Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/462ff12c-e1c4-3bb6-a38b-95cace4d341d.roa
File: 462ff12c-e1c4-3bb6-a38b-95cace4d341d.roa (raw, json)
Hash identifier: VOYsxJ4egjqSb02UsZ0E6eHy8Wa5Fd8WCO/2M5Bf2Ac=
Subject key identifier: BD:6C:66:4C:AC:32:8B:EF:B4:E6:DD:9B:1D:0B:A0:F5:F9:6A:CC:9E
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F43285848E59BD11069479B496F569A80
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/462ff12c-e1c4-3bb6-a38b-95cace4d341d.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 16417
IP address blocks: 68.232.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:d1:10:69:47:9b:49:6f:56:9a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=c4ce5c98-be39-4335-ab42-3c99ecf0d4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:26:7e:f4:de:b4:82:13:80:8b:1c:c3:dd:16:
c7:1a:d4:eb:03:ca:af:d6:e4:3e:55:47:39:67:4c:
31:a6:da:d2:00:b9:cf:7c:a9:30:ac:ab:b8:d3:6a:
10:5e:fe:fe:13:25:9a:07:88:df:8a:8b:f4:54:b5:
fb:c0:6d:bf:83:aa:e0:80:c5:2c:2f:42:13:ab:a5:
42:43:3f:38:c3:71:1d:34:b3:9b:1a:ae:81:46:45:
b4:49:29:7e:21:03:c4:8c:28:2e:b2:b0:07:be:af:
bb:16:73:42:b2:ff:57:46:79:83:3f:9b:b9:ae:30:
cd:c4:98:d4:43:ca:09:ad:b3:ac:80:f0:e0:f1:b1:
cd:e9:62:65:32:3d:4d:c1:8f:ec:54:dd:cf:a9:e3:
22:ce:fd:45:3a:9f:7d:29:fe:43:8d:00:ec:f6:53:
59:75:fa:f7:5f:08:cc:c1:19:48:15:69:35:54:ea:
c5:46:f6:96:f2:1d:c2:90:02:54:b7:5d:04:cd:1d:
74:a6:39:d0:6e:0b:1f:ef:65:ec:80:4d:56:c9:df:
48:4c:30:0d:90:5d:cc:bc:7f:b5:3a:e5:1b:ef:ae:
fc:16:82:79:13:d4:f2:87:95:85:08:53:e3:90:18:
0e:6d:0d:bd:76:89:89:62:dd:4f:4b:aa:c8:3e:8f:
79:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6C:66:4C:AC:32:8B:EF:B4:E6:DD:9B:1D:0B:A0:F5:F9:6A:CC:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/462ff12c-e1c4-3bb6-a38b-95cace4d341d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
68.232.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:01:67:c9:bd:57:ed:3b:f6:32:71:e4:e2:58:ac:e6:cc:39:
1a:d5:ac:97:67:98:f4:58:5f:46:ed:5d:87:d4:b1:71:f1:6a:
6c:b8:7f:0e:c0:15:10:6f:b5:b5:0b:53:b5:04:ce:66:0e:a8:
02:23:2d:39:55:18:5c:b4:68:6b:48:df:06:14:78:d8:53:11:
9a:6f:c0:57:b8:83:be:b4:d8:38:f9:e8:03:79:dd:de:3c:e0:
40:c2:5a:eb:9f:fc:70:50:d9:bb:bf:f4:c5:ba:08:b0:72:fc:
f0:fa:3b:47:a9:6a:f5:e2:9e:af:de:11:f3:aa:04:86:2e:cd:
09:c1:9c:4e:8c:57:9e:5c:19:f5:58:5e:e7:aa:42:6d:f7:e1:
f4:88:f9:56:cb:7d:ba:a4:ed:05:b2:ad:27:99:e3:eb:ad:db:
93:af:31:f1:eb:54:95:32:ce:26:e8:89:62:56:e3:ee:bd:33:
c7:6e:98:79:03:f0:4b:fb:2a:26:e8:e7:a9:da:bf:46:b4:2e:
53:d4:1c:2f:99:73:cf:57:fb:81:24:42:7e:aa:40:86:be:f5:
18:36:14:d9:fb:ec:e6:34:da:26:84:96:4d:6b:4c:49:b4:89:
7d:ee:70:3e:6d:3a:66:78:b5:b2:fc:b7:be:4f:20:ab:84:24:
2e:a0:39:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:37:06 2025 by rpki-client