Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/417a9b4a-8e1f-3034-ab37-5f24cf1b24bf.roa
File: 417a9b4a-8e1f-3034-ab37-5f24cf1b24bf.roa (raw, json)
Hash identifier: T43Ll6eNFtPeJqUthnRLe63NR7ZpHBuhJIeA8Ugp5+A=
Subject key identifier: D1:01:D5:FA:DE:03:19:A8:12:42:11:BA:D1:5E:63:7F:2D:53:26:9B
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB448AE3B71FD20C25CE00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/417a9b4a-8e1f-3034-ab37-5f24cf1b24bf.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 701
IP address blocks: 68.238.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:44:8a:e3:b7:1f:d2:0c:25:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=255b0bea-660e-4dc7-b2cd-bdd57f1fc877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:70:08:d1:fa:2f:16:c3:86:21:d3:f5:c0:2b:
a8:29:7b:2e:70:89:b1:03:ff:29:dc:cd:25:7d:5b:
91:49:37:a3:a7:f4:5f:a0:58:43:f6:be:e4:f4:7d:
a2:70:b5:eb:f7:ef:97:f7:21:c1:73:69:94:5c:ef:
9c:4f:a1:44:5a:f1:05:10:51:1c:93:58:63:ef:44:
6a:14:8d:31:cc:59:d1:75:af:56:6e:9e:14:29:95:
91:36:0e:ea:05:9d:e4:bb:29:37:00:04:d8:db:dc:
87:45:21:7b:2e:c3:eb:90:04:b3:97:a2:d1:70:2f:
13:81:f5:be:26:d7:d0:87:ad:dd:9f:70:f1:8e:ed:
8a:a2:e8:d8:69:f8:18:21:63:10:e4:7a:70:95:c6:
2f:90:8c:af:31:71:a9:42:98:fe:38:87:cf:04:0e:
1d:fa:e0:70:5b:f6:56:3c:62:d5:bd:e7:9b:0e:c7:
06:ca:61:13:e5:3b:df:6c:37:af:4d:cf:17:c8:0a:
5b:44:3a:82:47:72:2d:b2:ae:0d:ba:6f:5a:3f:ef:
28:f8:5f:8f:d6:d6:8a:f7:aa:66:74:ef:9a:5a:31:
c8:a7:e5:64:b8:b8:e3:bd:4a:f8:f1:ee:15:c5:00:
c3:ad:f3:7e:41:8d:47:d1:b9:d7:f2:ca:2d:52:e0:
e0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:01:D5:FA:DE:03:19:A8:12:42:11:BA:D1:5E:63:7F:2D:53:26:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/417a9b4a-8e1f-3034-ab37-5f24cf1b24bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
68.238.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:20:f5:28:31:e7:e2:21:31:9f:76:28:5f:cd:69:4e:0d:49:
4f:eb:e4:a0:bf:14:fa:e4:aa:48:e5:87:7e:24:72:cf:e1:51:
19:33:d2:64:e9:81:ff:f9:65:34:05:33:98:69:02:c4:6d:01:
bd:e6:0a:a1:c9:a6:35:db:5c:5d:b2:c2:bc:ac:5c:68:ec:0a:
fd:69:5b:9d:5d:a9:87:06:5b:5c:e0:d9:b6:39:22:93:c5:f3:
35:ef:0d:bd:c9:73:e6:cb:9d:c5:d0:1d:05:9f:86:30:3c:b9:
90:5a:f4:37:79:25:92:d7:7b:ea:40:f7:79:1f:50:47:6a:12:
dc:19:fd:69:a3:c0:b2:5f:47:7a:22:4f:de:43:d7:b7:44:d4:
b9:5a:4f:c5:7d:5d:6f:4c:87:c4:ab:a9:84:e9:af:4d:c6:57:
a4:31:8e:75:b6:b6:e4:61:ec:ad:31:56:9e:78:51:49:db:21:
ea:1b:e1:e6:b4:55:72:a4:54:45:eb:e9:e5:59:8a:3f:66:b2:
ae:85:1b:8e:19:cb:69:1d:6e:32:6e:cc:4d:c0:9d:3b:9a:37:
8f:29:70:1c:b9:bd:af:d6:e5:02:77:ad:65:6f:9c:c8:8f:de:
32:2f:68:0b:20:38:2a:91:5c:fd:0d:fd:49:fe:0c:f7:f0:ac:
14:93:85:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:26 2025 by rpki-client