Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/6200cb4a-8b52-3d8a-9b05-e28ae07ae2cc.roa
File: 6200cb4a-8b52-3d8a-9b05-e28ae07ae2cc.roa (raw, json)
Hash identifier: 9nMk8THtNexngDHUoGmu8/0whOox+cB4CDQMA84VnzA=
Subject key identifier: 58:67:FC:F8:DB:42:CA:8A:F1:3F:0E:33:BA:B7:40:BF:29:03:C0:A9
Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial: 010D0C9F43285848A565F5B48187247B12FFD700
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/6200cb4a-8b52-3d8a-9b05-e28ae07ae2cc.roa
Signing time: Fri 24 Jan 2025 02:00:39 +0000
ROA not before: Fri 24 Jan 2025 02:00:39 +0000
ROA not after: Thu 24 Apr 2025 01:00:39 +0000
asID: 11233
IP address blocks: 69.1.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a5:65:f5:b4:81:87:24:7b:12:ff:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Validity
Not Before: Jan 24 02:00:39 2025 GMT
Not After : Apr 24 01:00:39 2025 GMT
Subject: CN=eef88674-be2f-4a3d-8db3-36b76bbdf772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:81:37:54:4a:c3:d5:b6:d1:56:0e:d9:57:64:
05:df:63:b7:68:0b:70:de:7b:f8:a3:22:c7:a0:c1:
75:fc:c6:0a:1f:0b:9f:76:1b:ed:a4:13:d0:51:13:
26:78:3c:a1:c9:c8:a3:45:99:d7:34:b6:b3:70:9e:
16:0c:67:97:06:55:c1:7e:ac:6a:c7:54:30:10:16:
e2:39:62:ef:3b:f1:12:72:c8:5e:9f:0f:3e:d6:1c:
26:26:c2:41:7a:54:bb:5d:9a:01:49:29:37:1a:3d:
c0:4c:34:5d:2f:75:91:58:46:f1:c2:4e:9c:0c:9a:
7b:5f:45:4a:dd:72:7b:50:cd:37:54:09:1e:28:38:
3e:30:9c:c1:c2:63:ee:d7:f3:06:bd:59:be:99:08:
f3:6c:e9:ce:a8:50:7a:e6:23:32:37:02:e2:b0:00:
6e:12:f0:65:8e:24:41:12:0a:6b:5a:ff:17:f5:fe:
7d:6c:d5:58:a4:79:53:af:3b:9a:e4:1d:8b:d6:a7:
15:8d:ee:de:70:c6:1e:23:67:8e:0a:2b:15:31:7c:
1c:1f:a6:3c:8d:c2:e7:f1:f8:97:ea:e7:7c:b3:47:
32:ee:ba:26:b7:55:6c:52:d1:f8:74:d2:d2:cd:7b:
cf:5f:fd:cd:fe:5e:cd:3f:88:6b:c2:4c:c6:5a:fe:
52:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:67:FC:F8:DB:42:CA:8A:F1:3F:0E:33:BA:B7:40:BF:29:03:C0:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/6200cb4a-8b52-3d8a-9b05-e28ae07ae2cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
X509v3 Authority Key Identifier:
keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
sbgp-ipAddrBlock: critical
IPv4:
69.1.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:66:fc:d7:de:03:40:88:2c:36:3a:1f:af:62:c7:d1:89:c5:
d2:6e:b5:33:77:0e:e6:47:53:ce:2e:cb:c4:9e:92:06:c8:a1:
9b:90:c5:53:c8:35:01:1e:b2:c8:f9:c3:d9:d0:7e:9d:26:3b:
fe:5a:1f:08:60:b7:17:a9:5e:c5:f3:7c:d7:4a:a0:cf:a6:0b:
73:c9:15:59:51:e3:66:6c:c8:bf:3e:ef:6e:7f:0b:d3:cb:cf:
86:82:28:ea:33:43:cf:23:b2:b6:74:f2:f5:99:4e:27:ef:97:
fc:0d:ad:41:b9:6d:8c:cc:d1:cb:53:5a:12:00:64:d0:57:2d:
8b:38:48:f4:95:4e:61:7d:b7:96:70:b5:fc:ac:39:a7:6e:fe:
d3:6d:30:7c:48:24:6f:61:fc:e3:e0:55:35:de:94:f6:95:d0:
36:75:19:c9:45:45:cc:9b:07:95:e5:8a:ae:16:df:ab:52:e8:
5c:b9:45:7f:ee:09:fe:26:fd:d3:be:8f:fe:18:4a:37:b1:20:
b9:b8:3c:ff:2f:c8:f8:95:11:fc:c0:45:41:76:97:ed:d7:fe:
e1:82:9b:7a:82:64:1a:57:1f:42:8c:8a:e2:42:f5:5e:50:ab:
43:61:3e:9b:08:6a:8a:e8:74:e3:2b:06:c7:dc:b4:f2:af:a9:
15:72:9b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:11:11 2025 by rpki-client