Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a6aa7c3e-f196-3fd4-b36f-c50122c6c775.roa
File: a6aa7c3e-f196-3fd4-b36f-c50122c6c775.roa (raw, json)
Hash identifier: ooCFkix0UNkpQH+jDBZYgUZP1XlxjJmE6orJVXB7t3w=
Subject key identifier: DD:2A:AF:8A:92:18:7E:33:5D:DE:1C:AC:43:83:E5:C1:21:BE:AD:F5
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F432858492CAE9873F3EC36648E563540
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a6aa7c3e-f196-3fd4-b36f-c50122c6c775.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 30238
IP address blocks: 68.232.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:98:73:f3:ec:36:64:8e:56:35:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=1f9fd208-2e1d-49cc-92ea-266e6eecd199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f5:f9:fc:6e:db:64:7a:3f:33:c3:54:aa:8c:
9f:db:d6:a1:68:f5:a8:68:7a:a8:fb:a2:a4:9f:6d:
80:2c:5a:d8:9b:f8:ae:b2:f6:79:fd:90:10:b7:9c:
30:1f:55:c3:b1:31:45:dd:5f:be:09:53:b0:b2:7d:
3b:dd:7e:81:ff:c9:7b:f4:88:fc:08:9a:ba:99:53:
44:9a:5b:91:fe:05:14:66:a0:8c:71:b4:03:97:20:
9f:da:29:84:38:db:c5:5a:a6:56:af:4d:0d:23:a1:
5a:47:d2:97:72:e5:f8:b4:88:eb:99:e5:38:5f:b1:
f7:f8:38:9b:01:d3:bf:ac:27:a0:f5:15:5d:21:69:
07:8c:f4:69:8f:fe:9a:13:88:9b:04:53:3e:78:4b:
23:53:19:2e:da:d1:2d:15:cd:38:69:0a:02:c9:42:
36:b3:d6:ad:10:8c:40:2c:8e:52:8d:f6:ee:4e:fe:
d1:67:b1:c0:8b:ce:10:b7:cf:76:17:43:32:7c:3f:
e7:30:da:84:25:d7:29:05:e1:e5:3e:73:d9:8d:cd:
cd:07:94:e2:af:d1:70:f1:5e:cd:82:1a:01:c2:21:
bd:9b:1c:aa:00:21:f3:08:0b:1d:92:97:c5:0c:d3:
4a:74:6b:34:b3:eb:7d:4e:27:de:c9:17:54:8c:5e:
ef:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2A:AF:8A:92:18:7E:33:5D:DE:1C:AC:43:83:E5:C1:21:BE:AD:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a6aa7c3e-f196-3fd4-b36f-c50122c6c775.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
68.232.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:47:64:88:4d:90:db:39:e3:4f:85:83:fd:28:1e:8d:36:fc:
06:11:d6:fd:f9:a6:be:32:32:80:bd:ea:21:c3:87:62:7e:c7:
6c:0a:23:1c:83:3e:43:3b:5d:72:86:f0:7d:16:95:68:8e:9e:
b1:9f:ab:31:0f:1e:bb:bc:a7:ea:7a:83:fa:8e:ed:7e:ee:12:
49:70:31:10:93:ff:dc:a5:0d:a7:bd:ff:b4:31:c6:9f:2e:b4:
af:60:2b:a9:c2:ec:1b:82:8a:3b:bc:d2:ff:f8:8e:82:66:59:
d5:3a:89:45:20:23:be:13:5a:7a:8e:00:73:86:ad:2b:3d:d0:
ba:32:f0:46:f9:5d:b4:97:57:4c:ee:2a:ab:a3:a0:df:22:7d:
02:21:3a:24:a5:fd:b0:2a:e8:b1:90:e3:79:42:98:dd:e0:45:
a2:ec:7b:28:51:56:14:d2:21:0e:4f:37:65:38:8d:08:1d:3c:
1c:bb:db:75:50:2b:b4:a0:2f:53:ee:ec:0a:2a:6b:42:c4:01:
08:71:7d:78:84:15:2c:cc:a0:71:a1:ea:ee:0e:1e:7d:4b:5e:
7d:56:e2:5d:64:59:4e:33:7a:f7:e7:ff:ae:9e:a1:91:06:57:
81:89:a7:f4:16:7d:a6:8c:b2:a3:23:51:0d:db:ba:26:47:48:
8e:00:fc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:34:14 2025 by rpki-client