Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/2c880042-77b4-3f57-807d-ca209161efa0.roa
File: 2c880042-77b4-3f57-807d-ca209161efa0.roa (raw, json)
Hash identifier: 695A8xGGUCtPu+h4TU+he0QZbQSQWDmnnFNRjN3EKFw=
Subject key identifier: FE:5F:B5:08:3D:B1:85:23:D0:58:2F:FD:A2:5D:4A:E7:30:38:AB:D8
Certificate issuer: /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Certificate serial: 010D0C9F432858493AA3DE57D3F54CEB22E20EC0
Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/2c880042-77b4-3f57-807d-ca209161efa0.roa
Signing time: Tue 18 Mar 2025 13:00:50 +0000
ROA not before: Tue 18 Mar 2025 13:00:50 +0000
ROA not after: Mon 16 Jun 2025 13:00:50 +0000
asID: 9009
IP address blocks: 69.168.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3a:a3:de:57:d3:f5:4c:eb:22:e2:0e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Validity
Not Before: Mar 18 13:00:50 2025 GMT
Not After : Jun 16 13:00:50 2025 GMT
Subject: CN=db6a13ab-83c9-4414-8054-1b937ef84dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c9:0c:a7:c7:c1:2f:a7:3a:d0:47:fe:bf:63:
d4:35:98:f6:89:98:c6:29:b1:d7:07:cb:56:49:b5:
f0:69:f7:eb:b3:ae:8c:42:1c:bb:6f:5c:18:d6:d2:
a8:db:96:95:70:4a:59:53:49:5e:fc:04:d0:8a:ab:
89:51:9e:95:59:12:df:b1:6f:ca:06:eb:23:82:ec:
04:ca:d4:f8:52:f0:1d:db:1c:5d:5f:8c:6b:75:c1:
f8:28:e7:b0:48:12:12:8a:a5:4d:94:6e:ef:2f:fd:
af:7c:79:10:ca:cd:e1:be:c0:c9:c5:fa:2e:a0:20:
37:15:9d:ff:84:2f:0b:90:00:9e:ce:3d:fe:96:d1:
59:0f:98:84:ae:80:60:e3:1c:3f:3e:77:c2:49:05:
ee:70:28:79:6e:df:6b:a9:72:33:85:59:ae:64:53:
32:bf:ff:2f:eb:24:f9:a2:c9:1f:f4:a9:9e:95:a6:
a8:d8:a7:f2:fd:88:5a:2c:27:be:7a:fa:dd:73:87:
c8:2e:27:b7:9d:36:4e:67:a5:0c:d1:5c:84:3c:08:
3a:7f:28:6a:39:fc:92:72:7b:76:67:56:32:bd:9e:
cc:44:bc:11:7a:20:e3:17:14:0f:f2:5a:ae:5c:00:
1a:91:78:d6:44:5f:01:84:d4:20:9f:68:7b:b5:53:
38:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:5F:B5:08:3D:B1:85:23:D0:58:2F:FD:A2:5D:4A:E7:30:38:AB:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/2c880042-77b4-3f57-807d-ca209161efa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl
X509v3 Authority Key Identifier:
keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
sbgp-ipAddrBlock: critical
IPv4:
69.168.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:d8:e8:9c:c7:b4:b4:c3:0d:96:a9:1e:58:a9:c1:94:53:22:
d4:df:81:5b:57:e3:47:23:42:17:ab:d5:d5:81:b3:41:d3:73:
22:fc:b5:d7:7c:cc:36:e2:39:1f:70:fa:fc:69:e9:c6:73:07:
5c:fc:8b:63:54:8e:c8:eb:c4:31:80:b7:8c:b1:a8:1b:92:9f:
95:2e:70:cf:9d:69:1c:ce:34:ca:29:57:4c:1e:41:b4:45:a5:
c5:ac:93:54:f3:ef:cc:43:4a:6d:38:7f:8d:4c:47:3c:4a:45:
9a:63:9f:63:f3:e2:09:89:23:58:fe:63:aa:f5:20:b1:e9:a3:
a6:c3:2a:0c:ab:cb:73:f6:ba:a0:01:6f:0e:e1:33:56:e4:9f:
41:2c:0f:53:f8:9d:0b:25:29:a4:cc:71:d1:d7:d5:3e:a5:e7:
8c:92:3a:3f:0f:43:0b:e7:6e:2b:2d:09:0a:c6:bd:b4:fd:65:
68:e2:6d:d2:e2:c8:d1:b8:76:57:84:f8:7d:07:f2:15:9e:c6:
d6:fd:3c:e9:a6:e2:e3:d3:8e:27:81:f4:ab:5f:cf:77:0a:b3:
2a:8a:93:91:be:37:c5:97:56:d8:f9:7f:40:83:fa:51:f0:af:
6e:a1:71:3b:67:55:49:be:b1:04:10:ad:5d:fe:62:c9:8b:ed:
c8:c0:ea:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:33:56 2025 by rpki-client