Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66afdb5e-94b0-3a6a-92e4-481e1e3cc756.roa
File: 66afdb5e-94b0-3a6a-92e4-481e1e3cc756.roa (raw, json)
Hash identifier: hYDoeEx5ir974ES+4na2Q0P7bN0lHnkKUuaap1UiWqs=
Subject key identifier: 6D:8D:1D:06:59:B9:DB:98:6E:B6:5E:7C:4E:B4:A0:D7:83:72:04:47
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6B7EEB94D6B1F62E9B0180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66afdb5e-94b0-3a6a-92e4-481e1e3cc756.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 68.52.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:7e:eb:94:d6:b1:f6:2e:9b:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=a03e7e07-1cc1-417c-b955-3f315f35a166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:15:9f:e1:b2:15:e1:93:40:50:e3:50:b5:5e:
bf:ec:b1:79:9f:47:9b:52:f5:9b:41:7d:ab:9d:0d:
41:16:30:33:ba:6b:ae:31:ea:f3:ac:a3:14:3c:0b:
72:7c:08:da:f2:ba:a7:77:db:5a:20:94:65:5c:79:
a1:39:18:a8:c5:b7:29:d9:8d:69:49:8b:b3:0a:fb:
38:2e:ac:3a:24:24:4b:7e:12:da:65:eb:f3:81:83:
d6:c3:ee:ef:e9:e4:cf:f7:f3:02:c4:34:19:df:40:
09:8d:31:bc:29:95:65:b8:4d:34:70:7c:54:ed:3e:
8b:c9:c8:d0:9c:e7:0a:7b:c3:73:f7:af:34:a5:72:
7f:99:9f:3d:7e:bd:5c:84:45:1c:64:0d:4a:8c:bd:
82:e1:94:f0:41:d9:61:fd:c0:47:e1:3c:84:93:95:
52:5e:18:71:9b:84:aa:8c:05:59:03:59:73:b9:47:
7e:f7:e2:a2:f5:66:08:73:48:58:be:bd:ea:ff:ad:
ff:db:cc:b5:03:4c:0f:4d:c0:3b:fb:36:c8:3e:68:
15:b9:11:1c:7e:00:82:1a:05:75:65:a1:39:f1:88:
2c:69:e0:b0:9b:89:66:fb:4f:b1:17:e5:8b:3a:43:
4a:31:ba:9f:ec:ff:07:22:a0:b3:a4:4b:cf:47:a5:
ca:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8D:1D:06:59:B9:DB:98:6E:B6:5E:7C:4E:B4:A0:D7:83:72:04:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66afdb5e-94b0-3a6a-92e4-481e1e3cc756.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.52.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:b7:16:5b:aa:e7:55:a9:ca:0d:c6:55:0c:5a:c4:b4:35:2f:
fb:9c:6f:bf:89:28:36:b3:bc:f8:b2:ec:b0:7d:55:c7:f7:49:
8c:15:42:1b:ed:5b:6a:69:35:69:1a:42:54:57:a5:75:26:a4:
9c:fe:ba:b3:4d:38:64:ca:af:b8:9a:95:ac:77:23:98:6f:1e:
69:d6:49:5a:b4:79:9a:2f:6d:fa:96:6a:3e:d5:63:00:e2:70:
3d:6b:e9:b3:e9:9b:f6:a3:f0:69:15:6f:f9:61:13:b1:0f:6d:
3a:be:a6:98:5a:81:71:e9:1b:ce:6c:30:06:60:32:05:b9:d6:
16:a9:91:b4:48:fc:6c:be:db:46:05:b1:24:e6:86:28:c9:6c:
3c:e7:b7:80:ff:e9:31:a6:ac:7c:54:2f:a6:b1:01:a4:a6:f9:
5e:59:df:cc:65:ec:82:7b:8c:c2:90:60:02:3a:e8:b1:50:59:
fd:e7:42:cc:a5:33:d4:29:e5:3d:a4:cb:2f:df:df:19:bb:dc:
ee:db:82:3b:66:b1:7f:f2:36:e6:69:07:ad:13:19:bf:d6:8d:
2d:e8:72:cc:52:de:75:f6:64:ec:c8:46:86:d8:2b:94:5f:4c:
0c:b7:97:1e:39:68:47:c7:1f:69:ed:3c:58:77:6a:e5:93:83:
2e:46:25:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:08:44 2025 by rpki-client