Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f342d759-5e92-372e-bef5-c4dbf2076730.roa
File: f342d759-5e92-372e-bef5-c4dbf2076730.roa (raw, json)
Hash identifier: MFkiZckSuh0bg18kt7mXEajJDnGS8NbsSE0qv0WAo0k=
Subject key identifier: 84:D7:A2:63:D7:AF:D1:D8:65:AD:90:48:E1:B1:40:C2:8D:49:47:E8
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584949FEA3742E91E098B9C98D80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f342d759-5e92-372e-bef5-c4dbf2076730.roa
Signing time: Mon 24 Mar 2025 01:00:38 +0000
ROA not before: Mon 24 Mar 2025 01:00:38 +0000
ROA not after: Sun 22 Jun 2025 01:00:38 +0000
asID: 20269
IP address blocks: 68.228.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:49:fe:a3:74:2e:91:e0:98:b9:c9:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Mar 24 01:00:38 2025 GMT
Not After : Jun 22 01:00:38 2025 GMT
Subject: CN=f2296426-3be3-4e79-94e4-556fda8a2b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cb:c0:dd:44:77:80:5b:7e:b9:2d:8c:52:ab:
cf:b9:cc:25:e9:52:b8:0f:82:d9:13:9a:8f:d4:0f:
e8:44:13:bc:bb:1c:7e:f6:68:7c:cc:8e:ed:18:27:
89:23:86:c1:ac:12:60:93:33:bb:99:0d:30:8d:e5:
cd:99:96:22:56:96:1f:a7:59:2a:dc:36:72:36:3e:
0c:cc:af:b0:07:3f:4b:ac:b7:7a:a5:fe:aa:9d:6b:
be:a5:c5:1c:aa:11:dc:43:8f:05:b3:95:ae:df:15:
ed:d9:3a:e9:7c:a3:48:30:95:63:3f:04:13:ce:ce:
fd:39:0a:fa:d9:65:98:d8:31:aa:6f:69:af:b0:e9:
25:82:55:f9:fa:b7:5d:a3:34:93:f9:36:8f:f5:44:
00:a8:bd:26:79:b4:c6:16:3e:c3:73:a9:9e:f7:d0:
5f:f3:0b:79:fd:7f:63:d2:02:65:14:44:ca:cf:27:
a9:01:8f:ee:7f:14:58:42:31:6d:b3:7d:e7:77:f9:
4d:f1:8e:14:ab:db:c4:1e:df:c0:9c:50:88:5b:aa:
10:29:f2:f6:f0:a9:8d:0f:ad:f9:05:30:49:47:90:
9f:16:a1:2b:70:c3:39:f0:09:63:f5:ec:81:7b:fa:
16:ad:20:44:f5:1a:19:02:60:58:9e:ac:fb:98:b1:
fb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D7:A2:63:D7:AF:D1:D8:65:AD:90:48:E1:B1:40:C2:8D:49:47:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f342d759-5e92-372e-bef5-c4dbf2076730.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.228.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:b5:26:d2:36:5a:54:ac:00:26:03:30:ac:e8:ed:df:f5:88:
2d:01:6e:ba:fe:86:da:9a:eb:24:52:ed:88:f2:23:6b:b5:2a:
dc:d3:77:71:80:99:3c:0d:93:48:52:58:61:c4:75:86:01:12:
c0:36:cd:11:a1:19:76:1d:c9:80:91:37:ce:65:d7:e9:16:34:
b3:fc:17:d1:d3:03:23:0f:cb:e0:5e:45:b3:ae:de:22:7e:81:
02:3f:53:85:be:64:ad:37:c7:1f:c6:87:23:2d:40:ec:5e:ac:
5c:9c:9c:13:9e:61:af:65:ac:78:90:c2:32:a1:c0:0e:6a:e0:
07:24:16:66:a8:68:05:82:f6:ef:0f:c2:f5:f4:25:66:f8:89:
62:5b:c2:72:a4:7d:86:2f:9c:4f:42:70:e6:c3:c7:c8:f9:b0:
df:ca:70:4f:17:30:bc:e6:c6:a6:d8:5a:bf:7e:7e:f4:99:53:
cc:f9:ea:24:e8:d7:44:6d:87:59:63:f3:8c:b8:20:f7:02:f0:
14:24:ab:2d:21:75:b4:6c:55:bd:a0:3f:6c:93:ca:d0:45:32:
8c:93:8f:93:8b:d7:af:58:4d:1b:5a:5a:b8:e0:86:41:6d:2f:
96:49:bf:2d:e4:ea:6a:7f:07:ca:43:5e:27:c9:6d:0f:09:58:
b2:27:8d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:02:16 2025 by rpki-client