Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/cfceb236-8fe4-3606-ba08-df4723910ec2.roa
File: cfceb236-8fe4-3606-ba08-df4723910ec2.roa (raw, json)
Hash identifier: 0Dnq0JLUEIZNTOy2ZqFNy1DazhziUhkk+W4Z6Xgl4XA=
Subject key identifier: EC:21:A8:39:02:A4:3B:90:A0:82:B2:6A:09:70:D2:5F:92:E3:61:B2
Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial: 010D0C9F432858481DA3E643C2D99696FF0EE200
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/cfceb236-8fe4-3606-ba08-df4723910ec2.roa
Signing time: Fri 06 Dec 2024 10:55:34 +0000
ROA not before: Fri 06 Dec 2024 10:55:34 +0000
ROA not after: Thu 06 Mar 2025 10:55:34 +0000
asID: 23470
IP address blocks: 68.168.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1d:a3:e6:43:c2:d9:96:96:ff:0e:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
Validity
Not Before: Dec 6 10:55:34 2024 GMT
Not After : Mar 6 10:55:34 2025 GMT
Subject: CN=2aea9304-0895-4dea-84d4-24020e131fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:59:e6:f3:28:f2:26:3c:6f:bb:c9:d6:07:b8:
1b:1c:ff:01:37:33:50:fc:bc:1f:a4:88:52:1a:75:
0e:ed:51:16:a6:8d:21:fc:2d:0d:c4:c7:8e:8b:bd:
92:78:e0:02:3a:fc:10:21:83:9c:54:65:ad:54:17:
1b:73:cf:c9:aa:92:01:fa:f1:74:99:38:10:1a:6c:
52:00:72:8c:99:6f:ff:86:65:5f:7f:b8:88:8d:9d:
f8:ec:88:ad:7b:0d:ed:ce:7a:00:33:f4:62:57:f5:
ea:6a:2c:38:54:23:76:c5:de:82:39:c5:ee:6a:6f:
8f:8f:0d:e5:85:fc:52:28:97:e3:a4:22:b4:12:71:
cb:e9:af:6b:26:99:90:ae:d0:c6:18:e4:e6:f3:e2:
97:3a:ec:e3:2d:2b:ff:d8:42:46:14:51:d0:a8:af:
fb:fc:fb:40:80:e9:e9:e7:25:1a:d5:44:d6:cf:03:
0d:e4:cd:4c:37:c7:62:86:b8:6f:2b:95:03:c2:f8:
f4:65:7a:ed:f8:e8:81:1e:be:2a:0e:d3:23:ec:25:
15:3c:6d:eb:b3:c3:17:f7:b9:10:0a:31:9f:af:74:
8f:42:59:d7:d4:9f:c0:8b:40:1f:be:c0:92:3d:b5:
d6:8d:1d:cf:fa:cc:43:34:c2:de:5c:80:b7:8c:13:
02:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:21:A8:39:02:A4:3B:90:A0:82:B2:6A:09:70:D2:5F:92:E3:61:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/cfceb236-8fe4-3606-ba08-df4723910ec2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
X509v3 Authority Key Identifier:
keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
sbgp-ipAddrBlock: critical
IPv4:
68.168.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:7e:11:50:ca:bb:70:63:04:52:a0:9d:e0:d5:f2:af:90:2f:
7c:e9:f7:0c:0e:7e:c5:1c:e4:44:e7:09:54:1d:59:18:fb:e4:
f1:c1:f3:dd:be:50:eb:d6:68:53:ff:39:c3:75:6b:7d:c7:70:
14:06:cf:b7:47:8d:f3:6f:b9:50:9d:d5:84:18:98:0c:a3:93:
a1:f5:cf:c2:98:c7:86:9e:c1:6e:99:fd:02:dc:05:6d:f7:2e:
07:ac:3d:66:77:53:5d:27:75:a1:1d:fd:16:21:1a:6a:25:3b:
20:b6:b3:94:3b:21:3f:8b:44:0d:49:a9:4e:2e:8a:77:da:c3:
1f:02:17:cf:84:08:46:c4:9c:e9:80:16:39:79:97:b6:a0:4e:
3a:9e:e2:8e:17:40:8a:7b:d0:71:91:c9:4b:52:e7:3c:96:6d:
fb:60:21:91:73:a4:a0:dd:0c:d5:28:60:43:0c:22:5f:f9:d1:
f9:a8:52:f0:06:a4:e1:85:57:13:92:fe:19:20:3b:52:40:c5:
95:41:c3:26:e1:af:c3:7c:2d:cc:0d:dd:23:3d:03:14:0c:ba:
17:63:61:c5:d6:64:9b:05:22:87:20:05:d0:7c:09:d6:e7:1c:
a1:a1:44:92:e6:b6:45:eb:e1:8f:a7:7f:86:fb:92:a3:67:22:
b2:0a:62:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:40:56 2025 by rpki-client