Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24b4a79c-3f8c-3532-ae2d-a0382fe626f2.roa
File: 24b4a79c-3f8c-3532-ae2d-a0382fe626f2.roa (raw, json)
Hash identifier: T4oSpQuxEODowvpKBew57+ti1ax9Bi/9tg/n/VngpFc=
Subject key identifier: 82:D2:11:B4:52:16:DB:08:B0:66:9A:B0:4E:BD:D9:95:B0:60:57:04
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB088E2ED768DF94B83F900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24b4a79c-3f8c-3532-ae2d-a0382fe626f2.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 68.83.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:88:e2:ed:76:8d:f9:4b:83:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=fcb52645-2036-4940-8f76-e2860db04c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d2:2b:3f:0a:d1:56:2b:d7:c4:0a:7d:8e:6a:
24:cd:25:25:85:64:be:5e:88:3f:80:9c:d6:35:54:
66:19:56:d6:74:d6:bf:78:85:e2:dc:c6:99:87:c2:
af:6b:b7:9f:29:fd:4f:b7:05:09:bd:d9:8e:18:9f:
fe:08:b9:eb:30:ee:70:30:78:3e:ab:c2:24:57:4b:
29:44:1d:a1:dd:d7:74:f8:49:db:fc:bc:83:8f:8b:
d2:c5:d1:7b:ec:2f:eb:08:83:98:60:5b:3f:67:b1:
24:1f:71:32:a7:17:68:32:3c:ad:30:9d:6a:cf:fe:
87:24:58:73:65:06:e8:ba:8d:9d:71:14:2f:3a:16:
41:a5:d3:3e:9b:e8:b2:7e:e0:77:09:b5:7b:f8:76:
f9:71:86:68:2f:a2:ac:d7:8d:76:e8:b8:94:e7:e8:
84:48:93:96:c8:d7:df:6a:cf:d2:9f:41:53:69:3f:
69:93:2e:cd:35:9f:9c:60:e7:a5:d3:12:33:ad:b7:
17:7c:70:ee:fd:ed:f2:e4:93:4c:01:91:52:3a:c6:
2c:eb:5c:0a:a6:22:96:79:55:e9:80:eb:5b:c2:78:
93:66:44:1a:e4:af:5d:e2:86:06:aa:22:36:b3:0f:
35:49:4c:fc:a2:bb:d2:fb:86:fe:56:cb:f1:fa:64:
de:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D2:11:B4:52:16:DB:08:B0:66:9A:B0:4E:BD:D9:95:B0:60:57:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24b4a79c-3f8c-3532-ae2d-a0382fe626f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.83.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:0f:84:81:53:54:f7:84:e2:44:e0:b2:7f:76:64:bb:31:f4:
a6:27:5f:4f:15:42:14:e4:90:d0:00:17:35:40:bd:0d:5e:89:
48:bb:8f:23:d5:4f:79:95:70:51:77:a4:99:50:5d:e9:66:18:
31:44:25:64:23:fa:62:71:b8:85:dc:66:f1:9e:b5:00:e1:81:
b3:e1:48:ad:e2:be:cd:ef:9d:02:c8:cd:c7:a2:5d:d3:3b:89:
62:ba:b7:46:cb:d6:52:26:c2:ef:fe:c7:12:9e:0a:c6:b1:f7:
95:d7:fc:f5:23:45:7b:01:cb:23:78:aa:3e:e8:88:0e:67:be:
2f:ed:bb:2c:e9:90:55:8a:46:0f:99:94:92:0f:1d:d8:d3:2e:
bb:c0:df:1f:fd:1d:ca:c8:8e:16:70:17:cf:48:dd:19:41:a8:
c9:01:fd:ff:86:99:8c:ff:7d:b1:6d:1a:c8:2f:f9:17:0f:a1:
16:35:5d:a4:c0:b9:14:b8:e6:fe:9e:12:f4:97:8c:02:16:a0:
48:bf:22:5a:c7:56:5d:af:31:ce:8a:9b:68:49:40:90:c0:0c:
66:49:17:db:f1:6e:8d:fe:e7:1a:a9:bb:53:11:dc:55:80:cf:
67:78:b8:23:2e:c5:3e:8e:1c:64:c5:92:c0:2a:dd:73:47:28:
1c:c8:8a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:42:51 2025 by rpki-client