Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/479384b1-d41c-3e4d-83f2-176a5be6410a.roa
File: 479384b1-d41c-3e4d-83f2-176a5be6410a.roa (raw, json)
Hash identifier: IYwUSmSlN8vJB0nA3xkXXKQ6ZaRJiUkgqYC3iYuD4bY=
Subject key identifier: 23:31:58:1E:C4:2B:83:94:6F:A4:FF:44:3D:DC:F0:F4:E1:E9:C7:81
Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
Certificate serial: 010D0C9F432858492CAE89CC9DB03333FC2B5DA0
Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/479384b1-d41c-3e4d-83f2-176a5be6410a.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 8987
IP address blocks: 68.71.236.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:89:cc:9d:b0:33:33:fc:2b:5d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=6e3b0157-6923-4d43-852f-cc221f047fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ea:88:80:29:b5:9d:55:f1:70:4f:eb:2b:0c:
65:25:c7:8f:56:9b:71:7a:b1:7a:71:10:c6:76:91:
e2:e8:aa:48:80:c1:f0:1e:f7:ab:b8:da:6e:d3:3a:
48:d9:af:4b:b1:26:da:9c:26:6c:c3:42:ed:0b:89:
e3:28:94:7b:ed:94:bd:78:bf:00:52:02:12:26:d0:
97:8a:3d:50:c9:3a:ba:a5:3c:e0:e4:9b:26:82:fb:
e6:2e:bc:d3:df:0d:8d:38:ed:c7:95:d2:37:29:aa:
af:e8:6b:70:2a:51:0f:d3:98:05:38:eb:d4:6e:77:
e6:7f:09:4a:6d:28:c0:0a:59:5a:70:92:bf:02:e5:
ab:ce:99:b5:6b:62:63:8e:3d:5c:e2:12:80:22:2e:
34:67:55:98:19:23:f8:9a:eb:d2:51:cd:9b:2a:a0:
a1:99:db:63:ee:de:8c:3e:d1:40:98:ee:c8:0d:45:
88:3b:50:61:26:43:e3:da:ee:49:1a:49:ee:a8:9e:
c2:db:f0:7f:f9:8c:2e:36:77:b4:e9:7c:b3:53:b1:
e3:d3:3f:6c:fe:95:76:3f:1f:02:b8:21:7f:96:37:
f2:5b:62:63:06:95:23:12:2d:17:87:7f:4c:6e:05:
c2:a0:1b:1a:ef:ef:ca:0c:0d:2c:51:e5:aa:e5:8d:
3e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:31:58:1E:C4:2B:83:94:6F:A4:FF:44:3D:DC:F0:F4:E1:E9:C7:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/479384b1-d41c-3e4d-83f2-176a5be6410a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl
X509v3 Authority Key Identifier:
keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
sbgp-ipAddrBlock: critical
IPv4:
68.71.236.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:a8:90:11:ed:f3:56:04:a1:01:b3:55:7b:f2:52:91:4c:a4:
f7:e5:0a:1c:38:12:68:b0:b7:4b:e1:3d:f4:ac:fa:18:ed:1a:
48:34:c3:9d:fb:9d:0d:ef:e6:d1:be:f5:77:93:b4:57:32:58:
57:a9:03:78:85:3e:47:85:06:f7:58:af:91:58:70:00:fb:54:
4b:f5:95:22:3c:ef:dc:09:46:90:b6:1c:fb:85:a4:63:cd:15:
28:31:1b:c9:e8:d4:e4:36:04:5e:65:28:44:dc:0a:e9:33:64:
27:fe:7d:cf:b5:bc:48:10:27:46:de:00:12:db:f5:68:94:c3:
60:27:1e:3a:f0:d8:3b:8b:97:1e:96:eb:ea:21:b8:74:3a:88:
c2:62:f8:70:59:a4:ea:17:19:25:4c:49:38:dd:3a:fb:02:41:
a4:0f:cc:e2:a8:18:a7:24:3f:60:ff:67:b4:f5:ff:86:c9:d6:
45:8b:42:f7:7f:67:5c:68:86:ad:72:c6:9b:86:46:09:81:ff:
69:3b:cf:43:18:8b:31:43:b3:b6:0a:cf:3f:b0:7e:20:1d:7b:
91:17:78:49:7e:61:65:37:45:e7:fa:97:e4:e5:26:32:cb:eb:
7d:a9:af:ed:35:7e:2b:c0:e1:15:9b:95:5a:fc:a1:1e:82:4c:
08:2a:4f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:29:01 2025 by rpki-client