Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e602d673-4722-3cf4-9fc1-7baeb525d19c.roa
File: e602d673-4722-3cf4-9fc1-7baeb525d19c.roa (raw, json)
Hash identifier: sxc89V9ZjiCp7Xpk6ZStrAjF5ddOWC5DoTcK2re5OEU=
Subject key identifier: 1D:AB:E4:DF:F5:8E:B1:1D:C8:46:C7:4E:61:12:AB:48:21:DA:37:B1
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858491246F39F9C3CE25109459CE0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e602d673-4722-3cf4-9fc1-7baeb525d19c.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 701
IP address blocks: 68.236.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:f3:9f:9c:3c:e2:51:09:45:9c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=520b0e33-befd-47ac-9662-4e717766823c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:6f:6b:ba:84:12:54:6a:23:4b:36:63:dc:
8d:7d:4a:01:ea:ca:c8:67:eb:5f:c0:4d:7c:b1:82:
07:09:bf:de:0a:b2:00:01:99:8f:15:f6:d1:26:2a:
fe:8d:ff:ee:fc:a5:b8:59:fe:d2:ef:92:bd:fc:be:
ce:f7:2f:94:e2:81:17:e9:7f:f6:f2:dd:e7:ac:08:
3b:23:37:0d:dc:c8:cc:4e:12:29:3e:29:c5:d9:32:
b8:37:fc:5b:9a:82:17:1e:d5:49:be:8c:90:32:fa:
94:ff:b5:9d:a5:0f:8f:a5:47:41:0f:4b:c8:b3:27:
60:7c:a0:b6:72:1a:3b:e3:92:1f:c4:e4:3f:7b:b8:
ab:42:ce:99:95:1d:78:06:99:c3:8d:ca:c7:24:e4:
0f:d6:1f:2d:fa:4b:cb:3f:c4:c1:16:4c:ce:c7:e8:
95:2b:78:ba:9c:94:1e:b2:e2:22:b4:fd:b2:b4:fd:
b6:fd:93:62:d8:91:f7:8f:db:8e:0a:09:7c:1b:9f:
c6:61:1b:08:61:5b:d6:4b:8c:86:33:3c:73:73:1c:
f9:94:fb:c9:59:69:d1:fa:dd:48:a5:43:3e:cf:31:
0f:5d:71:e7:8e:7f:c0:19:fd:bb:c0:a4:66:30:12:
99:4e:6e:19:2a:00:ab:4c:94:4a:39:0d:ee:80:8d:
ff:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AB:E4:DF:F5:8E:B1:1D:C8:46:C7:4E:61:12:AB:48:21:DA:37:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e602d673-4722-3cf4-9fc1-7baeb525d19c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
68.236.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:50:bc:ae:e2:be:b5:10:fc:aa:f2:da:42:98:71:f8:c0:22:
d4:58:cf:bf:4c:a1:d0:9c:a9:6d:7f:d0:60:66:b5:6a:a2:9e:
d2:d0:ef:dc:d1:dd:b6:f4:06:ea:85:53:cd:8d:04:1d:35:00:
5a:fb:11:a4:9d:12:5e:e0:e0:0f:3e:fd:6e:98:99:14:88:d7:
eb:9c:ac:df:a8:33:8c:78:67:4f:fe:8e:c3:3d:cd:b3:e6:bf:
87:e1:47:32:cc:4e:e9:23:46:b7:5c:c2:70:9b:df:eb:db:f1:
5c:56:40:f9:bb:2a:82:d3:2b:4f:7d:bd:1c:7f:3d:39:d0:24:
93:1b:a9:78:30:a3:4d:87:54:00:ae:38:d6:55:7e:ed:88:63:
af:19:3d:45:7d:90:20:d1:e6:3f:c0:6f:00:a7:d0:78:ea:99:
af:0a:2c:c0:61:ed:de:e4:46:24:14:4f:d8:2e:22:1e:c5:6f:
37:56:5a:93:19:74:84:aa:8d:1c:d8:3a:05:ae:a7:8b:e3:e5:
d8:56:6a:5b:95:9d:2f:99:0a:27:31:b4:d2:43:db:07:3e:4f:
16:7d:88:36:38:fb:6f:04:6d:3e:c3:cd:55:aa:c8:7a:95:93:
35:e6:72:e7:06:e7:a3:09:da:76:2e:9e:27:13:bf:db:59:78:
ce:00:15:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:50:02 2025 by rpki-client