Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91a9a0a4-57b4-34c5-96f2-c69ddd73901f.roa
File: 91a9a0a4-57b4-34c5-96f2-c69ddd73901f.roa (raw, json)
Hash identifier: 6QkRES/1CYYycuNPRvjxaaB7YfVNu7PS95o9WlkbtTY=
Subject key identifier: 0B:71:FC:4D:74:2F:87:0D:3A:E7:04:1C:41:D7:E8:D9:BE:1B:FC:96
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6CE2A839AB9E687386BF80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91a9a0a4-57b4-34c5-96f2-c69ddd73901f.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 68.53.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:e2:a8:39:ab:9e:68:73:86:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=7636c747-1e91-4dfb-910f-6ea5ab9d513c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a6:c3:93:7b:8a:54:b7:a1:cc:27:eb:f2:65:
9f:77:a4:a9:09:9a:93:3a:d1:c0:ab:5a:5a:0d:65:
53:0d:13:bc:b9:8d:fd:0e:30:f5:ba:07:6a:6f:90:
c9:e2:23:b5:2f:43:86:5c:fe:d5:8a:ab:8c:0c:7f:
f7:6d:85:4f:8c:f4:9e:c1:75:1e:52:a5:c5:df:73:
fb:c9:6a:b9:f6:e5:b6:35:43:20:93:a4:26:ec:30:
3e:81:04:2c:45:47:1c:3e:fa:9a:d0:8f:2e:9b:79:
0e:c0:12:0b:89:ba:cf:46:ee:07:b2:89:73:fd:eb:
dc:0f:cc:85:8c:54:ba:70:e5:51:27:fc:a7:eb:3b:
16:4c:fd:44:bc:3a:52:26:7f:76:5b:ea:d0:13:c1:
57:55:0d:e7:6a:76:38:db:a0:22:9c:ff:51:cf:73:
f9:a4:92:f3:54:17:7b:7d:fe:86:06:d0:5a:54:8e:
32:78:6d:0e:fc:c2:9e:0f:05:97:44:18:53:80:8c:
58:c7:d9:4b:5a:b6:b2:d4:dd:05:40:44:2e:7c:6a:
bc:61:b3:ba:e6:d2:a1:b0:22:6b:d7:bc:1d:db:26:
3f:86:e6:13:3c:7d:b9:36:a3:70:1a:21:45:ca:53:
ab:6e:ae:6a:22:86:e6:74:fe:ce:dd:bf:64:3a:b6:
b0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:71:FC:4D:74:2F:87:0D:3A:E7:04:1C:41:D7:E8:D9:BE:1B:FC:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91a9a0a4-57b4-34c5-96f2-c69ddd73901f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.53.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:b3:a4:31:a9:e2:ec:5e:f7:ed:40:77:63:36:31:bb:3d:f5:
83:9c:a5:1d:5b:c2:52:b9:0c:58:3c:af:42:5c:92:55:14:60:
14:05:68:f4:93:29:8f:03:cf:63:0d:38:44:93:ea:9e:ea:45:
79:0a:fe:08:f6:8b:76:c0:a8:76:da:b9:e3:7d:ac:e3:ae:3b:
0b:3c:e1:a1:78:21:53:d6:b6:58:0d:ef:02:5d:79:57:31:3e:
95:6f:11:f7:8f:f4:06:2d:31:c6:e9:a0:76:ac:ad:a5:96:95:
dd:c4:6f:7e:c8:69:d7:c1:5d:91:87:bb:95:67:04:2d:ff:83:
40:dd:4d:b5:61:f6:8a:b3:8f:2d:0d:d1:e5:ad:e3:e5:d4:54:
67:d6:f4:ae:6c:3a:08:64:4f:ca:f2:dd:43:1d:ef:42:d9:82:
a7:57:ab:09:19:89:e8:d4:f0:e5:49:31:0e:04:9c:0b:54:29:
78:e3:79:35:42:25:6d:bf:9b:84:64:72:9e:fe:ff:47:04:71:
0e:48:18:e6:7e:e5:37:05:24:66:f8:87:a0:9b:80:d3:63:2b:
a8:99:dd:42:ba:84:64:84:36:d5:b3:ac:03:2f:46:1d:fc:ad:
6b:3b:a0:88:ac:f9:7a:54:38:5b:a9:ce:a2:98:7e:35:72:24:
3d:cb:86:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:10:42 2025 by rpki-client