Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efe4f9b6-9bff-398b-8782-4e4924a99851.roa
File: efe4f9b6-9bff-398b-8782-4e4924a99851.roa (raw, json)
Hash identifier: Z/FWUA3+E92ryMNqXRTK6ZshpCYCC1ZOQVl2aNcRaEQ=
Subject key identifier: A8:3B:23:5A:64:25:B1:83:2D:BF:6F:84:CA:50:3C:06:E3:B6:7D:6C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6CDEB75625703A37640060
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efe4f9b6-9bff-398b-8782-4e4924a99851.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 68.52.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:de:b7:56:25:70:3a:37:64:00:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=bdb7280e-9a1f-4b75-bc15-151bc439aa0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:63:33:a8:db:63:2d:76:76:54:65:43:30:e7:
f9:3e:10:d4:70:02:6a:a7:69:8c:8f:2a:d8:21:3b:
42:be:af:30:86:21:64:07:e4:f8:33:53:4d:0b:bf:
d2:8a:ce:99:22:0e:0a:27:fa:50:3e:22:00:73:91:
9f:3e:13:4f:2d:2c:aa:f5:13:a5:69:a7:ea:92:d2:
5d:ce:e2:ee:52:1e:ac:a2:a4:a5:8c:de:60:2b:c3:
2f:3c:de:7d:cc:5a:ed:cf:a2:8f:f6:89:8e:40:5b:
9a:53:a8:c7:61:49:ce:d8:22:ec:dc:42:48:63:79:
d1:96:bf:34:ab:13:b0:fc:f8:63:30:a8:82:14:3a:
8d:bd:57:2e:0f:6e:d5:d4:78:73:58:e5:12:70:03:
c3:1c:6f:0c:29:d1:9e:27:c8:76:7c:e9:01:d6:b9:
fb:d5:e9:93:e6:68:08:8b:7a:f4:03:ab:5c:86:56:
32:fa:d3:1a:78:50:33:b2:43:47:5c:93:0e:2a:76:
ac:9d:55:84:92:fb:3e:d7:65:37:ac:0d:5e:e9:10:
ff:48:db:90:c7:96:71:da:64:3a:d0:a3:00:d8:1d:
a2:9e:40:a6:f1:a7:42:27:59:76:31:59:1b:fd:cb:
45:60:99:86:38:08:00:f4:26:d2:2e:a7:b1:a3:88:
f3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3B:23:5A:64:25:B1:83:2D:BF:6F:84:CA:50:3C:06:E3:B6:7D:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efe4f9b6-9bff-398b-8782-4e4924a99851.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.52.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:c0:9e:6d:bd:94:37:dc:18:c3:88:86:c8:7c:b4:f2:ac:e0:
9a:06:ff:40:9b:60:b5:db:0b:3d:13:e8:bb:ae:5a:a4:25:c7:
4e:0c:db:52:38:3b:d2:60:85:2c:2d:7f:cc:61:cc:21:8b:eb:
de:b7:05:ef:c8:41:b2:93:74:ba:a9:1f:10:18:1f:20:d3:b2:
09:d9:dc:19:5b:9c:07:63:e6:f5:34:16:89:48:c9:9c:ce:25:
b1:4d:d2:18:26:60:f8:42:1c:d9:a6:53:32:2f:da:43:3d:95:
64:fc:b6:f7:b4:19:a0:f8:0d:b1:67:d4:29:44:d2:63:e5:31:
98:3b:7d:9d:de:35:59:fc:b1:ac:7a:15:88:43:9e:a4:0d:5b:
80:e0:c0:db:dc:b1:70:d4:18:30:50:41:4d:d6:89:0a:8f:9b:
5e:38:2d:62:86:b2:98:a9:9b:f1:aa:f4:f7:c4:37:ff:9f:5f:
b7:59:20:f3:e7:2a:db:5e:88:71:99:9b:73:ef:df:05:ab:7a:
97:3c:8e:d3:92:e1:07:58:be:4b:53:58:9a:4d:2e:7a:9a:cb:
5c:19:48:38:31:fd:15:c9:22:cb:2a:1f:98:31:ce:8d:6f:2c:
a1:1f:f6:ea:23:f1:94:9b:66:0f:59:91:7a:0e:e7:27:bf:13:
99:10:7d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:21:02 2025 by rpki-client