Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d17c9e8-cc80-3e47-be57-1a2dcade844b.roa
File: 8d17c9e8-cc80-3e47-be57-1a2dcade844b.roa (raw, json)
Hash identifier: GcAmF1HYypSq6GTfyXmsUGgrEg776CBrnhmieJsnuCo=
Subject key identifier: BF:A3:74:39:3F:5D:42:24:86:50:9B:1F:03:A9:2D:E1:03:52:9A:B1
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB430B9A3887B02C45ED00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d17c9e8-cc80-3e47-be57-1a2dcade844b.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 701
IP address blocks: 68.161.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:43:0b:9a:38:87:b0:2c:45:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=24c2f9e4-0830-4902-8a9b-0660fb43f120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:20:24:b4:3c:ef:e0:80:95:9c:9a:f5:8c:1a:
c8:aa:ff:01:bd:e4:ad:45:9e:ca:d8:7e:2c:6d:f4:
d4:79:5e:21:3d:7b:cb:5c:59:7a:d8:ef:c9:be:85:
81:ce:b2:e3:17:be:40:4b:02:ec:59:90:70:af:3f:
ff:bb:a1:13:fe:0c:ba:04:69:09:e4:83:8d:fb:6c:
0a:4c:23:fc:fa:7b:48:c5:cd:40:98:1d:a1:98:c6:
4d:dc:7b:ca:c9:a9:56:dd:f2:70:d8:87:6f:20:8b:
3f:43:b9:21:bb:c5:33:89:a7:89:4e:32:89:55:31:
3d:80:d2:cd:f3:34:62:18:7c:20:fc:34:33:0a:ba:
34:95:fa:15:1d:d5:b1:a9:62:0b:65:71:93:26:cc:
cf:6a:f7:f3:88:19:eb:47:bb:c2:40:32:ea:f8:04:
c4:c2:ab:b0:8d:12:e7:e4:b5:2c:fd:b9:15:08:e7:
b9:d4:02:73:1b:8b:3c:59:16:46:d8:31:1b:e4:64:
c9:f9:37:48:8e:7f:c8:82:ee:33:52:e6:e2:e4:3c:
29:11:f8:aa:1c:53:25:a6:10:30:0f:2e:c5:ac:88:
c4:7e:98:23:60:25:ba:ab:0b:7a:25:90:78:cb:16:
42:c1:b4:8c:2d:c5:6f:f7:8c:76:8a:a4:89:eb:37:
61:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A3:74:39:3F:5D:42:24:86:50:9B:1F:03:A9:2D:E1:03:52:9A:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d17c9e8-cc80-3e47-be57-1a2dcade844b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
68.161.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:e6:e8:8e:16:7f:84:b8:27:7a:55:0b:41:e3:02:c9:70:7e:
b6:1f:d4:ba:29:b9:3f:3b:c0:28:e1:a8:9c:ea:c1:d7:3a:a2:
b0:82:6d:4a:5d:05:41:f2:70:5a:a9:90:f5:d7:92:38:3f:75:
a7:4e:c6:fa:c7:bd:a1:08:6e:fb:6f:fe:b2:9d:18:5b:a9:05:
c1:d7:2d:8f:8b:a9:46:ef:83:af:84:88:e7:fc:34:14:aa:82:
88:0d:3b:cd:07:7b:b6:76:fb:fd:53:5a:a0:e1:38:97:33:6c:
a3:7a:1a:68:6c:af:f3:89:48:6a:8e:46:ec:c5:d0:37:64:bd:
3f:df:70:02:f5:db:c4:96:27:68:a3:f0:ea:47:87:61:7e:d4:
64:bc:51:f4:9f:67:07:fe:78:b9:f4:57:9a:53:8f:53:a9:09:
db:3b:c4:cb:62:2c:91:33:71:12:d6:63:89:80:4c:9f:38:52:
8f:21:42:db:21:d0:9b:16:9f:9f:0b:67:e6:36:bc:21:d9:45:
8b:a8:4c:73:03:7a:6a:87:ca:30:07:6f:3a:3d:09:4c:a3:27:
d7:4c:da:71:61:11:ca:b8:9c:3c:4f:d8:56:3d:26:64:13:26:
c2:ad:3d:e4:5e:e7:77:f1:6a:83:ff:73:57:9c:1b:75:a7:80:
7f:3f:34:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:43:19 2025 by rpki-client