Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f92ce6e-3d1a-343b-bb86-db0707874013.roa
File: 9f92ce6e-3d1a-343b-bb86-db0707874013.roa (raw, json)
Hash identifier: pW25hvPHsnBeCf1l6m+VmDEpw+zBPFR1MYYqxqAFH3Y=
Subject key identifier: 8E:C1:58:57:DB:A5:2A:EC:B0:96:75:01:10:A3:8B:4B:6F:BA:EA:54
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6B7E34DBC1FDF73E460460
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f92ce6e-3d1a-343b-bb86-db0707874013.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 68.52.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:7e:34:db:c1:fd:f7:3e:46:04:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=af14a375-9966-487e-8caf-b3be3babffeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:25:f5:86:07:7f:24:34:91:e6:c7:f1:f8:1b:
a9:5e:34:ec:0b:f4:f1:2a:c3:b2:ee:21:3a:b5:71:
82:b2:ac:1d:13:ad:ee:8e:e1:1d:c2:21:5e:5c:37:
18:ee:98:7b:0f:5d:c3:12:00:d6:b3:66:6a:88:d2:
55:06:3c:d6:0b:a8:18:29:9e:47:e1:32:ff:3e:69:
76:d2:17:95:48:05:9b:62:2c:cd:e2:33:09:d3:c5:
f7:d9:7a:a5:fe:f0:40:d0:8e:2f:d2:b3:b0:d3:be:
32:85:c4:9a:6a:94:8b:b3:b7:f7:ba:da:f3:46:de:
1b:bf:06:2c:b1:74:0b:3e:da:57:61:9a:dc:26:88:
c4:70:4c:0b:df:87:84:da:7a:57:96:73:61:d5:ef:
ea:22:23:48:b0:f9:be:b4:b1:16:7a:57:ed:01:9c:
b8:d0:7a:ef:db:3e:5b:36:7d:19:7a:c3:86:b4:94:
be:46:86:5e:8a:9c:76:94:30:f2:00:d6:61:33:e7:
0d:c5:03:6a:82:8f:83:a1:56:fb:e1:af:2c:8f:59:
67:84:7a:d0:6d:2f:74:87:42:ef:80:70:2a:70:b3:
a9:90:e0:15:21:9f:de:7b:85:c5:73:5c:ff:fe:31:
24:10:40:2e:5e:31:fe:6f:59:bc:60:c5:e2:d8:ce:
ed:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C1:58:57:DB:A5:2A:EC:B0:96:75:01:10:A3:8B:4B:6F:BA:EA:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f92ce6e-3d1a-343b-bb86-db0707874013.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.52.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:bf:8a:7d:07:65:28:fd:6b:d4:eb:07:57:b4:81:ad:03:5d:
62:6c:bd:24:34:ed:46:4e:3d:fb:5a:a3:d4:fd:73:2f:81:08:
fb:d0:18:fd:c9:d3:1c:40:7f:85:c9:d4:23:5e:29:09:07:b8:
63:fe:ce:91:94:1d:00:e2:01:95:2d:19:d4:ec:61:e7:fc:1f:
d4:cc:a7:0b:22:df:d3:3e:29:6d:19:e2:ee:15:37:0e:32:a0:
d1:47:4f:1d:60:db:58:db:af:6f:36:16:cb:fa:84:39:eb:89:
59:5e:98:dd:75:bf:99:0d:a6:d9:eb:78:d8:9a:f7:15:d1:f9:
5e:e0:3a:ea:33:49:63:d2:1f:ab:d7:92:5f:2f:72:cf:01:6c:
65:3b:ee:99:b2:40:cc:21:9e:44:d5:f9:98:96:82:eb:75:e1:
7e:7a:eb:f7:11:1e:77:65:40:9a:db:e3:a2:b0:a0:bd:77:81:
90:a1:f3:03:a8:81:06:f3:77:b8:c7:f1:d8:57:55:79:a9:d7:
92:d3:7d:6f:ee:46:22:fb:ce:6f:11:c1:6a:03:65:71:54:ea:
9e:5c:14:e7:4e:9e:3e:6d:b0:3e:70:01:91:6c:af:be:86:2e:
64:ac:5a:46:fd:cf:cf:12:b2:62:68:ed:c1:a9:40:78:0e:88:
30:ee:ff:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:08:20 2025 by rpki-client