Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d2253c9-b695-33e1-8dc8-8c33cd8fb437.roa
File: 0d2253c9-b695-33e1-8dc8-8c33cd8fb437.roa (raw, json)
Hash identifier: BKYlt9TImAuHubVH0Vg4TfcgsDj3v7xS5GGoL5u0gfw=
Subject key identifier: EE:0E:CA:35:47:5A:88:61:F0:1E:8D:2A:D3:17:F1:23:BB:9A:7D:58
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAEC1AB6812CE93339C8D28
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d2253c9-b695-33e1-8dc8-8c33cd8fb437.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33659
IP address blocks: 68.83.104.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:c1:ab:68:12:ce:93:33:9c:8d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=548106c7-feff-448c-95ae-0e5ba2cce71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:77:fc:27:b6:19:03:4f:e1:1c:e8:f9:6b:3b:
a6:fb:d9:41:34:f3:0d:4a:35:25:a0:a1:bc:60:75:
7b:54:1c:00:cd:ff:90:91:cd:fc:d5:86:40:e4:6f:
0c:6b:19:43:18:83:8f:21:71:39:34:41:53:3f:ec:
dd:f2:a9:1b:e5:db:fa:a5:16:cb:df:d4:e3:30:1c:
be:32:7c:d6:2b:f6:90:50:21:d7:8c:ad:8b:51:01:
a9:1f:44:60:2f:ff:34:77:2d:e8:ff:3e:c5:b2:45:
91:88:e1:10:23:b9:d7:3a:ae:13:60:a5:99:9b:81:
63:b9:34:86:7b:ee:03:a6:93:44:ec:97:da:b7:9b:
8e:85:b4:45:37:20:64:73:70:7f:e0:5c:8a:5a:12:
4f:fe:dc:dd:90:26:f4:29:6b:b8:e9:dd:d4:74:29:
52:2e:c8:aa:e2:69:89:0e:9c:a6:4a:14:62:0b:6e:
e3:c7:56:21:99:8f:8c:4d:d7:ce:ec:dc:8c:c2:fe:
dc:b6:64:1c:af:ba:e0:0d:e2:8f:cc:ec:25:55:ef:
00:39:df:ce:ea:f2:83:55:b9:3b:82:d9:d0:07:ba:
86:68:40:97:13:06:c5:3f:1e:a6:b9:19:6c:76:f6:
bc:f8:9c:57:16:28:f2:70:1e:ea:51:09:c0:53:f6:
56:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0E:CA:35:47:5A:88:61:F0:1E:8D:2A:D3:17:F1:23:BB:9A:7D:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d2253c9-b695-33e1-8dc8-8c33cd8fb437.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.83.104.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:b9:9f:fb:c3:63:08:bd:f7:b5:45:7d:5c:3f:5d:af:37:56:
58:61:7e:07:75:8b:73:9e:81:66:9a:6b:cf:a5:c2:e3:64:d5:
01:5e:dd:3c:b0:e8:e8:59:ad:37:c7:fd:ab:6c:dd:8d:a9:1d:
0f:e3:1b:98:de:b2:51:ad:f9:09:a6:6d:53:57:42:93:d3:77:
3a:8d:7b:4c:8d:46:64:45:13:1e:2f:02:00:24:10:71:be:4a:
0f:5b:27:cd:b5:78:8e:42:ac:d6:c0:56:e6:fe:c1:58:d0:4a:
7e:84:1a:df:36:30:c1:9e:35:18:bd:73:a6:39:1c:6e:39:3a:
35:a8:36:a2:f8:27:ea:f6:f0:5c:c8:0b:16:5c:56:a1:1a:2e:
82:53:bc:f4:73:c2:76:13:5b:01:d0:0d:4a:6e:61:8c:8f:99:
0b:86:05:4a:7e:bb:27:1b:39:fd:44:77:ab:43:15:10:51:82:
73:d5:65:1d:07:55:19:c6:09:bc:28:07:2a:ff:39:a7:c0:4b:
c4:cb:d9:53:bb:59:50:97:15:4b:9e:5f:dc:8d:e7:8b:68:70:
af:6f:20:55:c7:03:8a:0c:9d:8a:4b:a6:55:80:40:70:f3:9c:
0e:7f:39:ff:4f:81:93:ac:ac:00:74:33:4e:b2:fc:e8:57:1b:
c4:11:a0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:10:10 2025 by rpki-client