3C:8A:65:C3:6A:9C:58:26:65:93:31:81:35
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858482BF567E408A20F541B579000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4b63a081-9d93-3de1-8d23-f282154d9442.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 701
IP address blocks: 68.163.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:67:e4:08:a2:0f:54:1b:57:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=89730590-9d83-49a0-b647-b3430e06e970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f4:60:78:7b:58:f4:94:d5:07:57:3d:ce:a0:
0f:9c:9c:7c:83:c1:73:47:4d:e8:de:de:81:42:d7:
89:54:af:0a:1d:d3:eb:5c:8d:4c:44:78:d5:73:29:
32:ea:59:5e:61:ce:2a:bc:cb:94:ec:b5:9c:c5:67:
55:c3:69:0d:08:32:ae:db:fd:38:6f:ef:47:65:49:
73:b5:3f:ec:63:5c:7b:82:72:cd:61:0a:de:93:d8:
07:e4:4c:38:f5:91:da:c5:5a:2c:bb:c5:63:1c:83:
31:46:dc:5c:12:5e:f4:38:60:40:e4:b8:e2:b3:7c:
0f:bd:a8:88:70:03:f4:e3:1f:51:1b:07:65:60:92:
1d:8b:04:a6:58:ad:90:4b:1d:d7:bc:29:31:f5:97:
ef:f3:32:cc:b6:02:70:56:42:39:98:14:54:aa:d2:
c4:15:d6:b8:2e:d3:f1:fd:f6:9f:48:dd:f8:f2:78:
be:12:f0:ed:f5:0b:3c:0e:17:4d:a3:c9:d5:e2:7c:
0e:5d:4b:45:e0:66:f2:af:21:0a:0f:00:a0:93:3a:
86:30:a0:cd:14:96:27:5f:ff:51:94:e5:11:de:75:
6e:ac:bc:b9:5d:d9:b6:7d:15:ee:80:9c:e2:2f:b1:
69:05:ba:8d:2f:4e:06:ae:43:63:2f:4c:60:7e:de:
26:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AD:3D:F8:85:97:7E:3C:8A:65:C3:6A:9C:58:26:65:93:31:81:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4b63a081-9d93-3de1-8d23-f282154d9442.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
68.163.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:02:a3:f2:55:c8:fd:db:48:17:71:dd:7a:15:ac:6b:17:3e:
39:18:74:2d:24:06:bc:59:b8:15:65:0f:27:ee:75:03:5c:23:
cb:79:c9:b5:32:4a:2c:48:f3:75:f0:1d:85:c3:f5:dd:40:dd:
2f:5c:0a:55:92:e4:3b:a6:19:53:40:77:38:fe:6f:bd:21:b2:
00:3d:37:54:d9:08:66:b3:c0:10:57:15:dd:5b:52:87:dc:eb:
e7:bb:e2:0e:63:69:1f:c8:eb:55:e4:71:df:5f:a5:82:1b:54:
48:0a:34:1d:1e:0d:9f:55:38:6a:5d:31:1d:59:bb:91:52:6a:
e1:95:2a:52:fe:8f:91:5a:26:42:ec:90:aa:b9:2b:03:3f:87:
3f:63:c9:02:b7:9a:f0:c4:cc:a0:c4:a0:16:a1:61:25:ae:24:
df:bb:f1:0d:a4:23:d2:ff:3b:03:77:99:8f:f7:d8:1a:2b:81:
13:55:46:e9:88:ba:e1:bd:1e:e2:48:94:73:d4:c7:0d:da:06:
76:87:88:88:3b:ba:44:54:74:6b:17:4b:47:a5:21:9d:0d:14:
bd:52:d9:53:29:84:f9:2b:88:50:4e:12:fe:ae:84:24:d7:48:
2e:67:73:2e:9f:36:0f:12:63:ec:93:c8:e3:9a:39:15:64:bf:
c8:ac:d6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:35:06 2025 by rpki-client