Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/dab11a5e-6bef-369e-9164-020a3598a65b.roa
File: dab11a5e-6bef-369e-9164-020a3598a65b.roa (raw, json)
Hash identifier: kPHCGRLvP34VT3IMBVDnphfHm7lcsk02L2N48zPCSe0=
Subject key identifier: 80:9F:13:C7:67:40:D5:B8:08:A8:BE:4B:01:91:90:EF:E9:0F:84:5D
Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Certificate serial: 010D0C9F432858487AB31691979E95D42AC02A30
Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/dab11a5e-6bef-369e-9164-020a3598a65b.roa
Signing time: Wed 08 Jan 2025 18:56:21 +0000
ROA not before: Wed 08 Jan 2025 18:56:21 +0000
ROA not after: Tue 08 Apr 2025 17:56:21 +0000
asID: 63023
IP address blocks: 68.233.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:b3:16:91:97:9e:95:d4:2a:c0:2a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Validity
Not Before: Jan 8 18:56:21 2025 GMT
Not After : Apr 8 17:56:21 2025 GMT
Subject: CN=1c84cc96-4c89-48b6-a4db-1a897f3b8648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:44:80:90:15:74:22:f1:b3:15:62:79:0a:5a:
6e:04:f3:bd:89:aa:fc:e4:0a:3f:58:06:9d:87:2c:
68:ad:3a:78:93:c6:97:2e:66:7a:4d:ca:65:c7:64:
bb:35:1b:51:19:b9:fd:58:8e:b0:15:c6:6f:86:a8:
de:8f:ef:f3:10:f5:86:5b:a2:21:5d:36:40:40:90:
b2:db:7e:be:d8:75:ea:4b:e7:05:89:62:45:f2:37:
fd:75:14:57:db:90:cd:ca:1d:7a:30:e5:d2:b2:c3:
6e:1e:9f:b9:4b:ca:16:ad:34:8f:e7:e1:12:27:2a:
0f:08:5e:50:3b:f6:c8:db:2e:20:3e:8b:f9:9c:7a:
19:b0:5a:98:87:31:ae:b2:16:5f:dd:d8:95:f8:91:
81:75:cd:4e:ad:43:16:67:f7:d4:45:6d:7b:ee:03:
87:1f:d3:75:ac:d2:56:7d:d4:04:b3:79:6b:2e:35:
6a:29:53:e1:50:c6:87:a7:40:2a:4f:ab:54:23:70:
6a:93:fc:f9:c7:a2:bc:99:59:de:1c:1e:31:52:89:
eb:1a:ef:76:cd:ca:25:1a:52:06:f1:5d:cd:5c:d1:
6a:d5:2e:f1:7d:19:1f:61:67:bd:be:92:41:c0:50:
5f:4c:9a:c7:be:94:56:a9:fe:44:ba:df:bc:8d:b7:
d0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9F:13:C7:67:40:D5:B8:08:A8:BE:4B:01:91:90:EF:E9:0F:84:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/dab11a5e-6bef-369e-9164-020a3598a65b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl
X509v3 Authority Key Identifier:
keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
sbgp-ipAddrBlock: critical
IPv4:
68.233.37.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:71:b9:bb:e6:53:d5:f4:3c:c4:9a:6c:22:a3:93:2a:01:0e:
b4:8c:63:95:1d:1f:2b:4d:cd:8f:6f:76:d1:bf:c2:fa:93:18:
ad:81:0b:ab:c7:c5:50:c8:0f:fc:70:45:8a:1c:63:c7:57:b0:
22:c0:5f:39:f1:95:f9:33:0d:15:8e:ab:9b:29:65:78:c5:a5:
9b:19:6c:0c:a7:91:ca:81:d7:2b:f6:90:59:c8:f8:8b:af:ed:
9a:79:84:7c:2b:d6:26:8e:b9:59:3c:1e:42:f9:23:a4:07:59:
ca:0b:6b:65:2c:51:49:59:77:af:3f:b9:bb:90:d0:00:e2:32:
16:27:0e:19:8a:eb:03:dc:e7:d8:c4:df:32:20:11:37:06:a5:
be:95:81:32:9c:cf:60:70:f6:05:94:80:6e:dd:82:f5:41:b4:
6b:05:6c:51:11:30:06:05:d3:66:79:da:f5:63:72:18:59:be:
e7:51:fc:a4:72:3d:8e:df:6c:1e:cc:e2:ce:02:4a:c1:04:1e:
d7:22:dc:67:ed:73:35:d0:72:c6:bf:e7:96:75:31:1b:2d:bd:
92:c5:71:38:0e:2f:79:75:4c:64:2c:04:1d:94:ec:d9:de:b8:
95:a0:3b:c8:ae:52:e5:f1:43:65:08:6a:4b:50:c6:70:71:b2:
b0:45:99:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:46 2025 by rpki-client