Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/60523804-6701-3c22-9743-09e45be5071e.roa
File: 60523804-6701-3c22-9743-09e45be5071e.roa (raw, json)
Hash identifier: MzrEfkxca4KEhg60xlAbTQnnOW8Dru+dKtNfxUOi5ic=
Subject key identifier: 0A:59:90:7E:19:10:43:17:2E:C9:A8:9A:53:46:2D:57:F5:E6:61:0D
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584917DC35DE5C6F8EAE9A02B8E0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/60523804-6701-3c22-9743-09e45be5071e.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 18973
IP address blocks: 198.138.68.0/23 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:35:de:5c:6f:8e:ae:9a:02:b8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=a12fbcd5-ca7c-4246-8a96-478cd33cbf40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:68:60:8a:d9:2e:3b:2e:8f:11:85:cb:9c:68:
0c:ba:bb:09:53:06:fa:2e:bd:b1:e0:48:f2:23:73:
57:77:02:08:a0:60:9d:f9:ea:44:eb:33:24:8f:7f:
10:19:4f:a4:9b:27:3f:fb:f0:7d:75:99:45:3b:02:
73:f6:ec:8f:1a:76:4a:3f:34:82:fc:e3:c4:03:7e:
05:48:03:a8:07:23:e0:4b:cf:c9:a8:bb:15:d8:62:
c8:ab:3c:de:75:ad:20:97:3b:f9:b5:ae:73:d6:e4:
13:db:8d:76:0d:e7:8e:43:fc:34:8a:82:da:50:fe:
9b:43:56:0f:ca:06:0c:2e:a4:5d:db:99:54:3f:33:
9f:ff:c0:26:f8:db:b7:ae:15:20:81:4f:fb:79:dd:
fc:61:78:ac:0b:83:f8:23:24:1e:51:3b:ca:0f:05:
00:da:61:c1:62:3c:33:3a:6b:65:34:d1:20:81:18:
46:99:67:fe:b9:43:7d:7b:64:1b:e6:1c:43:3d:07:
82:82:51:73:0f:dc:b2:74:8d:a9:e3:2c:0d:4f:76:
23:c8:bf:c6:b3:1d:7c:83:35:00:1a:57:19:b1:7c:
27:b9:5d:1d:84:b3:81:04:77:65:ff:9a:92:e1:85:
e0:d7:4c:0c:60:23:10:37:f2:d2:33:90:a4:c7:67:
64:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:59:90:7E:19:10:43:17:2E:C9:A8:9A:53:46:2D:57:F5:E6:61:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/60523804-6701-3c22-9743-09e45be5071e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
198.138.68.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:c8:fc:dd:c9:8e:33:6f:a6:8c:0b:3f:51:b5:1f:d6:07:ff:
99:2f:a2:1e:b5:fb:2d:bc:60:74:89:21:36:91:13:cc:3f:5f:
29:7b:3d:e2:53:df:03:23:c7:eb:f0:a7:ec:ea:d0:4b:ff:39:
5d:c4:a2:7f:aa:cf:e1:1b:6e:3c:50:1d:31:fc:02:9b:45:ba:
ba:67:57:e5:d4:06:ba:90:ad:ad:dd:6d:4e:94:65:d6:71:05:
0c:59:9b:ab:29:3c:a4:1c:ad:77:cc:8d:86:e2:9c:bc:67:1d:
93:34:82:f5:2e:a1:28:b8:dc:54:82:8a:b4:9f:fe:25:d9:ba:
20:8a:60:7b:6f:8a:d9:2d:46:f3:61:e9:ae:2b:e1:48:e6:eb:
5d:dd:3d:20:a7:48:d4:15:eb:ce:34:32:33:67:d6:15:78:d1:
b8:2d:d1:5e:3b:02:8f:ec:74:45:a9:17:5e:b3:01:ab:7c:4e:
b3:a4:ea:67:4f:2f:ea:ff:9c:57:d2:2e:82:0c:6b:46:f6:e4:
b6:16:2b:b5:bf:47:6f:db:17:0d:7c:a0:3f:8e:ba:5d:3b:a9:
24:97:ef:47:af:a9:85:28:22:70:57:6a:ea:61:92:7c:db:65:
aa:5b:25:de:0e:ba:ea:63:c4:9c:aa:27:77:c7:c5:81:1a:5c:
ea:5c:2e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:34:10 2025 by rpki-client