Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d27de10b-5d9d-3c27-927e-dd0123fb66e6.roa
File: d27de10b-5d9d-3c27-927e-dd0123fb66e6.roa (raw, json)
Hash identifier: 4GRkv7H+M/ZOa6NUjVeaTpXdzr7RqhGDDRbOjp8SaHE=
Subject key identifier: B8:36:3E:B0:0F:61:67:5D:FB:23:9E:67:12:65:37:77:35:D8:0C:DC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F8EA932BBB8BD1E4766C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d27de10b-5d9d-3c27-927e-dd0123fb66e6.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 68.49.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:ea:93:2b:bb:8b:d1:e4:76:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=697b06b3-cd76-409f-b52a-bdf42aeb4ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3c:03:76:3c:b1:da:54:24:41:b6:68:03:8b:
9b:5e:7d:e5:68:5c:30:15:88:67:5b:61:a0:70:16:
1a:0e:85:ab:e9:2e:3a:36:84:c5:07:f2:c4:8e:be:
ea:f4:5a:42:05:3f:4b:2b:bb:27:7f:d7:3e:8e:2f:
bd:60:0d:3b:87:fe:30:5c:13:f7:c3:2f:55:af:a0:
d0:4d:5f:ac:0d:d0:e7:e2:45:9e:e6:a8:89:09:9a:
a9:e4:39:3c:ce:c8:aa:2f:30:c3:b4:1b:91:00:c7:
3a:37:3d:da:b6:ba:f9:fa:b3:e6:d9:62:52:98:69:
dd:19:a1:a2:dc:88:37:e3:27:09:dc:1a:09:9c:db:
76:22:84:9a:b9:67:b4:12:53:4d:fe:63:f9:bb:56:
2d:7c:28:f4:2c:fe:23:1b:2f:79:b9:cd:54:88:91:
90:45:6f:c4:da:52:f2:7c:a7:e4:e8:d1:93:28:90:
40:ec:2c:c3:de:73:66:b8:df:1d:03:c8:a8:d2:43:
9c:bd:e7:0e:b2:c7:80:60:eb:b2:d5:82:93:c6:0e:
9d:5b:64:f7:bb:b8:82:9d:05:0b:c9:f2:89:d9:d8:
14:d0:6f:b2:df:71:ce:9c:16:0d:7e:58:f1:40:00:
e1:c2:f9:37:4e:a6:84:61:6b:69:ec:b9:ab:4b:76:
b1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:36:3E:B0:0F:61:67:5D:FB:23:9E:67:12:65:37:77:35:D8:0C:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d27de10b-5d9d-3c27-927e-dd0123fb66e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.49.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:5c:87:c6:f2:cb:ab:de:c8:3b:5d:35:e7:a2:92:66:5d:60:
44:43:62:6b:3a:f9:d4:df:cf:38:6a:d1:1e:d3:0f:2a:4a:e7:
c9:d7:93:4e:af:96:e0:6f:68:93:17:b7:93:d6:9b:1b:87:ae:
70:bb:a0:d2:41:d1:20:54:de:24:70:45:34:2e:40:55:e4:aa:
c1:b7:c1:d3:98:e0:30:5e:61:81:c0:73:cd:94:f4:93:52:94:
53:26:22:9e:fe:ea:2b:b3:89:33:b8:d6:0a:3a:6f:54:27:9d:
3b:44:62:4f:23:2e:a1:7c:7c:cb:8a:02:8b:1a:47:b6:cc:87:
66:a6:95:ac:f0:25:57:62:a2:1b:bc:2a:96:69:b4:68:eb:de:
73:9f:b2:70:44:fe:9e:90:59:55:ff:a4:b6:77:97:6b:0a:eb:
b1:ba:19:05:41:a8:45:da:d5:39:5c:9d:e4:cf:c4:ff:ee:3d:
e6:f4:52:65:0d:ca:57:93:0d:8b:22:30:62:d9:a9:62:d1:12:
2f:e3:ba:fb:fc:ea:db:10:e0:6e:ce:f1:7d:a4:12:d7:4d:5c:
81:7e:ab:fd:3e:1f:e9:73:37:fd:57:3f:6c:c0:ad:64:e8:fb:
c3:e2:e8:c6:43:21:4d:97:ec:d3:fb:06:01:6f:c0:c1:f3:24:
cd:75:c0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:58:19 2025 by rpki-client