Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/40c48670-2ff9-3d6b-a358-9bfcde0f7e25.roa
File: 40c48670-2ff9-3d6b-a358-9bfcde0f7e25.roa (raw, json)
Hash identifier: 5LkIPMLcHwkA11HmMk4V/twuNTP70UDVQ1oDl0wpmGY=
Subject key identifier: 53:B7:99:4A:E8:FF:DD:2A:C6:55:0F:E8:31:E4:0C:3D:8B:2F:A0:64
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F4328584917DC3510F284A9C82A6EE580
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/40c48670-2ff9-3d6b-a358-9bfcde0f7e25.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 30238
IP address blocks: 68.232.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:35:10:f2:84:a9:c8:2a:6e:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=eaf71441-0d5e-4ed4-a13a-529782bd5544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c3:d0:0c:95:c4:24:f2:31:74:c6:14:62:5c:
7c:2c:1e:bf:fc:51:0c:f7:ba:64:b9:3f:aa:70:26:
71:6f:f2:7f:94:69:9e:74:83:90:db:82:b7:9b:69:
2b:e1:c3:80:eb:64:c4:d0:32:17:8e:27:3e:48:58:
7d:1b:ef:fd:65:46:79:d8:86:9a:b0:48:26:6f:6b:
17:27:1e:0f:62:c2:93:c7:1c:0e:8a:3c:ab:2c:aa:
2d:0d:2e:f2:04:ae:a9:75:e9:4a:32:99:31:17:ed:
4c:62:60:ac:1b:b8:98:4b:8c:00:ab:74:4d:35:3e:
79:08:75:15:19:52:38:52:7b:9d:d2:a8:e0:ed:da:
6e:c3:fb:d8:f7:3c:09:ba:e1:ac:7f:44:db:a2:3a:
8f:b4:33:a7:c5:7c:ee:e1:f2:ad:d2:97:28:4e:52:
63:ec:96:61:1f:95:32:6e:a2:7c:bf:78:e3:0b:a0:
dc:63:f5:02:66:ed:fe:ae:aa:a5:6c:5e:d1:48:9b:
ab:fa:a4:bb:4a:ee:9f:b3:63:bb:f3:77:97:fe:bc:
32:01:14:ed:0e:3f:39:af:dd:2f:64:46:55:89:15:
14:62:ab:19:70:93:94:e7:e6:b9:e4:d5:47:32:6a:
03:1b:c7:5d:0c:3a:82:1c:14:ec:2c:6b:fe:b5:ba:
71:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B7:99:4A:E8:FF:DD:2A:C6:55:0F:E8:31:E4:0C:3D:8B:2F:A0:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/40c48670-2ff9-3d6b-a358-9bfcde0f7e25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
68.232.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:09:dc:91:78:86:28:22:b2:17:1d:74:f0:a6:0c:58:c4:0a:
8e:e0:4d:1d:83:70:0c:c6:1e:46:76:8a:bd:5f:3e:27:0a:b5:
7c:6b:4e:72:5c:90:4c:f3:98:9e:e9:7d:1c:b2:8d:b2:a4:b8:
6d:09:ac:0a:40:75:4d:a8:a1:11:95:f3:4b:99:46:a8:3b:93:
12:18:48:19:97:8a:0f:7f:b9:50:05:a4:2e:92:ed:d5:73:80:
ac:5a:3f:c9:11:08:1e:84:e8:d7:0e:f5:94:6e:e9:b3:99:9d:
de:b0:5b:81:cf:6e:41:89:f9:3b:cd:0a:62:4c:19:43:db:56:
68:77:e2:57:2e:aa:c5:b8:45:76:1c:4f:7a:5a:3c:f7:59:6d:
7d:38:be:62:da:c7:05:56:e6:44:2e:06:c4:6a:91:45:0e:af:
0b:01:9a:b1:31:f3:72:08:0d:ff:55:23:0f:bd:57:32:39:35:
f7:03:cc:45:89:ad:ba:99:1f:03:69:ef:75:a0:08:af:22:70:
22:07:54:65:5a:db:51:df:4f:7a:17:3b:7f:df:49:a5:ec:90:
68:bb:ce:2f:2b:a4:08:85:b8:3d:3f:18:61:d7:a6:21:ef:bc:
6f:2c:39:b9:1d:c5:d0:ce:d5:e0:3e:f8:56:4d:66:28:85:28:
0f:b0:24:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:55:44 2025 by rpki-client