Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/863a4b84-1653-3d1b-9139-69e7b60c3efa.roa
File: 863a4b84-1653-3d1b-9139-69e7b60c3efa.roa (raw, json)
Hash identifier: ANwoGK5ehGMgYDJuW4z0e9EHr3bfx1eLEAcCCQQMXEs=
Subject key identifier: 1B:D9:20:68:65:9E:00:90:1F:9E:C7:76:D9:E9:2D:D5:C6:0C:2C:E0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F793C26EC57B91EF680880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/863a4b84-1653-3d1b-9139-69e7b60c3efa.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 68.49.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:93:c2:6e:c5:7b:91:ef:68:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=112f5288-da87-4fa4-9df5-227534389a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:46:ab:13:40:9b:83:3a:0f:ea:f8:c1:87:39:
71:0e:12:9b:8a:88:a6:f6:7c:9b:c4:39:c6:a8:42:
3b:88:d5:87:e6:11:9d:94:89:37:3d:f3:cf:8d:95:
39:64:ef:26:aa:72:0f:95:3b:da:ab:88:60:2d:9c:
d8:a0:0d:9f:47:bb:fa:9a:5b:97:e7:4f:55:b7:dc:
2b:fa:52:a3:c0:86:50:b4:7d:75:fb:fd:b0:c4:28:
9d:12:b4:ec:4d:5c:66:66:17:65:a3:ae:55:f9:e7:
90:ef:d6:38:12:46:51:de:e1:00:63:22:27:7d:01:
e1:3e:d0:5a:53:20:94:d2:d0:19:15:41:cd:c1:0a:
28:89:6e:45:7f:a5:f3:91:3f:da:ea:54:a3:17:9c:
ec:a1:e1:12:5e:e5:d7:07:95:aa:2d:1b:e0:61:0d:
0b:1c:c0:36:73:6d:29:a0:db:d3:1d:48:5e:d8:fa:
5f:0c:08:42:6d:d2:16:4c:f5:d7:68:cb:6c:36:4d:
8f:88:6f:7b:40:bb:b6:0f:c4:a5:84:53:6e:9f:a3:
e7:ed:c3:3a:95:de:44:57:ff:df:a4:2e:b4:35:0d:
00:69:05:1c:1e:53:2f:5a:cc:aa:dd:65:21:47:65:
3a:7b:2a:63:3f:73:13:6d:dc:c0:f1:c4:df:83:3f:
ad:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D9:20:68:65:9E:00:90:1F:9E:C7:76:D9:E9:2D:D5:C6:0C:2C:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/863a4b84-1653-3d1b-9139-69e7b60c3efa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.49.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:26:e8:99:2a:0b:8d:9b:1e:7e:e9:6c:e8:19:c5:30:a7:38:
b2:e5:c9:ba:77:92:d7:72:b9:97:a1:ed:d8:c1:5b:c5:64:dd:
0e:3a:4a:38:49:0e:42:ef:75:f0:ca:c8:65:63:ff:f1:50:91:
98:13:e0:d5:1f:7e:cd:28:c3:d6:1f:b5:ad:8f:be:bd:a5:bd:
b9:31:54:43:e2:f2:9d:97:6e:f4:18:e4:7d:a3:d7:ca:c6:2c:
a0:cb:39:38:4e:63:5f:8c:dc:81:19:df:b3:7a:1b:a1:bf:80:
52:ac:72:87:1e:2a:42:79:b8:26:11:d0:37:cf:ea:cd:d4:0c:
b5:08:30:fd:a1:b3:92:c6:92:0b:21:4a:ba:6d:3d:dd:7e:08:
0e:cf:11:6a:c8:b4:5f:78:4a:94:15:fb:b4:19:4c:0a:50:a8:
87:af:37:2d:5c:5d:c7:47:bf:4d:83:51:27:8d:69:39:84:3d:
bf:cf:ec:e0:79:9b:ba:29:cb:f8:95:ba:3d:54:39:ea:5d:b6:
5d:c0:66:aa:0c:de:e5:f6:ea:ad:65:23:3a:f2:68:fc:0c:65:
e0:36:8e:31:6e:3c:9e:17:29:9c:f4:53:b8:90:56:43:6a:a2:
d9:22:55:c2:99:87:7b:95:00:4e:f1:dc:9f:77:7d:53:8d:19:
ea:d9:cb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:34:09 2025 by rpki-client