Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a045930f-21e6-3fa5-88e5-68bbd0443e2f.roa
File: a045930f-21e6-3fa5-88e5-68bbd0443e2f.roa (raw, json)
Hash identifier: pkdlKDzg3X475j3AAlFvZOb9vdH3C01cgwLwXz3hbB8=
Subject key identifier: 0C:A2:25:F0:0B:52:15:15:74:03:9B:A1:E7:15:B0:12:3E:A1:7A:46
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6CDFBC1EB00A115D86D480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a045930f-21e6-3fa5-88e5-68bbd0443e2f.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 68.52.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:df:bc:1e:b0:0a:11:5d:86:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=0dcb3971-b724-4c68-9a7a-de26d4d85562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:78:c8:80:c5:eb:33:ee:19:5a:c1:40:02:8c:
55:d3:fe:51:fe:be:46:ce:b7:dc:de:f6:d8:c0:7b:
e1:d5:b0:95:e5:72:4c:f7:91:d6:59:aa:26:ff:02:
77:d0:bd:bc:f0:ce:cb:57:d6:e5:07:22:3a:a3:f4:
ba:95:d9:fa:c7:94:e3:d7:db:ae:c6:16:30:b3:2d:
1d:d4:76:06:93:95:dd:ce:c9:0b:ef:8f:0e:63:cf:
49:4b:fb:5a:c3:bb:fb:06:b5:d9:8f:52:bc:21:12:
26:e7:38:01:53:3a:45:78:64:5e:9e:ef:e9:d6:b0:
de:8b:7d:9b:8d:d8:cc:99:fd:80:26:9c:ac:6d:59:
8f:42:64:1d:6e:5c:5a:41:14:eb:46:42:c9:77:26:
ca:7b:f0:8b:b4:2b:e0:ce:56:57:1c:0e:5d:b0:bd:
9a:a0:6a:81:f1:ad:d1:b8:63:82:6a:dd:9f:1a:33:
6a:a0:ef:f6:55:a6:64:97:6f:53:c8:0d:8f:63:3f:
25:36:ec:27:47:ae:c3:b3:8d:02:98:6d:0c:31:c1:
4f:b7:b9:32:ba:32:e9:b3:29:96:55:ba:81:de:5f:
f7:ef:34:73:81:9a:0c:48:c2:9c:39:28:0f:b3:09:
0c:a9:95:64:13:48:ad:08:39:25:a6:e4:28:92:34:
21:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A2:25:F0:0B:52:15:15:74:03:9B:A1:E7:15:B0:12:3E:A1:7A:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a045930f-21e6-3fa5-88e5-68bbd0443e2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.52.91.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:20:9b:84:55:d6:ca:ce:43:48:66:60:dc:70:9a:ce:44:8e:
f4:16:cd:c3:ff:94:85:9d:80:5f:9d:aa:fe:15:99:2c:52:dd:
bc:74:df:10:07:1a:8a:21:4a:83:c0:29:33:eb:24:06:a1:32:
d7:f1:49:36:bd:9c:da:e7:31:ec:cb:a1:39:9d:fa:2b:8c:3d:
b3:68:93:d4:7b:1c:ed:54:86:0c:d4:d1:6e:1b:d7:9a:8f:25:
f5:29:9a:d5:fb:e5:c0:ca:6f:59:b3:af:76:46:5a:c0:ba:c8:
ae:b8:65:21:61:ef:b2:cc:75:3b:c0:11:bb:5c:3a:89:3e:45:
38:cb:cc:93:2f:7d:80:af:3d:cc:38:9f:eb:d4:2b:97:b4:c4:
68:57:cf:c2:0a:2d:9c:68:c0:8b:c6:25:31:4e:36:99:c1:86:
22:85:7d:d8:be:42:27:b5:ab:33:31:8b:36:9f:d9:7a:8c:a0:
36:ac:8c:d0:3f:62:e3:d6:42:eb:ea:ba:3b:94:c3:6a:03:e4:
73:a1:d7:06:fb:45:23:4b:03:ad:1f:fc:78:ec:43:47:6d:ed:
72:ce:08:5f:2c:e7:ea:6f:8e:d6:b0:bc:22:17:d5:e5:03:00:
91:b0:9e:1a:e6:5e:83:25:3f:7c:6e:d9:48:82:96:59:d9:e4:
e6:58:2c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:53:50 2025 by rpki-client