Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08b8b62c-d0b5-3ceb-8864-e7b716b15e55.roa
File: 08b8b62c-d0b5-3ceb-8864-e7b716b15e55.roa (raw, json)
Hash identifier: d6v8Cb6xgXB5DpZZpwjkcuMrC6brQe/iU41g4LtJKUM=
Subject key identifier: 75:E1:7D:A3:06:5D:81:DE:52:83:7A:82:2F:6F:94:75:86:A9:6A:CD
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D2DB4CF73F56349131D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08b8b62c-d0b5-3ceb-8864-e7b716b15e55.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 7725
IP address blocks: 68.86.16.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:2d:b4:cf:73:f5:63:49:13:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=5889850e-dd49-4539-8075-efead2225e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9f:9e:9f:9a:94:7a:d9:85:d3:d6:0e:b3:09:
7f:f2:54:76:09:e2:d4:f6:55:c8:a4:84:81:d6:1e:
08:aa:34:41:95:37:49:00:55:06:b1:8c:1e:4d:71:
81:4e:35:49:89:00:51:9b:14:b0:2a:85:b7:2d:15:
dc:d4:82:88:44:1b:f8:bf:8c:ca:8d:ab:d6:67:86:
c7:7e:25:34:00:ab:24:16:74:f4:00:a4:71:21:27:
da:08:8a:2f:5e:55:1e:3a:c3:63:7c:81:16:35:67:
73:d4:8e:26:a8:94:bb:fa:10:23:b1:1f:2a:f7:da:
33:fc:d5:f3:df:98:21:9e:27:95:49:04:5f:f9:35:
32:ab:20:12:25:65:01:0d:2c:43:c5:a4:77:68:a2:
5f:e4:e4:cd:ae:66:8e:c0:45:6b:a3:bf:8a:b5:e2:
95:d2:94:9b:7a:e5:8b:a1:93:35:31:88:3e:af:4b:
e5:77:77:1b:02:09:e8:e3:4a:43:f8:35:23:da:d0:
91:b6:6b:70:8a:3a:07:67:5f:42:5c:84:db:a0:fb:
02:39:15:0b:c6:07:a5:37:38:d3:72:2d:30:0b:be:
ce:a4:cf:51:9e:e5:84:3f:7a:d8:db:87:fb:5a:46:
2a:db:55:bd:7d:a3:ce:a1:c4:88:33:bc:0d:0e:d6:
3c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E1:7D:A3:06:5D:81:DE:52:83:7A:82:2F:6F:94:75:86:A9:6A:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08b8b62c-d0b5-3ceb-8864-e7b716b15e55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.86.16.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:b4:ac:c0:7a:ac:2f:10:47:13:87:a1:94:9d:93:75:aa:eb:
a3:79:0e:4a:9d:17:c7:ed:ce:29:38:a7:3d:df:0e:f0:c0:37:
02:67:a4:2e:f7:5f:62:72:90:36:b0:7e:5f:08:81:fe:13:84:
09:ef:93:a3:22:25:3d:ba:7f:1b:59:99:d5:63:d5:1c:ae:36:
1f:05:03:1d:50:0f:61:9b:82:da:89:42:24:46:e1:bc:bf:86:
8d:11:a6:66:4f:86:08:80:8e:83:5c:15:7a:35:e9:6a:c7:64:
dc:94:cf:5a:c2:73:55:25:da:08:04:32:ce:b3:9d:c3:2a:5a:
55:52:01:1f:fd:aa:8b:dd:c5:e8:c6:69:47:32:16:41:1b:34:
d8:43:aa:0d:76:72:c5:da:83:5c:66:e9:42:f4:bd:9e:c3:fc:
3f:b7:3a:ac:79:49:b5:ae:15:c1:b7:13:f6:d3:af:0a:20:e4:
c2:69:04:e7:32:ee:5b:f3:6e:d5:9f:c3:2d:5b:48:0f:9f:20:
ae:9f:76:69:b2:9e:e6:e9:44:2d:3c:2e:11:73:c4:50:cf:20:
15:bc:bb:04:7d:33:4a:aa:be:6a:40:c1:02:5d:6d:b6:bc:c0:
fd:1d:a2:36:df:46:27:1a:a0:2b:71:75:30:15:7d:28:4e:fc:
ab:38:6e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:47:09 2025 by rpki-client