Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/8ab98763-57d8-3406-a6ea-f78fae4ed6ca.roa
File: 8ab98763-57d8-3406-a6ea-f78fae4ed6ca.roa (raw, json)
Hash identifier: nlwmCy7alZCZn6ohm4hGaHDcrhDp4Rv99sIpEkg5Cms=
Subject key identifier: 96:E4:84:99:8F:BC:8B:7C:B9:52:A0:9C:B3:4C:47:A1:97:42:8B:7A
Certificate issuer: /CN=d1f3fb34-9d61-4476-8110-8ca2876e7928
Certificate serial: 010D0C9F4328584812D5336455AFE61893654B00
Authority key identifier: 1D:5C:6D:97:7B:0E:D0:8B:17:07:49:4E:9F:2D:CF:14:CE:B9:8A:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/8ab98763-57d8-3406-a6ea-f78fae4ed6ca.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 14618
IP address blocks: 68.70.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:33:64:55:af:e6:18:93:65:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f3fb34-9d61-4476-8110-8ca2876e7928
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=fdcd22d9-b5ef-4ab9-bdae-408d4c8e6542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7a:6f:5c:d2:ad:25:7c:15:7f:6c:f4:eb:cf:
c0:13:0e:68:a5:79:52:2b:29:f6:55:49:f4:1e:55:
32:9c:f9:10:76:b9:b0:86:d3:f2:96:61:21:da:25:
d8:6d:5a:b0:9a:e4:f7:3b:42:a6:b1:f2:a7:70:79:
40:c1:17:c6:e4:5d:2f:11:7d:03:3d:e8:44:77:02:
d6:0f:92:b0:2d:6d:1e:bf:66:d4:67:65:49:ce:fe:
0c:09:b3:9d:9a:f2:8e:21:9c:38:8f:5b:29:f8:29:
40:17:04:fb:d4:1c:ae:6b:2c:96:c3:86:44:97:66:
31:05:98:1b:4e:a9:37:59:7a:af:63:d3:08:f8:a2:
1f:67:22:97:57:dd:3f:5e:12:89:6f:ea:ec:16:cb:
72:ae:c7:11:41:33:10:8d:4c:bf:67:37:8b:19:6c:
49:73:48:8c:8e:93:41:89:7a:bf:a3:2b:87:b7:b9:
ad:37:4f:ec:90:e0:64:5d:a9:4e:42:a6:0d:d4:c6:
c4:89:2a:49:b5:84:5c:b1:cc:95:45:f6:28:46:d9:
85:f8:e3:c4:23:1a:89:24:cf:e3:ce:83:bb:ad:ec:
16:86:a3:a1:38:b6:a7:7d:ce:0c:6c:19:62:97:cc:
a1:5f:78:57:60:0d:0a:2e:f4:3b:84:f4:aa:4b:ff:
d6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E4:84:99:8F:BC:8B:7C:B9:52:A0:9C:B3:4C:47:A1:97:42:8B:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/8ab98763-57d8-3406-a6ea-f78fae4ed6ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/d1f3fb34-9d61-4476-8110-8ca2876e7928.crl
X509v3 Authority Key Identifier:
keyid:1D:5C:6D:97:7B:0E:D0:8B:17:07:49:4E:9F:2D:CF:14:CE:B9:8A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928.cer
sbgp-ipAddrBlock: critical
IPv4:
68.70.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:e5:ac:73:ae:b1:1a:4b:78:26:c2:97:95:17:f2:a3:3e:73:
ea:df:23:00:02:91:5f:2f:9c:40:b0:8f:f1:60:f0:6a:ce:a9:
1e:b5:3e:e9:61:03:66:c2:fc:74:f1:54:e5:72:a7:53:d5:a3:
00:dc:d0:e8:d9:d0:f2:1a:5c:13:2f:b8:e5:c9:a6:46:cf:e5:
08:6d:df:aa:8a:d3:98:a4:77:fa:dc:4b:69:e4:9a:a9:c4:32:
09:da:91:3a:67:2d:82:a8:0b:e6:ca:6c:9c:90:9f:af:19:14:
3a:4c:f6:9a:8d:91:97:7c:4d:0d:20:6f:b4:76:23:ad:c4:07:
45:55:76:73:14:bb:7a:41:3d:08:08:a9:3f:6f:a0:01:1a:20:
15:0d:7e:ae:de:b5:de:84:3e:5e:c4:3f:cc:d3:19:fc:1e:41:
91:e8:f3:29:29:b2:80:7f:8d:0f:51:ad:40:f5:b1:4f:cf:56:
ef:43:92:d9:93:45:03:93:58:7c:81:73:e4:aa:1d:29:f2:e0:
3d:d8:f5:90:b0:1b:79:0b:d3:f2:89:89:af:b7:db:46:17:4c:
b4:19:23:db:cd:ec:b9:e9:de:25:37:94:9f:88:76:f9:0d:e0:
45:d2:a2:c2:4c:bb:de:3d:ee:3a:c3:03:52:da:ad:19:23:a6:
54:2f:af:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:25:22 2025 by rpki-client