Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/ccaf4e02-9e30-3f29-bf04-4ee0a5e9e204.roa
File: ccaf4e02-9e30-3f29-bf04-4ee0a5e9e204.roa (raw, json)
Hash identifier: 8+eYEI5CiTHECSue19xpk5z8llAP2DiwtyB1pOZzskY=
Subject key identifier: 4F:71:21:B9:E1:2D:9D:84:42:4F:7F:88:BD:C0:FD:DB:83:76:04:4A
Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial: 010D0C9F4328584883E5C45F1CA67DEB936BD298
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/ccaf4e02-9e30-3f29-bf04-4ee0a5e9e204.roa
Signing time: Sun 12 Jan 2025 02:00:38 +0000
ROA not before: Sun 12 Jan 2025 02:00:38 +0000
ROA not after: Sat 12 Apr 2025 01:00:38 +0000
asID: 63150
IP address blocks: 68.168.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:83:e5:c4:5f:1c:a6:7d:eb:93:6b:d2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
Validity
Not Before: Jan 12 02:00:38 2025 GMT
Not After : Apr 12 01:00:38 2025 GMT
Subject: CN=ffa43924-f97c-4797-a346-43757d5a88a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:36:16:2e:e1:dc:78:a4:30:c0:61:c3:1d:ae:
2a:c9:03:94:7e:48:14:6c:ef:91:26:70:fe:0c:7a:
29:2b:67:1a:52:17:52:69:5c:d1:11:a5:fd:69:96:
69:ac:4c:cd:4b:f3:8d:6a:38:44:69:a6:2a:01:8c:
9f:c4:7d:4c:cf:17:8d:b4:5e:bc:56:b5:26:d1:09:
3b:26:59:fa:b9:59:d4:99:4c:be:1e:3c:69:83:a2:
a3:40:3a:c7:da:ab:46:30:71:b7:7c:66:dc:70:af:
f8:23:54:ee:b7:ea:58:ce:b3:14:cb:99:75:02:ab:
db:ff:4f:cb:d7:bb:65:35:61:72:91:f0:9f:c8:61:
c5:5e:48:64:d1:ae:55:fe:44:24:c5:33:d1:2f:45:
58:cb:d1:ff:8f:63:5b:0b:16:ba:3a:21:45:2b:2b:
5d:ec:68:a4:f6:45:4a:fe:48:52:66:3b:c4:ec:ea:
50:73:ad:88:e5:37:9b:de:01:9c:ac:c8:a1:1a:74:
65:dc:ef:f9:83:8c:38:fb:cd:0a:9c:71:51:aa:2e:
6a:b4:6e:5e:c2:77:88:9a:63:f5:40:47:4e:f1:1a:
0f:cd:2d:6c:ce:ac:99:de:f3:8f:ee:52:48:8e:ef:
42:e0:09:1d:ca:c8:93:5c:91:a6:76:0d:1b:03:72:
9f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:71:21:B9:E1:2D:9D:84:42:4F:7F:88:BD:C0:FD:DB:83:76:04:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/ccaf4e02-9e30-3f29-bf04-4ee0a5e9e204.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
X509v3 Authority Key Identifier:
keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
sbgp-ipAddrBlock: critical
IPv4:
68.168.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:37:51:8d:02:da:2b:dd:29:d8:e9:43:1d:77:18:76:42:a0:
9a:5d:f7:1a:1c:eb:22:e1:09:e4:36:51:c8:59:be:89:2c:8d:
97:92:99:71:dd:31:8c:1e:53:09:8b:21:f5:df:55:d9:d1:78:
b8:f7:1f:0b:d5:99:92:51:bc:68:e6:14:d9:75:f3:1a:5d:01:
b4:bc:30:7e:f8:1d:b6:d1:a5:8e:d3:9a:21:d3:6e:36:76:bb:
ba:97:4f:d7:af:ba:c0:88:9a:35:56:10:70:f2:4b:82:78:1c:
99:de:af:df:c2:66:ad:2d:36:fd:70:b6:37:38:f1:c5:38:b5:
9b:b4:33:0a:dc:4a:f5:e5:b5:24:6a:c5:7b:0a:e8:0c:65:e2:
04:5b:cc:35:a7:d2:5f:ee:ac:0c:c1:49:71:4d:da:fd:35:57:
d8:31:08:b1:06:3a:ce:a9:74:dd:b3:4d:ee:09:95:21:b6:e7:
64:0a:bc:95:18:ef:79:4d:a0:c1:2b:be:63:c3:88:3f:88:5d:
4f:9c:48:65:6f:01:87:00:b5:ac:4c:df:e6:cc:9c:15:d9:03:
e5:1d:8b:7f:56:e5:c3:58:e2:bd:11:d2:1a:d6:ff:62:11:2f:
1b:87:29:d2:05:fc:3c:f4:d2:a0:17:68:d5:63:bf:c5:3b:4d:
93:2a:ee:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:49:58 2025 by rpki-client