Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6d02f3f-2ff6-3975-ae84-6704c1a6406c.roa
File: d6d02f3f-2ff6-3975-ae84-6704c1a6406c.roa (raw, json)
Hash identifier: MKWwsgCohhADkcFHRUysbmeEBBsOuKAy5gflE3kxhH0=
Subject key identifier: 91:A2:0F:00:54:89:6D:89:DB:74:1F:43:7F:3C:DC:BE:1F:20:23:B4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAEFC201D8FA8AF54FBC1C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6d02f3f-2ff6-3975-ae84-6704c1a6406c.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33287
IP address blocks: 68.81.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:fc:20:1d:8f:a8:af:54:fb:c1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=0aea81f3-7ed8-4949-8337-03d4f99dd809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:dd:80:fa:f5:b6:a0:74:43:57:dd:a6:74:1e:
44:5e:17:6e:20:32:d1:2e:cb:9b:34:3d:37:e9:a2:
62:e6:1c:57:b4:14:4a:0e:c0:3c:ee:5c:7d:34:51:
dc:2d:c0:81:4d:0d:84:08:16:9a:41:80:dc:86:4d:
2a:1a:70:de:c3:f1:30:87:49:aa:5b:28:8d:55:3f:
7c:b4:b8:59:be:f6:52:90:6f:89:69:7a:67:e6:5c:
a5:55:b5:cb:d5:4c:3a:84:38:0d:91:d2:90:0b:1d:
c0:4e:08:de:50:33:d4:63:ea:4f:5b:c4:3b:42:44:
40:bf:56:51:9f:9b:d9:1e:87:85:22:24:a6:48:8c:
2e:d7:0f:99:e0:45:90:a1:51:63:56:f1:dd:c9:e3:
af:15:d1:ac:be:62:6f:eb:cf:6b:ca:37:83:84:20:
e1:84:9c:38:8f:76:9c:70:0a:91:1a:92:f3:db:e3:
15:8f:02:12:9f:66:62:f1:1a:89:d2:61:51:55:2c:
eb:75:1d:f7:88:1a:73:a2:82:2a:07:34:1f:01:ef:
60:47:7a:ed:84:88:a1:aa:7d:dc:d3:2f:f9:a3:32:
0d:ce:cf:34:bf:c1:97:16:b0:3d:7b:df:fb:06:52:
97:03:0b:9f:5c:b7:ad:df:03:a9:14:fd:f2:76:75:
0d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A2:0F:00:54:89:6D:89:DB:74:1F:43:7F:3C:DC:BE:1F:20:23:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6d02f3f-2ff6-3975-ae84-6704c1a6406c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.81.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:ea:4b:1c:64:04:4b:ca:31:3d:c3:d8:18:a9:51:f4:a6:54:
f5:05:23:4e:da:c5:ac:04:22:ab:81:5f:a5:3b:48:91:8f:09:
9e:1b:49:ec:bb:df:c6:49:5a:be:98:b7:aa:ff:23:54:52:da:
3d:cb:a1:d4:38:e2:f0:54:74:5e:d5:97:20:2e:b4:8c:b6:4e:
98:43:3e:05:9f:c9:d2:3d:12:3b:b6:39:19:46:c4:2a:47:47:
38:b5:48:37:db:06:8c:b2:4e:69:02:d5:c8:c6:4c:20:ff:98:
c5:cb:93:bf:7f:b4:bd:45:18:17:9a:4f:7e:5f:05:a8:d7:bc:
b7:44:54:35:87:74:b5:3b:d7:28:f8:6a:fa:e8:3e:eb:0b:06:
c6:c4:ec:9b:22:45:25:8d:52:eb:c0:78:f3:a4:09:30:c0:0e:
5d:19:8e:71:e2:f4:d5:dd:9d:8f:79:fd:76:98:24:6a:27:d5:
8a:37:db:4f:79:35:d2:59:72:0d:76:f7:4d:ab:57:a7:4e:9f:
2d:60:01:67:12:ea:d1:4f:f0:72:c9:95:ea:e1:fc:57:ba:e3:
5e:22:6b:33:a8:16:1b:3b:2d:e0:98:b1:8f:a1:a4:c2:89:87:
0a:05:af:e6:6b:2e:64:53:a1:46:71:4d:f0:09:89:a9:9c:c8:
dd:21:48:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:42:05 2025 by rpki-client