Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf59fc20-1b7e-3a39-81ce-84f0d01bfb22.roa
File: bf59fc20-1b7e-3a39-81ce-84f0d01bfb22.roa (raw, json)
Hash identifier: 6EkSd5nNF4fV3gQI9FbyOGnM1vNWa3wxI2DM4Mu1gT0=
Subject key identifier: 1D:9D:A8:16:66:F3:5F:FE:E9:F0:C4:BD:EF:97:B8:1C:BA:38:A7:B2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB085EFBBE4A38EC8BE8F20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf59fc20-1b7e-3a39-81ce-84f0d01bfb22.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 68.82.48.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b0:85:ef:bb:e4:a3:8e:c8:be:8f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=2daf4c22-ba6c-47de-a918-02f5551ac46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7b:d8:02:bd:c0:7f:52:c2:78:3f:32:ff:ce:
20:46:87:78:19:54:0c:e7:18:c3:5a:43:c8:21:93:
cc:69:e5:93:4d:0c:91:a7:cf:48:c3:ac:e8:52:d7:
dc:57:75:49:b5:0e:86:8b:e9:43:18:08:31:1a:92:
eb:9b:07:66:b1:c7:5c:72:91:9d:d5:c2:83:04:98:
c0:45:e6:05:70:a6:72:93:17:6b:46:2c:99:45:d7:
f3:11:c3:0f:8d:53:94:1b:91:e2:b9:52:2e:b0:f1:
a8:a0:39:79:92:a8:52:d8:40:bd:06:45:ad:6b:80:
be:da:01:57:58:5e:41:41:05:95:58:1a:b9:b0:e1:
8d:f6:36:9d:27:f7:01:0b:81:4d:ee:51:95:29:5f:
c5:91:64:0a:8d:bd:08:99:99:a9:c6:a6:46:07:a3:
68:ad:2b:4e:b4:f4:12:21:4d:35:47:44:8a:3f:41:
99:04:ae:62:80:8b:d9:e9:22:e7:81:53:61:c2:fa:
ef:34:8c:b1:eb:89:13:b4:bd:3b:98:d6:6b:99:8f:
78:a1:79:d9:f7:73:ac:2f:54:24:23:6a:01:67:69:
f4:c6:bc:de:a6:b1:38:ea:af:c1:c6:f5:0d:31:98:
97:b1:69:f5:e6:95:af:9a:3f:fe:d0:24:71:a7:5e:
f4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9D:A8:16:66:F3:5F:FE:E9:F0:C4:BD:EF:97:B8:1C:BA:38:A7:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf59fc20-1b7e-3a39-81ce-84f0d01bfb22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.82.48.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:79:86:ed:b4:72:a6:48:01:24:8d:69:b1:a7:69:ad:73:9f:
b2:1c:65:f6:b8:86:e4:6e:26:27:b8:dc:f4:cd:98:f2:71:d4:
cf:bf:ef:8c:6c:9b:5f:ec:ce:b0:7f:d6:22:31:13:61:fc:ab:
00:39:ab:42:a6:53:45:46:b6:b8:be:d9:a4:eb:b3:86:aa:8e:
1b:68:63:a4:52:b4:4f:a8:75:9c:2d:d1:cc:ac:15:ad:eb:61:
53:b2:29:47:d1:3d:a4:c2:73:15:90:77:27:0c:a9:53:82:56:
d3:ed:95:3e:93:de:13:d7:b3:94:a9:b4:3b:ed:74:66:ce:70:
bb:53:32:8f:ae:e3:af:33:11:ed:dd:e0:31:0d:6f:fb:aa:18:
ff:4a:31:78:b6:1f:3a:37:b1:59:57:6f:97:cd:b1:a3:50:f2:
17:a2:7c:43:19:c3:4e:db:d8:b4:71:a1:04:d2:36:44:a9:74:
ad:f8:6a:45:c5:d2:7c:2b:9a:e3:aa:6a:48:6d:88:9f:c0:90:
f2:29:6f:8b:bf:84:17:0f:d5:d0:40:5f:50:5d:b4:e8:c0:32:
25:52:09:0b:ea:ad:9c:44:2e:3b:c7:01:08:33:1e:61:43:a2:
69:c2:ac:11:53:1a:9c:fc:61:ca:71:41:84:b9:46:51:9c:34:
77:9b:9b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:34:23 2025 by rpki-client