Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e24f00b5-2f50-305b-9796-3ef89ac0de9c.roa
File: e24f00b5-2f50-305b-9796-3ef89ac0de9c.roa (raw, json)
Hash identifier: g5wgZhH/L2Z6EfSVl1b4ikwgtlCz8wJeqsjtv16XmIs=
Subject key identifier: C5:97:BA:1F:FC:DA:C9:C6:6C:D0:3B:F1:08:6A:59:F3:9D:E3:82:C8
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB701021E8C5834E090200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e24f00b5-2f50-305b-9796-3ef89ac0de9c.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 701
IP address blocks: 68.238.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:70:10:21:e8:c5:83:4e:09:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=3b9285d5-5d28-4f88-9f23-d3b06e0812dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c3:e4:91:36:7b:02:73:1a:f6:4f:0e:37:5f:
7d:a6:4f:4f:4f:db:84:dc:7d:23:39:18:ac:26:fa:
17:72:50:a4:4d:78:bf:17:54:cb:47:dd:47:ab:d2:
b4:4f:eb:62:f2:0b:dd:6d:05:ae:ac:7e:fe:45:f2:
69:2d:82:3b:dd:d8:24:3c:47:bd:28:cb:dd:53:f8:
36:ac:fd:51:1d:fe:11:46:6c:5a:1a:8e:32:fa:82:
9f:16:98:e3:bb:1c:61:de:e9:8f:32:cf:61:c1:19:
b0:71:33:96:04:a9:f8:14:d8:05:89:2d:3b:53:44:
87:a4:08:5b:a4:49:59:b8:a3:ac:7e:a4:49:97:3c:
41:f8:a5:49:ea:dc:63:27:3d:fe:66:cc:da:44:21:
34:e8:dc:49:fb:21:87:bd:f7:21:48:ec:c3:9b:61:
ed:f8:0c:b0:94:4c:22:12:d0:f2:40:bc:bf:ac:68:
9d:c9:23:ec:01:1f:a0:8d:74:bd:54:5a:76:f9:53:
cc:93:b2:ec:a0:a2:54:0e:50:1a:e8:b0:a3:61:33:
af:48:a4:6c:40:18:fc:a2:08:f1:2d:ab:fa:d3:e0:
19:4b:bd:c1:a6:32:d1:1f:77:91:f1:8e:1b:b8:63:
86:6d:67:8a:f3:41:6b:e6:46:1b:08:63:d2:7a:25:
dc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:97:BA:1F:FC:DA:C9:C6:6C:D0:3B:F1:08:6A:59:F3:9D:E3:82:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e24f00b5-2f50-305b-9796-3ef89ac0de9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
68.238.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:9d:f3:e4:65:6c:64:18:65:d9:2b:e5:eb:c0:3f:b6:2a:48:
1b:9c:a9:f3:5b:d9:b1:1c:07:33:ec:9d:b5:10:fd:4d:47:bf:
4e:25:bb:f9:fa:45:1b:18:c4:59:37:8f:aa:a4:4a:a3:47:f1:
bb:42:d1:9b:5f:3c:79:79:ae:f4:bd:00:59:cb:1f:62:08:11:
9c:db:38:b0:98:8e:f4:87:eb:4e:ae:d5:ab:ec:33:9d:ac:c6:
33:19:a7:df:e3:6b:bc:f6:3b:65:d6:b7:3e:4d:83:6f:cf:ee:
7f:02:a4:a2:e2:d6:aa:5f:4c:fc:4b:73:ad:a0:18:92:1f:c5:
73:78:61:7f:fb:8f:3c:c1:08:8d:1e:46:7a:81:3a:5d:8b:8f:
cf:60:22:f7:48:cc:04:41:d7:80:5c:fc:2c:13:98:60:25:e8:
d9:f1:aa:f8:ce:de:99:d5:92:e9:f7:bc:fc:85:7c:8f:c7:fa:
b8:a1:6c:de:93:7c:2e:9b:63:0a:f5:ee:f6:99:37:45:a3:a6:
eb:59:c6:06:d6:bf:96:ad:09:c2:57:c8:89:d2:fa:06:e9:87:
e7:f2:45:61:aa:0d:57:91:a6:7f:0a:d3:89:dd:55:95:5a:78:
d5:3d:09:4b:76:90:ed:a0:e7:64:ca:a8:a6:1e:f4:73:22:35:
b1:7f:e6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:57:30 2025 by rpki-client