Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0406df55-70fc-3fed-8efb-224eeaab27aa.roa
File: 0406df55-70fc-3fed-8efb-224eeaab27aa.roa (raw, json)
Hash identifier: 9DNtzDNxWi44R/HXK9mul2pGKVF24tcaKZZxw/tZYxw=
Subject key identifier: 2A:D6:CE:C2:9C:16:3C:6C:F2:D9:F8:FE:2B:23:DD:FC:1F:8B:E7:80
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAF482024F4BA0691668D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0406df55-70fc-3fed-8efb-224eeaab27aa.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 68.44.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:48:20:24:f4:ba:06:91:66:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=187104d4-e3c4-4394-ba3d-526ec9b2c04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a5:4e:72:ca:53:50:a5:14:76:1e:ff:d9:1e:
f1:b7:15:7c:04:be:05:89:11:0e:a2:da:36:3c:60:
21:a1:24:4d:8f:3a:64:b2:74:fa:a6:99:47:5f:e3:
67:0b:52:ee:9a:74:c4:ec:10:71:7c:d9:d2:11:3e:
cf:e7:9a:fb:af:0a:1b:a6:73:4f:cb:bc:d5:e0:a1:
90:43:9f:a2:5f:9b:fa:fc:cf:14:1f:e3:46:be:73:
46:81:10:b0:5d:c8:d2:66:d7:04:f3:51:d9:3b:4b:
ed:08:36:1e:85:d5:1c:83:40:7e:c8:78:a8:57:c3:
6a:1c:5d:eb:7e:3f:04:2f:33:2b:25:6c:4c:6b:5f:
09:53:56:ed:a5:64:cb:02:b8:76:6f:50:ea:60:bb:
34:30:4e:99:ac:53:2a:ee:b3:38:37:60:03:d0:7d:
f5:c9:b6:a4:b2:82:ec:ba:be:58:23:b6:b5:d2:d1:
c1:17:2b:84:e5:80:58:fc:b0:22:9e:04:e7:56:7e:
9b:62:fd:14:51:4a:c3:fa:42:a1:8b:84:7d:8f:11:
77:e1:0e:a5:bd:0d:a7:ad:3c:9d:d7:70:e5:a3:4e:
4e:fb:d2:2b:ac:d2:58:fc:26:50:25:8e:4c:5a:86:
a7:27:00:4b:40:35:74:34:76:b8:c5:fd:b1:1d:97:
57:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D6:CE:C2:9C:16:3C:6C:F2:D9:F8:FE:2B:23:DD:FC:1F:8B:E7:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0406df55-70fc-3fed-8efb-224eeaab27aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.44.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:e9:d3:7d:1c:d1:35:db:9f:6c:c0:3d:2e:16:e4:6c:e7:35:
de:c0:f9:d4:3e:e6:be:8a:78:00:f1:dc:2a:a9:ee:00:51:7a:
ce:b7:ea:d7:35:4e:a3:5c:12:0f:14:2b:08:df:59:c6:8e:c5:
15:d3:ec:66:e8:1d:3a:ca:93:2a:b5:d4:95:d6:77:b6:c4:4f:
97:06:7d:51:5b:3d:55:07:f7:2f:1b:07:3c:9f:9b:19:d8:73:
a3:08:59:9c:ee:14:2a:80:b7:6b:05:60:80:99:83:35:40:0b:
48:b3:34:2d:01:90:ed:db:ee:1f:ad:ea:a1:78:a9:4d:ca:b0:
96:13:e1:eb:19:a7:5d:eb:6a:50:3a:8a:d1:aa:85:77:24:8f:
dc:95:0c:1c:96:d6:68:43:f6:c7:d3:57:a4:ec:55:0d:fb:7a:
55:b6:01:a5:8b:9d:41:ff:ac:a0:cd:d9:f2:5c:7e:c2:a9:19:
32:80:e7:ac:0b:34:9f:f0:9f:75:ca:23:b1:2d:87:16:31:af:
e0:ce:d7:e0:15:10:13:f6:dd:cd:85:1e:b3:e5:ea:f7:e0:77:
6b:4b:67:4c:95:7e:70:fe:61:d2:91:d5:af:e1:72:8a:23:21:
3f:fa:40:89:78:13:08:15:a8:37:61:99:e8:2b:48:9b:25:dd:
e2:5c:dd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:35:48 2025 by rpki-client