Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c07f7671-11e2-3606-85ed-b6bffbcd0b4d.roa
File: c07f7671-11e2-3606-85ed-b6bffbcd0b4d.roa (raw, json)
Hash identifier: 81HLlx+NK2by2w7uwV9Y6ZcpehnusW1J54Cl8IyMt/g=
Subject key identifier: 6D:E6:6E:BE:C4:3B:91:69:0A:37:98:0F:BA:B3:EE:76:42:73:30:0A
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858490B4C29123C7A25B6F90EB040
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c07f7671-11e2-3606-85ed-b6bffbcd0b4d.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 701
IP address blocks: 68.163.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:29:12:3c:7a:25:b6:f9:0e:b0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=073609fe-29d8-4d7f-9eb2-3f1713be1ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f9:76:34:c7:bb:d1:c2:f1:56:ef:4c:a6:da:
dd:57:68:bf:d0:95:e7:f9:44:cf:6a:a9:71:2f:e9:
25:6a:86:47:66:4f:c0:bd:e1:57:11:92:fa:8c:c7:
ba:1a:41:9a:ec:87:a6:ff:2a:91:85:be:1f:ac:ed:
13:d1:b3:40:92:f0:fa:d9:c8:9d:2d:96:dd:e8:a5:
5d:fd:d5:33:5e:1b:6b:e6:8f:c6:8c:42:20:54:7b:
10:b4:72:c6:f4:11:7b:7f:45:78:42:5d:41:de:d0:
20:bc:9e:47:7e:d2:7c:62:1b:57:2a:9a:8b:3e:1f:
01:dc:60:be:98:10:19:e6:86:41:14:1c:a9:31:d3:
7b:37:e6:2f:18:e9:87:80:66:03:23:57:84:c8:b9:
92:2c:7a:26:21:d9:5b:35:50:7c:b6:21:78:39:0c:
52:7e:cb:61:b1:c8:5f:3f:b9:d5:bb:70:2f:06:dd:
d9:3a:b4:c9:7f:37:4b:c5:1f:c7:c1:74:77:55:78:
8e:fe:d3:89:0f:a3:14:7f:e6:28:40:10:f9:21:8e:
d2:c1:19:e3:7f:a1:03:5f:89:b7:9d:64:6e:75:8c:
8a:03:c6:e8:ef:37:8a:9c:57:fc:db:6c:4c:5b:f5:
ea:1b:a7:0a:d4:c6:73:29:71:69:ce:01:2b:3e:5e:
be:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E6:6E:BE:C4:3B:91:69:0A:37:98:0F:BA:B3:EE:76:42:73:30:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c07f7671-11e2-3606-85ed-b6bffbcd0b4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
68.163.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:a9:03:12:69:a0:3f:22:33:40:e9:df:e6:4f:3f:9b:32:f6:
99:c7:34:29:ed:e1:45:a3:42:3d:bb:74:1d:cd:c5:d3:86:8c:
22:0c:7e:aa:a2:b7:d1:a2:17:60:59:84:ca:75:42:43:61:f3:
ed:45:18:6b:21:c4:97:71:e4:db:15:67:66:e1:57:d4:26:07:
e1:13:ea:d2:a5:b8:32:be:b3:db:9f:3f:4a:d3:25:c4:71:86:
e5:13:38:ff:98:ad:a0:9e:42:8b:47:f7:c8:82:8c:71:49:36:
79:e6:d6:ee:ca:0c:eb:cb:63:48:42:aa:01:0d:8e:be:72:23:
fa:dd:4b:bd:87:99:eb:ca:29:d8:6c:2b:38:be:ec:1d:1a:dc:
2b:08:60:b9:7c:5c:64:1f:aa:e6:76:69:ca:bf:e8:81:0c:63:
f4:e8:49:4b:7c:71:f3:2c:62:4f:7c:d3:5b:4a:63:72:9f:ed:
a8:81:db:36:f7:a6:12:ec:64:9f:43:a5:35:d2:95:6b:03:e3:
47:35:65:09:ea:95:37:4b:e5:c4:6a:50:46:05:d7:a6:61:cb:
d5:49:1d:59:19:07:99:32:49:d6:ec:04:a8:64:8c:af:bd:23:
80:be:e8:af:95:dd:ad:d5:2c:c8:1c:c5:f3:46:f8:b0:18:57:
3f:0e:02:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:24 2025 by rpki-client