Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/2d398258-1b86-35d8-933f-e3df7eab5377.roa
File: 2d398258-1b86-35d8-933f-e3df7eab5377.roa (raw, json)
Hash identifier: 7SYOCqOfowzrslRDAdoQeb4gnwn21cl/x8nAZTwFVjY=
Subject key identifier: 0E:62:69:B6:A3:BB:74:05:97:40:5A:43:8A:44:59:ED:61:2B:FF:BB
Certificate issuer: /CN=0eb1645c-1aee-439b-8505-4341c9574690
Certificate serial: 010D0C9F43285849552952BD82AB6F6F6C4C5970
Authority key identifier: 8C:8F:65:60:F6:34:70:EF:39:A8:B0:4C:B4:E7:8D:9C:E9:DA:FF:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/2d398258-1b86-35d8-933f-e3df7eab5377.roa
Signing time: Fri 28 Mar 2025 01:00:41 +0000
ROA not before: Fri 28 Mar 2025 01:00:41 +0000
ROA not after: Thu 26 Jun 2025 01:00:41 +0000
asID: 396239
IP address blocks: 68.69.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:55:29:52:bd:82:ab:6f:6f:6c:4c:59:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb1645c-1aee-439b-8505-4341c9574690
Validity
Not Before: Mar 28 01:00:41 2025 GMT
Not After : Jun 26 01:00:41 2025 GMT
Subject: CN=24e581d1-777b-43d9-98ae-a811b8e32289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:14:9d:92:f7:13:8e:90:54:98:09:04:95:c9:
33:d8:93:ee:f2:50:41:b0:b3:53:05:e0:c0:b2:97:
e6:d3:16:94:b7:5c:b3:94:12:2f:a4:df:fe:b0:18:
18:47:91:5c:4b:70:6a:30:26:c1:93:44:41:9d:88:
ac:1a:78:71:14:93:ac:6f:dc:fa:e0:e6:e7:e0:1a:
02:11:95:15:3b:67:9c:e9:c3:02:d4:80:87:41:d8:
5f:d2:a1:59:bc:c5:71:c6:1b:67:86:df:8c:70:4d:
ef:cd:74:9a:8c:84:7b:56:14:88:ae:0b:6c:a4:22:
1f:6d:81:7c:de:63:60:23:2d:90:b8:94:d2:f9:5f:
60:97:41:0f:44:ad:95:4e:87:c6:b6:d0:62:7d:2d:
fd:ca:2d:a2:8d:d0:81:7c:1e:1c:dd:f7:32:3d:db:
29:3a:34:93:e5:7f:ab:cc:fc:85:4e:e3:95:41:3b:
8a:a8:fd:64:11:ef:39:5a:d0:f1:68:d6:58:33:b2:
50:3e:20:bf:50:d4:82:a5:45:5f:0a:2d:10:82:8d:
96:1e:53:a8:1e:71:17:e3:fc:0e:9e:07:d5:08:7b:
d0:32:a6:3e:0d:9f:79:3d:5c:74:45:92:31:5f:af:
fd:51:e9:2f:7b:80:a5:e8:c3:8b:4b:e0:96:fc:5e:
6e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:62:69:B6:A3:BB:74:05:97:40:5A:43:8A:44:59:ED:61:2B:FF:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/2d398258-1b86-35d8-933f-e3df7eab5377.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.crl
X509v3 Authority Key Identifier:
keyid:8C:8F:65:60:F6:34:70:EF:39:A8:B0:4C:B4:E7:8D:9C:E9:DA:FF:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer
sbgp-ipAddrBlock: critical
IPv4:
68.69.116.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:7b:f4:c8:19:87:fd:4b:12:1a:8a:20:87:f4:ce:7c:b4:26:
bf:75:ea:ed:4e:42:fc:46:a2:dd:26:02:6a:a2:f1:14:81:32:
d4:76:d8:f0:31:ca:34:df:a5:35:a0:7b:98:ea:8a:6d:bd:5a:
3f:f5:63:b1:6b:1d:74:b2:38:31:4f:78:0b:90:59:4b:a6:a8:
db:b3:ba:3c:b6:cc:8e:c3:10:76:98:f4:54:29:ce:a3:38:e8:
c0:2b:30:37:38:ed:c2:9b:19:3c:65:be:53:b2:bc:46:95:cc:
fe:bc:e6:1a:d8:2b:aa:92:11:7c:d7:e4:d5:0c:6d:98:89:3f:
81:d7:30:ae:7d:6e:b3:6d:55:a0:35:5e:ac:a7:09:f1:3c:77:
ab:09:66:c4:f1:5c:b7:a4:2d:46:76:3a:b6:56:8a:1a:a0:dc:
a9:62:0a:9b:df:af:8d:ef:64:c6:44:57:df:62:91:53:56:76:
c0:df:1d:54:50:00:a9:1d:bc:36:14:50:05:80:6e:5c:6c:54:
0c:c2:13:bb:f9:92:d9:2c:77:21:4e:5b:ed:14:61:30:5d:0a:
f3:87:59:46:d0:4f:3a:cf:bd:51:4b:60:40:ac:d4:47:47:c8:
93:b2:27:0d:e4:44:44:8d:76:b3:21:e7:11:c2:58:67:24:a4:
59:d7:f4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:10:09 2025 by rpki-client