Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7d98977-adc0-3514-9a5e-5da6de6e3aa3.roa
File: b7d98977-adc0-3514-9a5e-5da6de6e3aa3.roa (raw, json)
Hash identifier: EmC+hrSaFI7UsZ1HHo2RR11O2UcSe7DOdOZdq/2/p1I=
Subject key identifier: 17:DF:08:B1:38:AA:11:4D:70:A2:C7:B4:35:6B:8F:29:D6:79:C5:1A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6BC43B99554E30842FC470
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7d98977-adc0-3514-9a5e-5da6de6e3aa3.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 7725
IP address blocks: 68.85.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:c4:3b:99:55:4e:30:84:2f:c4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=b69d8aa6-69cc-41f1-8594-ee3d48800d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:65:6f:25:78:24:6f:ba:39:d3:84:bc:89:c0:
ad:7c:8d:48:65:75:47:dc:e1:b1:85:b8:43:6f:ce:
00:e0:06:c9:e2:1c:1a:fa:4b:f8:bd:58:21:c1:60:
38:95:03:5c:c5:3c:2e:30:87:fe:39:c5:6b:5c:4e:
7d:47:7f:53:cb:c4:de:52:b3:ee:d4:f0:eb:b9:a7:
fa:b6:05:1f:f7:66:ca:e9:ef:ea:1d:f8:d8:88:4d:
37:db:7c:de:54:70:cc:e9:17:70:ad:08:31:bb:3f:
96:67:fb:ea:17:00:1f:c2:4d:7d:f3:27:af:ec:12:
2d:4c:e6:ff:d8:53:ce:47:6e:23:e6:f6:62:6c:4c:
55:2d:23:e5:3f:d3:63:37:70:02:4e:b7:d5:93:94:
48:87:98:ca:ca:a0:4c:5a:ac:ec:16:c0:94:ea:16:
19:59:fe:81:13:c9:b0:f0:31:cd:51:40:3d:84:b0:
c7:04:cb:25:8c:53:f6:6a:20:c0:2a:ff:24:05:90:
68:4c:4c:7f:d0:10:8c:bd:81:94:5d:90:0d:5f:42:
d7:2e:46:9c:2b:38:14:91:e5:a3:90:89:47:c3:6e:
a6:77:8a:14:65:b9:38:23:8b:4a:a7:7b:ed:1b:d1:
8b:c1:c5:ae:42:94:af:9b:a7:d8:2c:c3:71:a2:0e:
da:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DF:08:B1:38:AA:11:4D:70:A2:C7:B4:35:6B:8F:29:D6:79:C5:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7d98977-adc0-3514-9a5e-5da6de6e3aa3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.85.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:31:50:4b:ef:b0:9c:f6:96:e1:9a:ae:b4:ca:e1:00:39:49:
91:d5:78:97:ad:f1:0b:27:bb:64:29:8e:14:c1:b2:5f:3d:80:
f2:61:b8:7d:77:57:09:7f:c9:d4:cc:36:65:57:ca:ee:00:5a:
90:9f:83:b0:c5:c1:b9:1a:78:11:ad:df:d8:5a:f2:3c:d3:7c:
ef:e4:cf:8e:73:11:29:ef:48:7b:ce:24:4e:e5:77:62:0a:7e:
1f:14:6d:a0:65:5a:02:ac:81:bf:d2:5e:1b:9e:c2:53:f2:91:
17:13:45:8a:0e:0a:75:f5:33:9a:e4:16:d4:00:5c:48:e7:44:
15:09:a9:a1:c4:8b:e3:e1:81:0a:fd:74:e3:ab:ef:b3:fc:44:
a5:d2:10:3d:0f:f6:b1:5c:12:f5:2d:8a:47:52:ec:f5:fc:c6:
4e:1e:4a:c4:d9:f9:ed:61:57:bb:07:d4:4d:fc:b6:bf:74:b4:
46:4f:26:8a:2b:3a:71:88:93:d5:44:74:36:25:17:23:dc:75:
61:1a:72:ee:e1:60:d3:41:80:6e:11:c5:a2:f0:0a:08:68:24:
ff:e4:80:e3:3f:7c:ea:94:61:19:80:d2:12:cd:18:b4:d6:17:
13:77:f2:f8:7a:21:32:63:7b:29:c8:7d:b2:10:16:16:9e:a3:
69:34:40:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:18:03 2025 by rpki-client