Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60f885cc-3ac7-3e9a-95bf-a61d0d947d21.roa
File: 60f885cc-3ac7-3e9a-95bf-a61d0d947d21.roa (raw, json)
Hash identifier: ZNvDGAd3HoW0CerMDrPBgcaHVQYhg+YqjinbsMF+6LM=
Subject key identifier: 0E:EA:6D:47:88:CD:06:74:CA:56:58:D9:1E:E7:EA:CF:5E:C7:59:C9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203C9640D3F7B9E250F72480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60f885cc-3ac7-3e9a-95bf-a61d0d947d21.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7725
IP address blocks: 68.35.16.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:96:40:d3:f7:b9:e2:50:f7:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=24865f76-800b-419e-9f42-b1056ab56cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:85:9a:6c:99:7c:68:8c:48:5f:e2:98:52:b5:
01:55:96:b5:4e:12:c1:68:c0:4b:9a:c6:b3:26:51:
4c:8c:6b:3c:b1:61:9b:54:83:d9:27:f4:ef:30:2a:
ca:4c:a2:85:e5:58:94:88:7e:f9:78:7f:c4:d0:db:
d6:7c:e9:f0:a4:7a:b3:ac:ec:ef:37:78:30:bc:f4:
7b:e0:9f:b9:93:20:ed:83:74:5b:80:a3:07:14:98:
11:c8:d7:7e:4a:f9:ac:dd:88:60:1c:35:d6:ad:7d:
58:d9:e2:05:b0:9a:65:47:4c:8f:2c:d2:a1:a6:c7:
37:a0:4d:fb:e7:07:54:20:58:79:8b:ad:cc:52:84:
ae:99:f8:7c:2e:ad:b8:d8:ec:e5:e3:3d:56:ff:ea:
aa:67:c6:7f:d5:a5:2d:15:9d:1f:c3:d9:ec:42:89:
c5:ce:0f:53:db:c3:26:52:b6:91:8e:b1:32:22:b7:
84:26:5b:e7:d2:01:00:c2:c9:c5:62:4c:d0:fe:fa:
b1:4d:64:0b:5e:12:8a:d4:ea:32:eb:ae:41:1a:b7:
3b:f9:82:e1:aa:8d:a9:94:b6:0d:6a:7b:13:74:27:
a1:1c:e3:ba:73:62:f6:1f:a4:2d:47:65:b7:d6:e4:
b2:a8:5f:43:3b:6a:74:df:cf:87:2b:7e:b0:ed:e8:
da:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EA:6D:47:88:CD:06:74:CA:56:58:D9:1E:E7:EA:CF:5E:C7:59:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60f885cc-3ac7-3e9a-95bf-a61d0d947d21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.35.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:e3:b5:b8:c1:89:aa:f6:6e:1e:20:36:ff:0e:c2:e5:07:28:
2f:28:ce:34:65:b4:1a:aa:2c:f9:c0:95:ef:72:31:c3:94:4d:
81:1b:44:49:32:55:1a:0d:37:a2:2a:0d:26:57:85:da:5d:fc:
a4:fa:ec:d6:f9:3f:e1:a9:5e:47:4e:bd:ed:0a:aa:d6:5b:00:
d2:81:5b:db:e3:ac:8c:75:61:f8:24:e8:86:69:09:0c:fe:89:
ca:75:04:af:3a:9f:d7:75:58:e4:9b:84:08:1c:54:82:7c:dc:
49:3a:1c:b1:44:6b:a7:4f:cb:bf:a1:cb:10:be:15:88:36:06:
c9:b5:bd:b7:d7:78:e2:9b:0a:98:87:6f:82:43:00:87:25:04:
b1:c6:1d:9a:9f:83:70:18:5d:25:df:69:31:af:57:a5:74:83:
63:91:db:bd:1f:d3:8e:83:1a:2a:f4:08:a3:4e:73:04:50:48:
9c:8e:9f:71:91:cb:42:8f:c2:e6:aa:94:b3:35:1e:99:36:3a:
e3:4a:b5:aa:10:08:45:7f:c6:70:46:d0:91:b9:e9:3b:44:18:
18:ed:b3:31:34:44:aa:09:cf:d7:a5:a3:bb:1b:29:b1:24:fa:
32:87:bb:93:24:72:d1:2f:5d:64:39:e1:5f:6c:eb:15:4a:05:
3f:80:ce:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:06:46 2025 by rpki-client