Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0d868be8-3913-3e46-9d8f-a0cb7bd1234a.roa
File: 0d868be8-3913-3e46-9d8f-a0cb7bd1234a.roa (raw, json)
Hash identifier: Xop5w31UopNUuTkqjYa6ex/Ys/pj68Qt8yHHVoTJ4Y8=
Subject key identifier: AC:A3:C8:9A:D3:A4:F6:FE:5F:2E:64:22:0A:1C:6B:98:20:A5:98:64
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D1816AA2021FC753142500
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0d868be8-3913-3e46-9d8f-a0cb7bd1234a.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 68.191.248.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:81:6a:a2:02:1f:c7:53:14:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=8abbe467-dfc0-4aad-8c7f-ac5a83cfc574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:72:40:f2:80:6a:4f:94:a7:39:7b:7e:e3:d4:
d2:1d:17:09:87:32:e2:d9:0a:80:60:ba:e3:b3:a2:
4f:ae:9e:c6:37:81:79:c9:17:08:af:72:09:b5:06:
f7:27:38:91:33:fc:26:f3:cc:7b:91:ef:cb:79:0d:
50:f2:45:a5:66:70:f9:79:b0:8a:2e:f0:c1:8e:6e:
cc:c8:7f:12:87:70:89:d6:97:2c:0f:c6:d2:e0:20:
2d:10:7b:bf:1b:18:0b:85:b2:bb:db:cf:0e:89:0e:
f1:12:c7:a8:7c:21:0d:56:75:4f:8e:f0:7d:0f:dd:
ed:03:79:de:f1:73:07:e2:8c:36:83:ad:52:8e:fb:
b5:43:8f:7c:14:23:7f:b1:e9:b9:be:86:b8:99:90:
3b:ca:52:e7:18:f8:a7:50:dd:0d:48:09:46:77:b6:
48:0d:3d:4c:a4:2f:11:9f:0d:7a:57:da:02:db:a6:
e1:b9:dc:68:63:49:e4:22:e9:13:01:99:f1:93:ed:
3d:8f:f4:33:3f:6c:c5:77:2d:52:60:51:5f:0b:31:
bf:b5:d2:92:e4:69:b9:ea:e8:27:77:7c:24:95:ee:
01:2d:34:5a:68:95:67:60:24:c6:a6:fa:f9:d9:5d:
a7:b2:c4:51:e8:76:e8:5a:16:c1:5e:28:ed:7f:0b:
a0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A3:C8:9A:D3:A4:F6:FE:5F:2E:64:22:0A:1C:6B:98:20:A5:98:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/0d868be8-3913-3e46-9d8f-a0cb7bd1234a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
68.191.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:e1:13:61:25:15:60:25:c1:8a:f0:99:24:82:c8:f0:78:0b:
4f:f9:9d:51:b5:a0:4b:66:38:d8:1c:c3:3c:99:58:f2:05:ff:
4b:c1:be:b3:6e:74:cd:37:67:55:e8:76:92:52:05:c0:bc:21:
f7:6d:16:cd:d1:d6:54:18:ec:4a:35:07:19:83:e2:31:d6:ff:
98:c2:34:86:f5:9a:69:fb:f3:c5:39:4a:0a:ff:6b:65:b4:6b:
d0:49:51:a1:8d:a6:78:b9:b2:b7:9e:89:27:e0:12:66:72:08:
e2:b7:9a:a5:98:a3:c0:a5:9e:29:6f:a6:0d:e7:71:79:0a:51:
b0:cf:ab:37:7e:ee:8f:36:7e:21:8f:b3:25:9b:83:b6:7f:07:
44:b4:e0:80:e2:d3:c9:f6:1c:61:01:99:05:d2:26:9c:50:2a:
2e:3d:9e:54:6d:d2:1f:f7:10:61:a5:89:9b:46:44:a8:ac:ef:
d3:c3:3d:61:20:71:5f:4c:53:ae:19:70:20:56:47:4a:78:94:
e6:12:d0:59:22:2b:37:3a:9f:69:87:88:ce:3b:06:6e:54:fc:
0a:71:8d:9b:2d:86:f4:f8:26:39:cc:7e:25:6e:36:91:06:a3:
49:b7:6d:54:c2:19:ad:a3:4a:49:b6:5e:c1:9b:44:ef:48:c7:
30:a5:82:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:55:45 2025 by rpki-client