Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/bde921f9-630d-3469-bec3-ac3de6d723b6.roa
File: bde921f9-630d-3469-bec3-ac3de6d723b6.roa (raw, json)
Hash identifier: hYEndnnTp1bR6EmuHm3A+xjX5RDMEo65Hkuxi2YL9q0=
Subject key identifier: F0:85:73:DC:8E:EC:C0:B8:34:42:0A:F4:72:2D:54:A7:B9:1C:3C:2C
Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Certificate serial: 010D0C9F43285848AF2B82DA0449C307064A5900
Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/bde921f9-630d-3469-bec3-ac3de6d723b6.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 11990
IP address blocks: 68.233.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:82:da:04:49:c3:07:06:4a:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=6ea87bd2-ff23-4afe-a956-0aa332587294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c1:c8:47:6d:4e:12:1d:71:de:1e:56:9e:ce:
22:fd:2e:04:ee:51:cc:51:b6:82:4d:83:c5:ff:99:
8d:38:75:9c:8d:da:37:96:17:e0:ca:74:e6:ab:8b:
8a:74:be:ac:dc:3e:2e:2e:10:af:aa:23:85:56:8b:
a8:28:f9:97:03:4b:59:06:d3:5c:c3:08:bf:92:36:
23:4d:72:fa:fc:b5:ea:a5:e9:ac:62:67:05:95:82:
b2:2a:dc:14:a1:90:90:5a:e9:8b:3b:12:28:b2:8a:
dd:69:7a:04:73:b6:e6:da:37:08:55:e8:07:ec:68:
12:ad:b0:5e:d1:02:5c:1e:f8:79:b0:37:51:0e:7b:
2b:92:2d:00:50:b8:b8:84:3b:d1:1b:ce:1a:5a:ff:
38:b4:dc:b9:39:16:28:52:14:71:61:fa:82:51:07:
c4:ef:86:fb:5d:96:2b:69:de:15:8b:49:50:92:e0:
4b:db:5e:7b:cd:35:50:21:e5:3b:0e:32:0e:0a:f4:
3c:7c:4b:3e:8a:0e:00:a9:31:b7:f8:4a:55:cc:69:
4e:ef:75:51:4a:e0:3a:70:45:d3:07:a9:0d:0f:17:
db:6d:ad:fe:25:78:ab:b6:0e:4f:3d:c3:32:9c:17:
90:fa:06:ca:a4:4f:64:d5:69:bb:88:79:b9:0c:29:
1c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:85:73:DC:8E:EC:C0:B8:34:42:0A:F4:72:2D:54:A7:B9:1C:3C:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/bde921f9-630d-3469-bec3-ac3de6d723b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl
X509v3 Authority Key Identifier:
keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
sbgp-ipAddrBlock: critical
IPv4:
68.233.41.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:a5:99:f4:74:8b:8d:6f:ac:1a:d1:b7:4e:05:12:5e:27:96:
23:eb:14:ed:ef:53:14:01:3f:db:79:84:cd:1e:1b:04:83:34:
01:4a:70:d6:9a:03:e4:f1:ca:4a:f9:9e:1d:23:01:b0:ba:45:
41:64:10:4a:fa:10:02:35:3d:51:be:2e:cc:48:a6:27:14:16:
48:82:28:da:a5:a1:1d:4c:bd:26:a0:48:96:3c:ac:49:89:23:
95:7a:49:d4:38:8d:58:eb:67:5d:9e:49:98:d6:49:8e:a2:18:
b9:3d:1c:10:df:bd:76:cf:d6:08:00:61:05:9b:cd:60:19:c4:
fa:11:e2:a1:c8:64:57:a2:f0:ed:a6:55:55:fe:3a:53:f2:bc:
61:7c:4b:37:6b:00:23:83:d7:e8:42:b2:40:65:c8:c2:eb:29:
18:41:2a:9a:7b:4d:e4:7a:77:f8:5e:71:4f:44:50:7b:27:bf:
94:0b:c7:af:9d:39:0d:46:49:f9:ed:e3:5a:ed:c1:f8:22:73:
7f:b3:dc:f4:48:70:35:14:05:f5:66:4a:16:34:0f:a5:83:63:
bf:f1:b0:7c:3a:9f:20:a2:5c:70:a3:0c:1e:32:10:26:90:d1:
65:63:ba:2d:99:db:94:ca:b4:6b:d2:dc:96:b3:b9:3e:8d:24:
45:1f:6c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:07:22 2025 by rpki-client