Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f917ac68-9fc1-348a-9706-81d7aca4a3ac.roa
File: f917ac68-9fc1-348a-9706-81d7aca4a3ac.roa (raw, json)
Hash identifier: OPshXnNgZgrTaRvezS5kGLWnn+tp3B+3/E887j2bpJE=
Subject key identifier: 6A:0C:8E:4B:D6:22:75:59:DF:E1:46:7E:62:9D:4E:A5:5F:AF:14:EF
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB7230F16742FD83A4C1C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f917ac68-9fc1-348a-9706-81d7aca4a3ac.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 701
IP address blocks: 68.238.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:72:30:f1:67:42:fd:83:a4:c1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=457895e8-4b6d-4df0-b41d-ff187b4c8ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:cb:98:3e:1b:77:91:9f:6a:f4:de:c5:c2:dc:
c1:78:c1:0e:43:a1:0a:11:d8:a9:40:74:85:24:32:
66:4e:98:e7:28:76:26:98:53:d6:3e:74:20:f9:bc:
8c:f0:95:dd:8e:8b:c9:84:86:3f:c4:d6:81:06:e0:
66:1e:1c:5a:75:46:60:b0:a4:b2:a9:49:2a:85:1b:
06:1f:18:26:c3:36:cc:bc:b3:69:1e:4c:d2:7c:96:
f3:5d:46:c0:72:de:0a:bf:5c:ed:17:cb:06:cf:6c:
7d:f1:53:15:ec:58:56:06:7a:f5:1b:22:84:49:b1:
c7:83:8e:1e:3c:34:dd:fc:8e:57:92:62:a9:71:dc:
0f:95:74:f7:08:04:f8:58:42:7e:d7:4b:0e:0f:44:
1d:06:db:94:d2:b2:2a:0c:83:4e:b6:0f:73:cd:34:
71:98:d4:23:28:3a:55:84:fe:54:8e:ff:21:11:72:
9e:03:07:58:bd:02:f2:a0:69:ed:92:ba:b5:b4:85:
29:e3:9c:38:6b:e9:b2:6c:24:48:81:3c:ff:c5:e2:
11:7b:98:f3:32:a9:23:ac:e9:fd:83:35:f7:d6:e1:
99:f4:22:bb:c5:da:ed:ca:d8:9b:23:a3:bc:16:99:
1a:01:38:53:25:85:dd:fd:92:bb:fa:6d:ad:4d:7e:
fa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0C:8E:4B:D6:22:75:59:DF:E1:46:7E:62:9D:4E:A5:5F:AF:14:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f917ac68-9fc1-348a-9706-81d7aca4a3ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
68.238.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:e9:54:ae:2d:30:46:b2:63:5b:01:fc:08:d9:0c:53:22:fe:
08:72:e9:e8:21:bf:74:55:2b:79:77:1a:04:04:23:0c:81:69:
0b:fe:d2:f6:39:37:fe:b6:b0:73:2f:9e:62:6a:a2:52:d9:eb:
cd:2e:19:77:1d:5a:d0:57:dd:2b:91:d2:d7:26:b3:9b:3d:c9:
84:dd:0c:fe:53:fc:2f:10:a8:b3:20:0a:eb:a4:16:df:e6:c9:
95:09:3f:dd:c4:c8:2d:27:a8:6f:28:84:1a:48:e1:32:08:18:
09:86:f0:3d:ae:b1:ad:7e:37:3b:59:2c:37:e6:6b:77:6e:8b:
30:ae:a4:f1:a4:8a:37:42:f9:31:34:90:90:61:6c:09:97:05:
6d:d4:c9:7d:55:61:64:f1:f4:51:95:28:75:f7:98:ce:a1:4f:
2c:34:bf:74:b8:ac:81:b6:a1:6a:e8:5a:4c:b7:3f:04:3f:ac:
a7:04:34:59:d6:5b:3b:aa:72:be:51:0a:ac:42:a0:c9:d3:c1:
4c:9b:6a:71:ef:96:b7:32:f6:06:0b:94:46:28:9e:96:99:79:
e8:b3:0c:19:45:75:9f:d5:0c:32:67:31:f5:90:de:73:9c:42:
d9:04:c5:b1:aa:47:72:9d:be:8d:2c:8f:dc:f5:91:b0:f1:3a:
4a:59:34:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:48:35 2025 by rpki-client