Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/301f747c-f596-37f9-9cd1-754db5fcf638.roa
File: 301f747c-f596-37f9-9cd1-754db5fcf638.roa (raw, json)
Hash identifier: aiAIbXjWHvFCevZWY13ZbW2MNoVyfW9JWH7R/Ehn/pU=
Subject key identifier: C3:BB:39:08:AE:87:2A:DA:DB:25:FF:BC:85:D9:BF:AF:56:35:CD:C5
Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial: 010D0C9F43285849287E511B7386D5BC37CE4E80
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/301f747c-f596-37f9-9cd1-754db5fcf638.roa
Signing time: Wed 12 Mar 2025 01:00:39 +0000
ROA not before: Wed 12 Mar 2025 01:00:39 +0000
ROA not after: Tue 10 Jun 2025 01:00:39 +0000
asID: 21928
IP address blocks: 68.24.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:28:7e:51:1b:73:86:d5:bc:37:ce:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Validity
Not Before: Mar 12 01:00:39 2025 GMT
Not After : Jun 10 01:00:39 2025 GMT
Subject: CN=5e44cee6-0741-4486-9746-10c35e341715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fa:a8:c1:1c:d0:03:95:19:95:02:26:d1:02:
22:63:ac:fe:36:55:e5:06:b0:c9:5b:10:1f:e0:e5:
a5:38:7e:ff:86:68:70:1c:d4:ee:9a:6a:04:ea:90:
66:f8:cb:af:88:7d:7f:90:4b:51:0b:17:d0:4f:24:
56:c0:7a:45:be:9b:36:9c:55:6c:ef:db:93:d4:7a:
1c:6c:60:6a:01:12:6a:3c:22:fe:dc:6c:d1:33:dd:
ee:a8:db:fb:ea:ef:c0:4a:99:12:4a:2b:8f:a6:66:
bb:ce:0c:52:d3:c6:42:7f:f9:73:44:43:44:12:27:
e4:b7:32:70:2f:5e:09:5a:67:9b:49:d8:36:20:98:
76:21:55:69:25:c0:78:01:48:d6:db:20:b2:15:f8:
4b:d8:4b:52:cf:70:4f:0f:be:c2:38:c4:c6:c4:8b:
80:0c:e2:7a:f1:2e:5b:75:e4:7e:46:9d:ea:7c:35:
c5:aa:74:b4:ff:1c:9a:6b:5d:36:0e:03:be:f5:04:
79:8a:19:a8:f4:d8:2c:a3:5a:35:dc:54:ff:43:6a:
45:4b:87:0e:9f:28:03:93:89:fb:86:ff:62:a2:15:
b2:81:07:50:3e:c7:19:94:2e:f4:d8:93:4e:30:8d:
77:69:f7:fe:d5:3c:d2:f0:0c:2e:7a:81:b5:0b:01:
f1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BB:39:08:AE:87:2A:DA:DB:25:FF:BC:85:D9:BF:AF:56:35:CD:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/301f747c-f596-37f9-9cd1-754db5fcf638.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
X509v3 Authority Key Identifier:
keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
sbgp-ipAddrBlock: critical
IPv4:
68.24.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:23:af:5c:f1:09:22:b5:5a:dc:df:53:7f:11:c4:57:ee:c6:
a6:21:b8:1f:7a:cf:fc:dd:fa:29:68:64:d7:81:49:61:9b:5a:
a1:aa:c0:e4:25:83:87:9d:1a:10:eb:48:8f:a4:b8:b0:eb:70:
57:73:bf:ea:cf:34:40:1a:b3:9f:3d:c5:90:89:18:54:20:73:
e8:39:84:d7:a4:30:23:aa:b6:c1:bc:e1:02:ca:59:33:bf:bc:
36:a3:39:45:12:3b:67:29:f2:a8:92:43:6e:0e:45:de:34:ae:
8b:40:86:e0:4b:54:f6:2d:b3:9b:f4:a1:15:31:bf:e8:67:b9:
1a:fa:3c:58:d0:53:de:a5:50:a6:1a:fd:78:ec:0b:3c:ab:63:
1a:2d:2b:29:15:2c:a4:91:68:d0:b4:0f:9f:aa:bd:77:19:1f:
19:ba:d2:42:c5:34:50:26:14:0d:3c:24:e9:be:4f:bf:e2:0c:
04:65:88:12:2d:b0:b5:b1:62:cb:16:a1:22:19:8b:15:89:7d:
53:26:e2:aa:9a:8f:7b:e2:ed:c0:62:f5:8c:ac:df:bb:d4:3d:
10:23:1b:6e:33:30:5a:fc:ea:6a:93:f2:b8:12:a1:17:9d:6a:
6f:7e:b9:34:c0:19:d6:04:b7:6d:fb:80:52:c9:66:e7:e3:66:
ba:96:20:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:15:11 2025 by rpki-client