Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/4e5e6a2c-bd25-3d00-8a1a-43b8beb7a353.roa
File: 4e5e6a2c-bd25-3d00-8a1a-43b8beb7a353.roa (raw, json)
Hash identifier: +UBStPamUVccLjVRGtJDJKzdfvQfMMSqZEAgTiywhgU=
Subject key identifier: CA:72:79:35:6E:81:D6:BC:CE:D9:1D:7D:59:6F:2D:DE:11:11:5A:FD
Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial: 010D0C9F43285847F584EEE480AC6A76B7AD7800
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/4e5e6a2c-bd25-3d00-8a1a-43b8beb7a353.roa
Signing time: Fri 22 Nov 2024 02:00:40 +0000
ROA not before: Fri 22 Nov 2024 02:00:40 +0000
ROA not after: Thu 20 Feb 2025 02:00:40 +0000
asID: 834
IP address blocks: 68.67.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f5:84:ee:e4:80:ac:6a:76:b7:ad:78:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Validity
Not Before: Nov 22 02:00:40 2024 GMT
Not After : Feb 20 02:00:40 2025 GMT
Subject: CN=4a8934ea-b6c3-4094-8f09-485a6c040f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f9:e4:60:3e:d3:7c:e0:ff:21:3f:01:02:4c:
23:93:f0:a4:5e:ce:e1:d6:85:77:49:6d:b6:31:b9:
e4:60:78:18:cc:4e:57:0d:bd:95:83:a7:53:1f:f0:
f7:64:7b:da:85:93:94:a9:a9:54:e9:ab:ac:fd:f4:
2d:67:12:b5:11:e8:fa:b2:8b:b1:e6:5e:8a:9a:e2:
b0:4e:2f:99:3f:76:8b:56:66:13:13:0c:b1:8f:43:
4f:6a:cc:f2:f9:af:d5:63:ff:0d:8d:23:ce:fa:9b:
cc:03:18:25:ef:20:7a:b1:43:3e:37:9a:06:ba:f1:
a7:21:0e:f0:5f:e6:69:a4:14:3c:39:28:3b:74:88:
79:63:c2:07:77:ff:ce:c5:30:c7:9d:38:dd:75:4b:
e3:72:04:e4:59:ce:70:3b:c6:74:fa:2c:99:eb:47:
28:de:e4:62:80:b2:c9:76:13:9e:1d:b3:f6:9f:c0:
60:03:51:80:f4:db:14:c0:13:d6:82:12:39:21:9a:
39:f9:7d:f9:c3:23:41:d0:d8:bc:69:0c:fa:18:69:
8b:95:ac:db:1f:a0:cc:d1:21:9a:1f:ae:1d:12:98:
c3:48:75:1f:f3:82:22:4e:f8:7b:57:b5:1a:57:bd:
fe:f4:eb:16:05:00:c4:a4:5d:38:23:9b:0e:aa:dc:
bd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:72:79:35:6E:81:D6:BC:CE:D9:1D:7D:59:6F:2D:DE:11:11:5A:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/4e5e6a2c-bd25-3d00-8a1a-43b8beb7a353.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
X509v3 Authority Key Identifier:
keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
sbgp-ipAddrBlock: critical
IPv4:
68.67.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:f9:d5:c8:6d:e0:d8:d8:d7:82:2d:6b:86:be:21:3c:a9:4b:
24:02:a6:a9:99:45:0e:eb:97:86:c0:22:be:d2:21:14:74:4e:
14:20:5f:18:dd:94:f5:f4:8c:64:28:aa:a6:c8:24:2a:dd:af:
75:cb:56:61:f4:f5:88:a2:aa:3f:ae:d5:75:60:13:f0:aa:f5:
1b:8b:63:f8:bc:9d:d4:8d:4f:5b:85:fc:48:29:1d:86:88:5e:
c8:f7:0d:e5:27:f5:12:ed:24:80:2c:56:34:5f:a3:76:80:ab:
3c:64:6b:3d:b7:b6:af:f4:9c:6c:52:e5:5a:07:a4:7f:72:60:
38:17:d1:9c:9c:d6:8b:65:9d:d4:20:e4:42:37:da:84:71:e0:
d0:bf:b2:ce:38:c5:ba:cb:8a:d3:13:d6:7d:52:d6:91:16:db:
53:62:94:f0:09:4a:94:7b:08:4a:2e:c1:27:5e:05:c2:d7:be:
3d:9f:03:4f:89:44:aa:4f:64:9b:ce:01:59:2d:1d:4a:6e:e1:
92:77:e9:57:fd:e4:ac:4c:3c:0c:76:9e:d0:bb:6c:e5:25:6e:
04:7b:c9:a2:a7:f7:11:2c:3f:55:6b:a7:fa:bc:05:5a:98:df:
66:7d:7b:21:21:43:51:3e:91:d8:55:ea:c1:43:1e:bb:32:89:
ce:a0:93:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:26:43 2025 by rpki-client