Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa032c41-c042-344a-bf4c-f066f712c1e3.roa
File: aa032c41-c042-344a-bf4c-f066f712c1e3.roa (raw, json)
Hash identifier: ytZG/HsPEOsa9dOK2+7xzfAR57MTCO8HNMvUa2VSBZ8=
Subject key identifier: 97:2C:83:5C:9F:78:92:97:9A:99:C3:5C:06:94:24:0E:F1:A2:AC:09
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F79325BF0143781DF4B500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa032c41-c042-344a-bf4c-f066f712c1e3.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 68.49.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:93:25:bf:01:43:78:1d:f4:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=510455b7-e3e6-40c1-b6d4-0370a95e0a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:54:df:8e:3d:42:3c:7f:bc:a9:55:74:94:79:
c9:8b:93:a9:18:c4:f1:5e:48:4b:3e:cd:b9:bf:22:
cd:af:53:92:86:e9:a3:95:d0:13:08:9d:3a:1f:03:
ad:3e:f7:ad:01:dc:c0:5a:21:7e:da:c2:c3:b9:00:
c3:33:82:d2:56:5c:f9:12:8b:32:62:1e:95:3c:00:
dc:3f:d7:32:90:fe:a8:08:53:c9:60:aa:b6:18:54:
9c:21:b8:ad:b0:0b:4b:8f:b2:23:06:51:52:2b:46:
af:b1:ef:49:e8:9d:65:6b:72:39:60:ca:55:c5:76:
c9:e3:4b:78:e2:ea:d0:b3:2d:44:8f:f2:e1:e8:c9:
88:c6:97:c2:be:2a:05:0a:0e:39:8b:9a:4e:90:90:
e5:d7:ff:2a:5d:2b:32:e1:dd:0f:9b:55:d4:8c:6e:
7c:42:12:7a:4a:3c:49:d2:8f:d4:1b:aa:44:90:ba:
9c:0b:ad:96:1c:c0:65:29:b5:6d:91:95:1d:8e:57:
78:3e:3b:93:05:60:11:90:b7:9a:03:21:34:10:d0:
b4:b2:53:cc:42:61:cc:09:44:08:82:3d:2f:a7:85:
42:dc:15:c7:c4:7e:a4:ab:ae:5a:52:fe:b9:1e:af:
df:86:94:25:54:45:ea:b6:88:be:bd:d5:6b:f8:06:
f9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2C:83:5C:9F:78:92:97:9A:99:C3:5C:06:94:24:0E:F1:A2:AC:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa032c41-c042-344a-bf4c-f066f712c1e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.49.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:88:a2:b4:e8:af:75:a5:ef:7f:da:d4:a6:31:ef:de:8c:79:
bc:0c:7a:50:82:fc:d0:79:36:e3:d6:3d:2d:5e:be:60:81:6e:
8c:b3:b8:37:e9:f3:b5:6c:f9:ee:0b:85:3d:b3:f0:fb:3d:12:
aa:12:26:84:f1:6c:e9:cc:56:fa:86:ec:88:c7:c6:84:46:e6:
03:cb:44:b1:d4:c5:49:ae:2c:6e:c3:05:c6:58:ac:30:e7:5e:
9b:2e:ed:6d:88:67:9c:ad:71:15:90:4f:52:36:1c:19:fe:da:
01:77:b9:fe:4e:ef:ce:54:10:9a:02:5d:4d:d2:9d:25:bf:88:
6f:0b:3d:79:ab:50:a1:97:7e:ff:b5:37:c3:61:77:6d:6b:3b:
db:2f:91:a4:a6:b6:71:bf:35:b4:89:b6:80:d9:73:2a:93:82:
c7:39:ae:bf:52:9c:93:f2:fd:02:f7:4b:bf:a3:15:28:20:69:
6c:55:9d:00:17:d3:3c:e7:20:b6:b6:b7:5b:5a:37:78:84:3b:
2f:dc:74:bb:19:f9:e2:22:1e:12:f4:2d:9f:da:1c:87:7b:37:
3c:bc:09:e8:2e:f3:35:3e:4e:61:de:bf:c7:9a:01:24:df:36:
8f:57:05:d1:b2:98:6c:9d:71:f6:fa:a8:07:0a:08:3a:4c:84:
b7:ab:6b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:49:37 2025 by rpki-client