Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2d849a8-a6e7-3788-8611-db0cd4a0ad08.roa
File: b2d849a8-a6e7-3788-8611-db0cd4a0ad08.roa (raw, json)
Hash identifier: jiFUCbRC+GjGJqcuPQVcAVCVBTRFJWBYmzAMKxTDUmY=
Subject key identifier: 48:B8:CB:20:94:39:ED:C0:DB:F9:4D:AC:CD:F9:2C:6D:39:B1:50:DD
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAF45EA330087A50579C800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2d849a8-a6e7-3788-8611-db0cd4a0ad08.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 68.44.104.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:45:ea:33:00:87:a5:05:79:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=96bc4f01-cb8b-478d-b995-e389ec5f6a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a2:d9:98:b6:4a:9c:47:dd:68:28:2f:23:02:
d0:89:d5:58:71:bc:66:39:97:38:4d:b7:b8:d3:d6:
18:2d:86:3f:be:dd:38:d3:4c:4b:84:fe:37:34:a6:
bb:f7:ac:6a:e9:e1:9e:e9:ad:40:46:de:d2:ed:d4:
6b:88:64:2f:a5:ee:ca:14:a2:96:d7:d6:25:0c:78:
2b:2c:38:62:8e:6b:41:b1:42:8c:1d:97:e1:83:b2:
38:48:b7:06:e4:08:75:b5:30:a0:90:06:e8:ed:0d:
e2:43:3f:94:16:80:2c:6e:e7:6a:46:51:e3:60:84:
3a:56:f2:25:81:74:2e:17:0e:2f:71:9e:73:e3:16:
a7:fc:18:70:c3:c1:17:84:fd:85:9a:a0:bc:63:74:
46:db:6a:b2:ff:69:af:36:e8:bc:03:0e:d7:71:6e:
d0:a4:a5:2a:d5:50:6f:d9:39:d4:04:35:35:e9:d6:
41:6d:6b:1c:b1:fc:66:ed:19:81:e0:bb:0a:14:22:
ca:07:c7:a2:d2:24:a1:a9:e7:0e:10:c1:15:b8:69:
92:d6:fb:e0:d7:dd:ef:e9:13:d2:f9:fa:c8:a8:6e:
36:37:c1:e8:d9:ef:31:67:c1:8b:1d:76:87:c1:72:
f1:9d:4f:38:df:80:8c:34:44:83:66:a1:20:42:17:
d9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B8:CB:20:94:39:ED:C0:DB:F9:4D:AC:CD:F9:2C:6D:39:B1:50:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2d849a8-a6e7-3788-8611-db0cd4a0ad08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.44.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:be:91:bc:60:85:f2:bc:0c:b6:cc:0f:5e:71:86:6f:be:0b:
1c:4c:1a:8e:43:43:ac:27:73:12:85:61:92:28:66:29:fc:54:
f3:5e:ca:fc:25:7b:48:b9:44:e4:89:0c:ce:5f:1c:fe:25:1e:
8b:73:c4:c7:e0:9a:f4:40:93:29:3c:61:83:05:08:fd:c6:21:
ac:ee:5f:b1:a0:60:2b:d0:bf:b7:78:b5:4f:dd:c9:68:13:92:
24:c4:f5:76:a3:d5:0f:f6:e5:57:84:f0:1b:bc:94:02:8a:ca:
01:91:d4:ea:ef:d0:c5:fb:69:89:d8:96:6f:3c:ab:f2:0c:e2:
60:f5:ac:86:02:28:a7:d8:84:90:72:f5:40:8a:44:55:16:f6:
e7:1c:a4:d2:e2:de:10:b9:df:31:fa:2f:b4:bc:f5:0a:26:4c:
9e:40:5b:56:31:00:3d:e8:c6:47:9c:1f:e9:a9:e7:7f:cc:5d:
cc:e0:ab:68:e3:0a:d6:25:11:6f:46:c0:6a:9b:a5:ca:2d:f4:
c7:1b:8d:64:1e:d0:3b:37:84:56:f2:26:c8:26:3a:9f:49:e9:
43:34:2f:a2:a9:c6:81:f9:02:70:df:07:91:4e:b8:7d:c7:a2:
74:ce:b3:36:40:2a:4c:1e:d3:86:10:e5:4d:8e:51:64:64:1f:
9e:58:59:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:07:32 2025 by rpki-client