Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02c314e6-14ca-3cf5-b5b2-b5633ac3a3d4.roa
File: 02c314e6-14ca-3cf5-b5b2-b5633ac3a3d4.roa (raw, json)
Hash identifier: gR+LOLZDXgxbg/jvHu010GL5Qm/azDfivWY32DIhwls=
Subject key identifier: B3:DA:54:E6:11:D8:9C:4A:67:F6:6C:E6:D3:D6:4F:0D:36:5E:4A:A6
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F79405A597AB2F32318400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02c314e6-14ca-3cf5-b5b2-b5633ac3a3d4.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 68.49.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:94:05:a5:97:ab:2f:32:31:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=d94fdf9c-33d2-4841-8f2f-56eb3f2d947b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:52:96:44:c2:73:f5:ad:12:21:40:4e:5b:fd:
8d:83:9b:22:f1:b0:b7:b8:a8:c1:10:d9:fa:71:d8:
aa:f6:b6:90:8f:e2:f0:2c:6f:4b:b6:2d:86:e6:6c:
15:db:7a:91:0c:59:6f:ae:48:06:21:0b:26:77:dc:
b0:f2:43:bd:6f:58:62:e5:43:1a:a1:29:58:58:4e:
67:6f:4b:59:24:db:10:2a:1d:c0:90:8c:8d:78:7b:
f4:a6:d5:a1:a4:44:e5:8a:3d:68:7b:ca:aa:33:d3:
b7:b7:b8:66:11:6a:8d:9a:9c:26:89:99:41:ce:a1:
31:e6:41:a8:f8:74:a4:6c:d9:6d:6d:0d:7a:90:1e:
ba:73:19:ae:58:41:27:89:15:30:bd:bc:47:23:c1:
23:99:5c:3d:86:f3:4c:27:ec:0f:2b:24:b6:56:11:
5a:76:1c:61:29:ba:2e:4c:cf:69:02:6e:3a:c0:01:
d7:11:ed:6c:bc:96:79:d8:6b:02:cc:af:0e:46:bd:
ac:d1:ca:32:35:7f:82:05:e6:fc:6f:64:91:fa:56:
97:e0:80:15:e3:c3:1f:f4:79:9e:ed:b9:25:e2:b1:
d3:17:c0:e8:b2:4b:2c:f6:8f:cd:99:24:15:64:3e:
4c:de:84:34:bd:11:5e:5a:d3:86:24:a5:6c:40:02:
fa:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DA:54:E6:11:D8:9C:4A:67:F6:6C:E6:D3:D6:4F:0D:36:5E:4A:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02c314e6-14ca-3cf5-b5b2-b5633ac3a3d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.49.30.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:b7:af:9b:3a:be:1f:f9:e7:37:a5:86:14:14:00:a7:1a:d6:
bb:1d:c3:e1:0d:42:37:58:49:91:30:c3:2f:15:01:be:88:06:
2d:9f:b9:98:17:77:d4:d6:04:4f:7f:a4:bf:84:7b:5e:73:11:
31:20:10:1a:96:e7:30:68:04:39:c2:7f:5b:5c:21:38:e1:fc:
06:da:90:c9:4b:ff:c1:91:d7:4f:4d:e3:84:8a:3d:d8:00:ec:
ab:16:e7:52:d8:27:70:4f:7c:e8:68:6b:3f:64:10:93:f4:21:
0a:64:90:38:90:d2:5b:d2:65:05:f9:ff:b8:29:6a:23:24:9c:
22:f2:cb:10:25:df:82:27:c6:cd:df:6c:33:31:65:18:da:4f:
6c:a1:d3:91:7f:59:d7:94:60:c2:28:55:6f:33:b3:bf:fa:6b:
0a:f2:47:ac:29:9b:c9:18:fc:b8:46:c0:e4:47:67:9b:c6:0a:
4f:8c:37:e7:4e:8c:26:7f:09:f6:fc:bb:6b:92:a4:1b:41:e6:
45:12:2e:a3:a1:38:19:c3:94:aa:67:84:ab:8c:e5:0d:26:30:
58:89:3f:c4:3f:1a:50:38:af:16:1e:32:7a:01:93:ff:f5:6c:
93:4a:44:da:21:22:6d:33:f9:33:b4:c3:6e:39:97:bb:ea:a2:
56:1a:c0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:15:58 2025 by rpki-client