Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/a03aef01-0070-379b-81cb-1850b2ef308d.roa
File: a03aef01-0070-379b-81cb-1850b2ef308d.roa (raw, json)
Hash identifier: Wp+Z8JxLJt8WEpEEG4qCF2KItIYdrg0IKE2iXJr/Ilo=
Subject key identifier: BB:A2:25:40:1D:22:03:AC:B3:C0:7E:B3:17:D3:CF:00:B7:9E:C0:1E
Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial: 010D0C9F43285849287E538BE8C2C79CF3D97690
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/a03aef01-0070-379b-81cb-1850b2ef308d.roa
Signing time: Wed 12 Mar 2025 01:00:39 +0000
ROA not before: Wed 12 Mar 2025 01:00:39 +0000
ROA not after: Tue 10 Jun 2025 01:00:39 +0000
asID: 3651
IP address blocks: 68.24.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:28:7e:53:8b:e8:c2:c7:9c:f3:d9:76:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Validity
Not Before: Mar 12 01:00:39 2025 GMT
Not After : Jun 10 01:00:39 2025 GMT
Subject: CN=0cf786dd-6a60-45ae-a205-69ef6039ed9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bd:5c:d3:9a:b5:5d:17:d2:57:b1:14:b3:0d:
2b:2a:70:6c:81:bb:f1:3a:d7:24:8f:87:d7:06:1c:
46:e0:6f:b6:f1:df:cd:1d:d8:14:b5:48:a1:fa:5e:
e4:cb:54:0b:46:06:d4:fe:3c:02:07:50:12:df:65:
35:5f:2c:80:9c:34:8e:f4:f5:f6:49:3a:b5:4f:15:
ef:08:52:e2:a0:f5:44:df:8f:69:7d:c1:f1:b1:a5:
61:56:a1:15:ad:36:84:3d:81:35:42:10:a9:70:de:
d5:f6:f9:f3:9e:bb:85:69:07:cb:b6:8e:13:5a:29:
34:f3:36:ac:8d:e9:18:9a:93:68:a8:89:f5:3e:75:
86:71:e6:56:70:a9:41:4b:0f:3b:71:76:6e:24:a5:
f2:22:df:c4:ac:fd:86:82:15:bc:cd:f1:e4:bd:cd:
fb:10:00:04:ff:89:cd:4e:18:3f:77:17:b7:21:0b:
53:9b:68:ad:cb:d5:ab:81:16:97:23:6e:fe:db:35:
7d:db:b0:3a:b2:68:47:d8:99:7c:0f:09:6a:34:7e:
ef:7a:2d:29:8d:36:f3:b8:a4:18:3b:17:f1:03:96:
25:2c:0c:7f:c8:b3:7f:4e:c7:03:4d:e1:90:e2:70:
e6:e9:84:5d:25:fd:bb:f9:64:0d:a4:dd:61:22:16:
35:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A2:25:40:1D:22:03:AC:B3:C0:7E:B3:17:D3:CF:00:B7:9E:C0:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/a03aef01-0070-379b-81cb-1850b2ef308d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
X509v3 Authority Key Identifier:
keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
sbgp-ipAddrBlock: critical
IPv4:
68.24.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:f0:b6:2b:37:28:4b:c0:bc:6a:98:31:87:72:31:07:5b:06:
e2:a4:59:8f:1f:4a:95:63:71:ec:d3:fa:df:38:77:32:e0:05:
c1:04:80:34:ec:7e:90:a2:f6:54:10:28:83:88:6c:c9:ca:75:
f0:ab:9f:20:18:9d:72:91:43:44:7a:2f:ef:c1:4a:2b:00:46:
9d:a4:71:3a:59:78:7f:f4:0d:52:61:dc:04:63:49:61:70:4b:
9f:31:e1:ae:8a:74:d8:50:6f:31:65:8f:1e:4e:4c:6c:4c:3f:
9c:8f:f4:47:4d:e1:0d:2f:c6:64:06:bb:86:e0:47:7b:f1:9e:
57:f8:9f:40:02:96:3c:37:06:b9:7c:85:29:01:4d:33:28:0a:
5a:10:02:45:1a:56:7e:00:2b:8b:ed:7b:d8:bb:98:a8:a7:2f:
a6:2e:b4:a5:f0:00:ff:ae:57:dc:bd:cb:0d:40:12:2f:57:9a:
e1:fb:ae:a0:ee:74:87:04:fe:85:83:6d:9a:4f:43:94:d9:df:
54:bc:a5:7e:ce:92:a4:58:1d:6b:52:67:f9:d6:84:05:f6:bc:
54:7b:2e:5e:ca:b0:ad:df:ec:28:cd:5a:58:36:1f:6a:cf:05:
4c:93:3a:56:94:30:70:53:ad:f6:dd:d9:ff:ea:66:bd:f9:70:
fa:d9:0d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:10:22 2025 by rpki-client