Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a5f9204-d4af-31d8-9cf5-1538d84de9c9.roa
File: 4a5f9204-d4af-31d8-9cf5-1538d84de9c9.roa (raw, json)
Hash identifier: qgYwv+Ob/K5Zx4sMSVjnP13I2XtSUyZOZffMzfeqDqE=
Subject key identifier: EC:BD:A5:1D:B1:A4:16:90:4A:BD:E2:EA:5E:54:C4:49:A2:92:8B:DB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6BE15870EC67121547A080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a5f9204-d4af-31d8-9cf5-1538d84de9c9.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33489
IP address blocks: 50.240.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:e1:58:70:ec:67:12:15:47:a0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=20f8cfe2-3bd4-421c-b4f6-6576f91c7ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:13:10:8f:ef:0b:13:39:38:01:0b:54:b6:50:
df:7a:31:2e:b1:84:0f:95:b9:db:a6:4e:d8:a2:b9:
04:fb:57:10:2c:95:cd:48:80:81:bb:5e:f3:20:e5:
21:57:e4:7e:4c:79:5e:b4:e4:57:ab:2d:ad:ef:32:
18:48:d5:03:c8:6b:bb:bc:9e:59:c0:1b:09:1f:60:
5e:79:7d:65:14:39:10:60:08:dc:f5:a3:8b:c6:62:
a4:01:a0:17:e8:9b:4f:2f:5d:a2:56:cb:8c:14:0b:
e5:94:fd:e9:d2:51:f5:87:2e:fa:b8:5e:30:08:8f:
a6:31:8d:2f:fe:6f:cf:39:f7:ca:16:16:46:32:e5:
d7:c1:cd:69:eb:1f:95:5b:a5:62:2e:81:b3:b6:71:
4c:3e:85:4e:64:e4:7f:1b:7a:fc:b7:ed:22:79:26:
47:b0:bb:58:0a:b8:ce:3c:f7:0b:41:4f:ac:a5:2c:
07:a3:64:3b:ca:b4:7d:3f:02:c0:ad:f2:61:d4:3b:
1e:37:7c:a9:9f:a0:93:b5:4b:18:a4:5c:a4:af:ad:
5e:c4:1a:a9:6c:f8:e6:7a:c2:fd:8a:47:5d:5f:df:
6d:58:df:bb:ba:df:69:29:a6:bd:44:f7:79:1e:e9:
01:be:68:65:32:f8:4a:84:00:8d:94:00:e0:83:16:
50:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BD:A5:1D:B1:A4:16:90:4A:BD:E2:EA:5E:54:C4:49:A2:92:8B:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a5f9204-d4af-31d8-9cf5-1538d84de9c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
50.240.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:4b:8f:53:d7:1e:56:66:25:3d:a6:1f:00:4f:49:37:1f:96:
13:8b:fa:ba:0b:f2:31:ce:0e:a6:a8:19:d2:4d:97:1a:80:80:
b2:4e:60:1c:66:65:f8:0a:44:bd:b8:1d:b4:89:f9:be:12:97:
53:ec:1f:25:5a:e5:eb:cd:1c:f1:e0:b4:ff:e9:75:ba:8d:2d:
ac:8c:a8:b0:55:36:2d:e1:d0:68:16:21:fb:16:7d:47:c8:b9:
fa:ff:26:98:e8:ae:69:4f:17:c8:b7:01:90:6f:30:9a:99:82:
7c:2a:90:e5:8e:6f:84:ab:7f:6c:b6:e0:55:ab:1a:b1:9b:52:
b1:da:bd:57:24:c1:c8:ab:01:01:1b:15:6b:da:a3:a1:fa:b2:
81:1c:74:53:d7:d5:88:82:ec:50:07:2c:0e:0d:05:13:ee:b3:
44:6b:4c:bd:e9:9b:45:e7:ba:f5:ac:5b:7e:b5:93:96:00:b5:
fa:df:03:81:2c:1b:1c:73:51:8d:05:37:fd:58:e2:e8:e9:3d:
31:5d:02:df:6c:ff:92:7d:0e:c5:65:d0:9d:e3:27:31:3e:29:
8d:1f:9a:f5:ea:aa:3b:82:cf:70:9e:fb:32:91:6e:6b:52:dc:
89:db:91:d6:72:b6:77:f7:35:a5:01:b9:41:5a:10:fa:8c:7a:
eb:a6:01:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:20:25 2025 by rpki-client