Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4b413c04-5a71-3230-83e5-f43cd8a9d626.roa
File: 4b413c04-5a71-3230-83e5-f43cd8a9d626.roa (raw, json)
Hash identifier: W90DJX1tTTLMrmZZ6xuUm5rKp5HyPZSWS8YVwyP4xXY=
Subject key identifier: 7A:19:86:31:FE:5E:8C:28:1B:28:07:E2:35:E1:14:A6:AF:25:F5:2C
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848BBBB74A174486CA98CFCCDE0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4b413c04-5a71-3230-83e5-f43cd8a9d626.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 852
IP address blocks: 68.182.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:74:a1:74:48:6c:a9:8c:fc:cd:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=07322187-6245-44b1-b091-b56371e31acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2e:e5:cc:0b:38:bd:16:94:68:c3:83:16:bd:
2e:16:41:ac:d6:dc:ba:5c:5b:02:b4:1d:15:1d:01:
64:d7:07:df:62:02:d8:1c:28:65:16:fa:6c:84:22:
02:f5:a9:9d:4a:00:81:14:9d:98:fb:00:df:46:fa:
4a:c8:15:ec:8e:84:67:48:de:0c:ad:52:83:5f:e8:
f4:48:35:83:d4:77:47:6f:93:ab:7b:a0:b5:f3:a1:
eb:5f:44:b1:d0:bb:5e:49:d8:e7:ae:b9:fe:6d:92:
20:e5:3a:17:0d:4c:f4:dd:d4:4b:2d:ba:f6:80:8e:
fd:1c:e0:37:c9:5f:d4:71:7c:58:2c:d6:9b:d6:28:
be:69:c6:d6:13:bf:d3:5c:15:e1:56:3e:03:96:c2:
54:6c:a6:03:3e:ae:8d:cb:f9:a9:91:93:fc:de:17:
8f:86:fa:f5:65:3a:81:c2:2e:59:bd:74:86:d6:cf:
aa:95:f4:e5:65:17:64:c1:3b:76:df:8b:c0:f1:81:
b5:65:3f:f8:67:61:27:38:f6:40:e7:d1:03:ae:6f:
21:59:c2:37:ff:70:f1:2d:02:8a:bf:cb:1a:33:26:
84:ce:15:ea:45:e4:01:d3:67:b5:73:ef:a9:08:8d:
de:bf:2d:52:0d:91:68:c1:16:b0:d0:46:89:c8:be:
4e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:19:86:31:FE:5E:8C:28:1B:28:07:E2:35:E1:14:A6:AF:25:F5:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4b413c04-5a71-3230-83e5-f43cd8a9d626.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
68.182.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:b2:12:99:11:29:2d:4b:94:66:13:84:bf:04:60:29:5e:ef:
35:8f:29:d6:ef:95:b6:82:10:a7:71:a2:9b:f9:58:30:cb:43:
36:9e:4b:e8:22:cd:5b:21:6a:b3:80:be:d8:82:1c:62:aa:53:
f9:5e:62:04:fd:b8:f0:3e:6d:11:d8:f1:e9:d3:0b:56:c2:3a:
dc:94:95:13:4f:b3:8f:cd:6c:1a:4e:12:d4:71:28:fc:6b:57:
aa:b9:82:78:7c:a1:52:40:69:da:a4:c3:16:f9:90:93:98:80:
0e:8d:0b:02:86:a4:32:01:28:ce:ed:d7:df:7e:aa:8e:42:1a:
d3:c8:f1:4a:19:7d:51:1c:09:b9:82:ca:c6:07:e0:ff:c1:76:
77:4d:5f:89:13:11:53:78:c0:bc:bd:8d:10:24:13:d6:f2:08:
d4:6b:f6:38:2b:6a:d9:17:03:56:a5:cb:c3:2a:bb:3b:6e:5e:
2a:db:65:f2:97:b0:1c:73:47:0d:76:46:d0:b6:82:32:df:07:
59:48:47:9d:cc:07:46:8f:3d:d8:8a:50:3f:80:5f:62:92:10:
4b:06:d0:26:1b:0f:e2:a6:79:95:d5:86:e5:04:4b:f2:33:27:
34:e9:49:11:5a:f1:cc:3f:05:c0:87:8f:ea:37:53:20:16:99:
07:f9:50:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:15 2025 by rpki-client