Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/75fcc59c-be71-3a77-b646-e47e11da0644.roa
File: 75fcc59c-be71-3a77-b646-e47e11da0644.roa (raw, json)
Hash identifier: x1Mt9wYb8D6o18M7VOZThTzZhBOw33TOtY15Vsx+KiU=
Subject key identifier: 22:56:5B:8A:D4:DB:F2:2E:EE:90:AB:02:04:AE:AF:F0:D7:86:16:A4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAF0010FF9F6B30DA247F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/75fcc59c-be71-3a77-b646-e47e11da0644.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 68.84.236.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:00:10:ff:9f:6b:30:da:24:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=959ddc66-a0b5-42a8-8c92-41ba71c7fe3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:10:0e:71:c5:e0:28:e1:ef:51:8a:3f:97:c1:
d9:87:78:54:a3:28:80:69:66:7a:10:61:b1:a3:42:
b9:ea:a4:79:db:89:bb:87:63:bb:18:c8:74:6c:64:
c2:95:f3:4c:34:ac:18:32:dc:b4:66:71:1e:b0:da:
44:57:69:2c:5a:54:c1:51:e4:76:c1:81:55:b9:63:
78:ad:42:27:46:69:b4:6a:93:ae:ad:34:26:05:e8:
0a:86:b2:48:0d:f9:1e:6e:fc:d1:66:57:3c:52:05:
2d:fb:dc:b7:9e:78:25:09:61:c8:5b:6a:02:2c:98:
98:00:e6:8e:6e:41:31:84:26:35:13:09:57:07:c2:
cf:6d:61:2b:f7:54:bd:6c:c4:be:d4:a4:c1:1e:85:
11:12:eb:ff:0b:5c:28:b6:f2:88:9f:34:e4:73:83:
a5:f3:0b:86:46:b8:a6:83:31:f8:02:86:71:26:79:
27:be:2f:3f:7c:2c:7f:4f:26:2e:b0:9d:c2:d1:56:
b3:1f:52:00:0f:24:85:d1:c5:f6:84:50:e2:09:de:
25:92:77:71:19:46:34:db:8d:c2:2e:31:de:27:55:
4e:c2:41:80:d5:0a:ed:31:43:5f:93:3c:04:6c:a0:
b8:e8:af:22:8c:b4:e4:3b:2e:83:ac:d3:e6:29:9b:
7f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:56:5B:8A:D4:DB:F2:2E:EE:90:AB:02:04:AE:AF:F0:D7:86:16:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/75fcc59c-be71-3a77-b646-e47e11da0644.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.84.236.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:a9:a4:dc:4a:f7:91:26:5b:84:44:e8:61:97:cd:09:25:6d:
b0:5c:c1:e4:73:f6:50:a6:fb:7e:67:dc:04:d4:ad:a4:40:2d:
01:fd:df:c9:fd:93:c2:3e:34:84:c3:1e:88:bb:f7:88:b8:a5:
3f:e3:f2:a4:da:91:5b:b6:e4:fd:7e:dc:18:bd:b2:e7:2c:fd:
17:09:60:c6:28:b7:b6:77:c9:05:ce:17:f7:26:36:87:7f:02:
0b:8b:c2:a1:61:14:ea:30:81:fc:7c:3e:b3:96:62:3b:74:cf:
dd:bf:b8:c4:06:9b:f7:35:7b:07:4b:13:66:52:21:27:e9:7c:
f2:75:fa:ae:4f:6b:0f:b6:76:c0:92:cc:43:b3:c5:ce:a4:14:
eb:6f:e0:4c:00:00:f0:44:ca:f0:44:e1:d3:2e:c2:22:8f:d7:
fb:6f:d3:84:d9:9f:d4:64:57:4f:91:90:d4:1f:b4:35:70:97:
95:4f:64:d1:d0:a8:b9:44:6b:e3:18:b9:2a:e9:58:e8:b3:6d:
f6:1f:7e:ee:c5:2d:94:6a:19:a0:a5:cb:56:f8:7a:e4:ca:cc:
25:72:62:db:93:ba:a9:27:25:51:26:ed:30:1f:85:a7:79:fa:
e2:09:a4:f4:07:49:cf:f9:0b:15:2b:64:3a:a8:44:3b:c8:49:
cf:b1:15:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:04:43 2025 by rpki-client