Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/c08e30e5-3667-3503-bcb1-0922ab5c7c45.roa
File: c08e30e5-3667-3503-bcb1-0922ab5c7c45.roa (raw, json)
Hash identifier: 7P2hSbqUyLi6KoNB7aCBPEjbp2N7/XGNJde/+1FWruo=
Subject key identifier: 2D:F0:49:53:94:74:73:43:85:CF:8D:09:A5:4B:32:98:02:26:83:A6
Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial: 010D0C9F432858494B642DF4FAF0E5676333FA00
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/c08e30e5-3667-3503-bcb1-0922ab5c7c45.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 11404
IP address blocks: 68.66.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:2d:f4:fa:f0:e5:67:63:33:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=c9ad1e22-d393-4082-a9df-dc2642a302f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b6:19:bf:bd:08:2e:b5:fc:1d:92:fd:d3:86:
e3:80:c9:be:08:8f:e3:07:bd:7c:29:89:09:f6:87:
b2:75:4f:e2:2e:4f:07:14:8b:73:4a:33:51:5a:4c:
59:c9:78:6a:98:bd:23:1a:28:7f:45:15:8a:bb:54:
97:44:f1:05:45:d4:4b:e8:c2:94:db:d5:80:62:22:
ac:5e:c2:d4:53:85:80:74:8f:ac:67:38:b7:e4:3c:
bc:2d:a1:32:de:0c:c9:64:b0:fc:0f:f0:30:9d:a5:
d3:99:9e:a2:a7:62:2f:5d:b0:c3:bd:9a:76:7a:19:
61:8f:af:27:a2:e2:2a:54:2a:f3:e4:c5:cc:5b:32:
60:d2:70:d6:fa:13:cb:f5:16:e0:d2:73:2f:d9:ca:
7a:c8:92:d0:25:72:d2:52:f0:13:27:6a:78:6b:1d:
b4:c0:85:e6:7e:d7:01:b6:8c:30:93:65:f7:6d:90:
45:ce:a2:4d:52:3d:41:1b:b7:3e:d2:ca:38:47:3b:
b8:15:4e:f3:a2:65:06:8d:3f:77:4e:8c:f6:90:bd:
4b:af:e7:67:8c:41:20:30:c8:bc:9f:57:b6:bf:50:
ac:1a:29:c8:22:c5:de:7c:44:fa:c7:b7:85:5f:68:
47:c8:ef:ce:e2:05:1a:db:d9:d1:21:6c:4d:ac:7f:
91:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F0:49:53:94:74:73:43:85:CF:8D:09:A5:4B:32:98:02:26:83:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/c08e30e5-3667-3503-bcb1-0922ab5c7c45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
X509v3 Authority Key Identifier:
keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
sbgp-ipAddrBlock: critical
IPv4:
68.66.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:b5:ac:32:09:a0:1d:0f:66:f4:b4:98:eb:3c:63:23:00:a8:
59:f1:4e:48:3b:fa:9f:f4:42:da:26:a3:98:f1:8f:a3:04:92:
ca:5c:37:2b:c3:42:da:eb:72:32:df:11:c3:36:88:30:14:30:
b3:b0:14:b1:22:64:fb:5b:48:bc:d9:2a:0f:1e:5e:f0:2a:0f:
7c:a4:49:79:1c:1d:8c:9c:2f:20:bb:44:07:70:d6:2e:52:04:
ba:6b:66:7c:d2:8c:fb:ac:21:41:c1:cb:13:80:f9:0b:60:25:
7f:19:ca:bb:f3:33:68:40:f5:63:9a:46:61:4a:84:f7:13:c3:
87:49:6f:90:08:9e:f7:12:21:c4:07:cb:8e:e3:2a:53:a0:9e:
74:a4:80:65:54:29:fd:5e:fc:97:be:90:d1:95:f2:db:39:be:
ff:8f:9a:32:bd:ab:a8:8a:53:54:c4:e4:b2:03:5f:8e:ea:28:
3e:99:07:a9:e4:e7:a3:b1:5c:6b:73:f5:c2:e2:5c:9d:b7:4f:
17:c9:e2:60:42:d1:9e:2d:eb:82:7a:6d:84:15:0a:0b:45:b9:
b1:46:28:66:dd:98:06:d3:bb:a0:2e:d8:bc:a5:28:33:9a:d2:
4e:65:b2:84:c4:35:5e:b1:19:97:6f:b3:0a:1b:d1:e0:0a:c1:
ca:23:95:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:12 2025 by rpki-client