Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ff0511c-1af0-30a6-be5f-e94c9faf1637.roa
File: 9ff0511c-1af0-30a6-be5f-e94c9faf1637.roa (raw, json)
Hash identifier: uKcoK6qoeAUAw1yiunX6yWItMqI3BNuMfaM83oK/Bqg=
Subject key identifier: E2:C6:C8:74:58:40:65:61:48:B9:6C:92:BD:F8:97:BE:0F:EA:C2:46
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F8F2DE93CB72F43A4F2C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ff0511c-1af0-30a6-be5f-e94c9faf1637.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 68.61.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:f2:de:93:cb:72:f4:3a:4f:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=77f2bdba-4bc6-4230-9661-d0628b9521f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ff:9b:af:f0:18:c9:cb:47:42:0c:86:4b:58:
c0:ab:aa:69:b1:74:40:26:71:b6:2a:81:3d:6e:5f:
c9:8b:de:e7:de:b6:54:4a:47:b5:10:56:b6:fd:f1:
25:f1:2b:91:be:c0:95:32:f8:7f:57:68:e9:ce:db:
04:37:33:0f:13:2c:72:54:d6:f9:ab:6c:8d:4b:2a:
d7:b2:44:60:de:46:04:a0:fb:72:4a:f3:9f:6d:ba:
b7:4a:50:19:f0:c4:83:73:c5:04:48:9c:52:26:2d:
55:46:01:41:08:f3:ab:4d:13:f1:65:a6:4d:31:42:
45:e5:fb:21:4c:a0:69:0e:c8:32:32:83:07:af:09:
e3:b0:8a:48:ba:12:99:76:dd:31:81:6c:16:3c:ec:
a5:a3:99:18:44:51:5d:f3:e5:69:9e:d8:aa:74:f8:
e3:78:86:40:06:fd:94:d7:cd:e7:92:d4:40:82:d5:
2e:fe:d4:e9:1a:ae:af:3a:02:38:1b:08:df:2f:bf:
c1:f2:12:d8:9f:bf:19:c6:4c:4d:d4:32:ab:84:28:
f1:c7:f5:d5:ea:ce:35:c3:72:91:70:ea:8a:b2:67:
3c:61:a8:b0:8b:ef:39:9b:76:fe:fd:01:15:19:3d:
56:fa:47:f9:9b:56:47:c0:2a:4c:ba:31:e2:82:32:
db:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C6:C8:74:58:40:65:61:48:B9:6C:92:BD:F8:97:BE:0F:EA:C2:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ff0511c-1af0-30a6-be5f-e94c9faf1637.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.61.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:50:58:93:70:cf:6b:78:fb:7f:5e:a6:76:81:b4:fc:91:c8:
86:fa:67:81:7c:51:75:f8:d1:92:f2:52:67:63:33:f9:e2:65:
d5:ae:1f:22:2a:1a:80:a9:4f:19:71:f1:0f:b0:a5:a9:83:52:
dc:bb:0c:05:66:00:10:8d:19:76:ed:52:18:d7:4c:9a:c9:e9:
6b:1d:d3:7c:47:1f:31:f1:9e:6b:4a:c4:de:d7:e1:c0:05:e1:
bf:da:65:78:ad:8d:67:6b:50:78:62:f3:49:27:8a:a8:55:9d:
82:cb:20:23:58:7e:bd:62:42:72:85:2b:de:3a:0e:10:b2:81:
ad:e9:b3:50:8f:ba:70:e8:88:37:64:01:74:15:68:26:89:a8:
61:f0:49:2e:04:a0:df:b3:fe:6c:5a:dc:73:e7:03:b0:ef:a5:
a3:9d:46:dd:48:7f:d3:13:b3:3f:5a:8b:d6:b4:80:34:94:12:
13:34:17:49:79:05:bc:6d:01:1e:a8:49:4b:fd:c1:de:6c:71:
62:05:cd:20:6a:18:40:2c:00:49:e5:be:3e:8b:d7:1f:09:f6:
d2:d3:e0:e5:ec:79:1f:b5:48:16:1e:ce:f8:b2:72:67:06:fb:
8d:98:65:8f:d2:89:d7:ad:83:fd:9a:82:f4:fd:d5:6c:9b:51:
d5:1d:8d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:55:38 2025 by rpki-client