Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/268804eb-2209-3eca-acfc-34c2ed1ba10d.roa
File: 268804eb-2209-3eca-acfc-34c2ed1ba10d.roa (raw, json)
Hash identifier: d5MlaBiNxh9SeT+ZTee1c5TGVks5XyiGY3ANKjTFZq4=
Subject key identifier: 8F:F1:67:F8:DD:97:88:A9:7F:C2:D7:4E:AB:18:18:E8:6B:4D:28:F6
Certificate issuer: /CN=cc39a973-cf2e-44b1-984a-6596dc0b6963
Certificate serial: 010D0C9F432858491246B6491B84969F9A552360
Authority key identifier: 45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/268804eb-2209-3eca-acfc-34c2ed1ba10d.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 4476
IP address blocks: 192.68.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:b6:49:1b:84:96:9f:9a:55:23:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc39a973-cf2e-44b1-984a-6596dc0b6963
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=cc547a9a-7d58-47b3-95db-eb063864d4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:81:31:21:d7:e5:1c:c6:06:5c:19:56:51:
8b:60:37:41:c2:bc:79:75:24:f1:73:83:f2:f1:f3:
09:69:1c:9e:84:c7:7e:61:64:69:74:ec:74:8a:20:
a8:f3:66:11:d9:16:1d:89:c8:4e:dd:53:f0:eb:c3:
b4:df:c5:84:86:e0:2f:f2:45:6f:7c:34:a5:db:54:
6f:9c:27:e3:da:ac:4e:db:85:25:51:c3:8b:6f:2a:
a2:a8:6e:c4:36:5f:c0:ab:7e:9a:16:88:84:9f:56:
05:5f:d3:3f:c5:ae:2c:5d:6e:75:a5:c8:d4:1d:d1:
38:4c:d8:58:a5:11:75:e1:bf:6a:94:6c:f2:0c:85:
13:5b:08:57:77:f3:8b:70:40:50:ae:03:4e:31:ca:
45:2c:de:4c:24:5a:0b:bd:5b:0d:77:ca:99:01:ed:
c0:91:b2:3d:88:02:d5:e9:ef:a1:09:c8:53:c3:00:
a3:15:9b:35:7e:4a:d0:4b:c7:70:5a:63:b0:d6:1d:
8c:05:64:30:76:3a:09:c7:d4:f9:55:75:5c:90:7c:
c2:cf:a1:f8:97:39:4c:1e:f9:ef:ea:9c:e2:92:2d:
db:58:a9:ee:18:64:91:8d:b6:99:d2:ae:d2:14:f0:
66:6d:a0:0e:4e:ea:ba:39:35:5e:4f:9e:cc:ef:80:
81:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F1:67:F8:DD:97:88:A9:7F:C2:D7:4E:AB:18:18:E8:6B:4D:28:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/268804eb-2209-3eca-acfc-34c2ed1ba10d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.crl
X509v3 Authority Key Identifier:
keyid:45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.69.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:f1:16:8e:b2:2a:c4:73:8b:82:6b:c9:a6:5e:68:3e:87:d1:
d5:9f:c7:a8:a4:dc:77:3a:95:36:59:0f:80:42:c4:10:dd:7c:
b5:8c:97:42:ce:e5:6c:31:13:a9:d1:c0:1e:29:d4:ca:06:cf:
c5:c6:be:30:c1:12:e5:17:b2:a6:1f:fe:c8:13:8e:cb:2b:7e:
c2:a1:e0:53:f6:a9:1a:1b:5f:b2:50:09:f7:49:92:a4:40:8a:
6f:b3:80:4d:04:b0:c9:70:93:f4:4a:6c:fd:e7:b0:0f:ec:42:
86:dc:44:ec:c2:6a:e1:29:84:24:21:f1:c0:5a:64:ef:d8:d4:
33:80:ad:33:3d:8c:1f:26:ed:f6:aa:3b:09:62:2c:28:96:0e:
f4:27:58:13:33:15:f0:03:32:c7:53:b2:04:32:0a:4f:90:41:
77:f5:6d:dd:48:e5:8a:26:e3:cf:8e:d4:ac:72:73:5b:fa:5b:
b2:cd:19:18:08:f7:da:9b:b6:48:a5:16:91:19:8e:b2:ee:4a:
a1:da:20:55:11:a4:f1:0a:a5:2f:20:04:e4:96:95:36:09:8c:
89:1a:8f:de:08:40:cc:b7:09:44:f3:5f:4f:b8:57:25:de:7b:
ed:81:56:b7:af:fd:eb:a1:71:84:8f:86:8d:c0:e8:59:9e:88:
95:57:7c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:22:50 2025 by rpki-client