Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8c03a67f-b0a7-3c8a-9cab-d27202ea0e2b.roa
File: 8c03a67f-b0a7-3c8a-9cab-d27202ea0e2b.roa (raw, json)
Hash identifier: 7OMdNpkzUMOwbb0NHzizvL5dMKEezPwzYLWoO7H0gVQ=
Subject key identifier: 1D:3D:BC:C6:D9:19:A8:B2:19:B2:35:4A:6F:79:CE:38:C2:77:96:A5
Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
Certificate serial: 010D0C9F43285849194189215E340DE7DA9AF860
Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8c03a67f-b0a7-3c8a-9cab-d27202ea0e2b.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 21663
IP address blocks: 68.71.224.0/24 maxlen: 24
68.71.225.0/24 maxlen: 24
68.71.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:89:21:5e:34:0d:e7:da:9a:f8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=29fb6f30-5c5b-42fc-9d6a-d1354c1ade8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:57:be:ac:21:1a:15:0b:35:eb:8d:72:27:c9:
7f:43:b5:b0:31:7f:f1:ae:f7:df:5e:2f:b8:14:20:
eb:36:af:e4:b1:0e:42:54:86:a1:e5:6d:33:c1:28:
96:fb:49:b4:76:17:5c:e9:cd:4c:c9:c5:df:ad:86:
3b:8b:49:15:6e:89:5d:13:5e:c6:ef:c2:46:73:35:
50:32:a4:47:3f:7c:6e:46:d9:81:43:3b:6e:46:3f:
4e:ce:24:a0:58:41:de:4a:15:e4:0f:82:ff:53:0e:
02:48:16:a8:45:02:15:7a:fb:3f:43:b4:43:24:98:
62:22:84:e2:3d:61:75:15:7e:64:20:16:e7:3d:38:
57:0d:a6:d7:c2:4f:80:88:71:62:81:76:47:c2:05:
3c:e8:06:c4:e5:0b:53:96:88:c0:2f:94:43:10:f8:
9f:94:18:28:8c:f4:71:79:14:d2:d6:7b:af:94:1b:
ed:33:5f:50:ac:fb:77:2c:fe:52:db:75:b3:c9:3e:
f1:67:64:54:23:02:a4:f0:99:94:b6:5b:b3:2b:e4:
79:0a:9a:3e:1f:3c:55:0a:d3:f0:d9:a2:3b:5a:50:
cd:53:2e:b6:08:e3:0c:bb:02:ac:15:77:2d:7b:b7:
37:6e:b7:94:ca:1c:51:a2:84:20:c3:bc:9a:c2:5d:
a2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3D:BC:C6:D9:19:A8:B2:19:B2:35:4A:6F:79:CE:38:C2:77:96:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/8c03a67f-b0a7-3c8a-9cab-d27202ea0e2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl
X509v3 Authority Key Identifier:
keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer
sbgp-ipAddrBlock: critical
IPv4:
68.71.224.0-68.71.226.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:01:1f:84:23:ee:06:5b:a3:41:65:69:e0:1f:fa:47:b5:8a:
29:c5:a2:7d:5d:0a:ff:1f:80:a4:fa:2a:74:ca:65:bb:b8:9b:
a4:05:bd:9a:cc:3a:32:4f:6a:6b:d3:99:6f:2a:b7:d4:ac:27:
4d:81:0e:c6:3f:b3:04:eb:af:a9:00:c2:70:79:62:d1:5f:d3:
0e:6c:c2:41:d5:48:81:df:7b:d5:fc:f8:53:bb:21:88:be:3c:
b9:78:21:21:fb:29:b0:ee:ce:f0:09:67:3c:93:b7:86:78:05:
8b:f9:0e:43:b6:bf:c9:30:90:1a:66:2c:cf:77:2b:e3:f5:58:
e9:21:a3:06:f8:1d:33:9f:a9:ec:2a:97:e5:26:c8:ab:e5:97:
fb:9c:4e:7e:6a:b1:7e:98:ef:70:74:42:25:a3:92:aa:6f:ed:
c6:4d:5c:5a:6f:24:fa:b3:25:ae:eb:08:bf:8d:b0:fb:2a:3c:
7d:24:f7:df:ba:da:b9:5d:32:0f:eb:2e:97:32:71:ef:0d:8b:
86:b4:c0:17:0c:0a:2f:fe:21:62:41:bd:ba:7a:ec:fd:33:55:
a8:9f:3f:64:26:48:3a:ef:07:e7:7b:7b:1b:d9:e2:f6:5b:2a:
8a:81:0c:c3:e6:9b:ae:f9:5e:be:fd:60:ed:1c:8b:b5:ad:8a:
4f:da:79:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:03:33 2025 by rpki-client