Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/250a636e-51fa-339e-a80c-3133fe0e5cfb.roa
File: 250a636e-51fa-339e-a80c-3133fe0e5cfb.roa (raw, json)
Hash identifier: acqgvDka91/4/S5dgNYWpgUhWRcwhovIrzCVtrl5e5o=
Subject key identifier: 75:26:94:8E:77:D3:A0:BF:77:8D:79:CB:1E:F3:61:C4:95:D1:B0:C3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB0D0EECDC1471020BC9F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/250a636e-51fa-339e-a80c-3133fe0e5cfb.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 68.38.60.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:d0:ee:cd:c1:47:10:20:bc:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=cdbd55fe-db9b-4fed-9fa4-94ab8c1a7841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:32:01:fe:a8:e4:61:ad:42:6f:82:e3:8a:3b:
9b:49:d1:06:f2:76:b3:3d:f2:b3:79:48:06:b9:4f:
d5:80:b3:ae:a7:c3:2a:8e:7e:a2:1a:40:ac:42:4d:
ed:1f:6c:01:6b:16:1c:1c:e8:fe:36:c5:1c:20:7b:
65:24:d2:bf:91:34:32:1e:bc:d7:08:53:97:81:24:
89:4d:13:79:2e:26:dc:5e:86:0f:ce:6e:8e:cd:b4:
bd:8c:8b:95:e9:53:06:4f:e4:17:29:8c:d1:1a:ee:
f3:bc:c3:65:cb:0a:75:10:46:d9:d0:99:49:37:c3:
ba:cd:4a:37:14:e6:7f:24:da:a5:fd:f3:78:ed:8b:
8a:82:41:06:d5:d9:59:84:06:24:6d:d8:ff:a8:8e:
91:ef:ad:70:6b:84:d0:28:98:f0:02:27:1b:68:36:
1a:9c:88:5f:5d:d3:3d:bf:67:84:53:d7:f7:e8:33:
e7:05:9b:c6:d3:49:42:c0:bd:4d:07:29:65:fd:25:
71:89:2d:46:c8:63:3f:5b:df:a5:67:4f:69:60:d7:
8d:a0:3c:92:86:68:7a:e3:3b:b5:b2:50:7c:77:8a:
6e:25:e5:79:1a:13:04:5d:4c:6b:65:56:b3:7f:36:
06:9d:81:c1:55:fb:9b:4b:6c:df:e2:64:41:db:86:
d5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:26:94:8E:77:D3:A0:BF:77:8D:79:CB:1E:F3:61:C4:95:D1:B0:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/250a636e-51fa-339e-a80c-3133fe0e5cfb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.38.60.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:cd:16:30:74:15:48:db:21:53:05:48:f9:0b:46:c9:f8:44:
89:a5:54:c8:8d:80:1a:82:6c:5a:8a:9d:e7:1b:0c:b2:ac:69:
6d:fc:1c:e8:92:3c:42:ea:6f:9d:68:3b:03:18:c2:f1:4f:a2:
08:59:74:fe:16:0a:fb:03:e1:c7:42:f0:a0:10:ca:5e:42:ed:
0b:91:c3:47:c5:69:da:8f:be:70:24:1d:66:6d:ef:62:02:f9:
de:78:95:48:90:83:47:ee:82:87:84:dd:69:7b:5e:11:7b:c2:
cb:2d:a8:80:83:ea:51:91:96:2d:68:7b:c3:22:83:92:b5:2c:
c4:44:a4:90:2d:fb:a9:ff:c3:f7:0b:f4:ee:6a:13:cc:fb:19:
01:f5:9b:0f:c9:da:fa:47:70:29:ef:95:33:52:ff:75:26:4b:
5d:29:68:fe:11:83:6d:50:eb:08:59:f2:b5:83:0d:a2:10:92:
ad:f6:29:46:f0:85:e0:58:17:7f:86:15:89:a0:5d:25:ce:1a:
1e:ba:5b:ac:16:c3:67:be:6a:6a:9b:40:39:8b:11:3b:ac:31:
02:68:a3:4a:f8:19:3a:0b:5e:c9:ac:05:ca:c4:ae:6a:32:d5:
59:4d:ab:62:1f:f8:82:95:6d:0f:bf:56:e1:65:b2:42:79:8d:
2c:a3:f8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:52:01 2025 by rpki-client