Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3fca446-8656-3ce3-beb3-a112e15d0c67.roa
File: f3fca446-8656-3ce3-beb3-a112e15d0c67.roa (raw, json)
Hash identifier: nk42gqGDMwfOwAOVHx06cAgLaQD4G5RQXtVZCnd2CKQ=
Subject key identifier: C7:86:28:77:01:1A:F7:28:DD:27:0B:07:D0:C3:5A:42:B4:9E:3C:4E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F8BA7F4C10B1A16AC72600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3fca446-8656-3ce3-beb3-a112e15d0c67.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 7015
IP address blocks: 75.68.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:ba:7f:4c:10:b1:a1:6a:c7:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=4935f91f-d058-4776-b596-0ed579c1d82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:df:1a:c8:f7:f5:86:11:8e:37:66:3b:fe:ff:
d3:cf:60:93:2c:02:96:60:71:15:24:16:f3:4d:bc:
88:bc:cc:ea:59:7b:7e:ac:40:21:8a:91:78:70:01:
30:28:9a:12:ed:1f:b0:b7:b9:31:c1:60:da:aa:1a:
4e:cd:13:06:2d:00:19:a7:06:24:b7:9f:e6:9b:d4:
68:45:24:1b:2a:ee:f4:40:78:0a:eb:30:a9:55:20:
0e:06:b3:f2:e8:27:f9:9e:52:42:61:f0:0a:2c:9d:
40:cf:9e:93:83:f7:ba:71:47:b7:f2:49:e8:98:38:
f1:f7:10:f6:b6:92:f5:5a:80:67:cb:bc:31:67:1e:
98:04:30:87:f5:1f:b6:54:3a:9e:84:49:98:cd:71:
b8:2f:39:2e:2a:cc:05:aa:4a:d7:04:9c:2b:f1:7d:
ae:7c:06:bf:51:73:0b:a0:87:1d:13:07:82:5e:16:
f0:af:d2:6c:25:76:62:af:74:23:a7:40:72:1f:b2:
24:fd:cf:7a:ec:b5:28:76:3a:25:c8:06:30:70:80:
a7:93:96:c5:ea:81:56:89:55:07:ce:a9:88:be:01:
aa:fa:68:da:6a:2a:76:e9:e5:df:ea:89:cb:e0:84:
b0:a2:e9:45:2c:87:73:5d:d5:5e:35:4b:88:6f:ef:
d3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:86:28:77:01:1A:F7:28:DD:27:0B:07:D0:C3:5A:42:B4:9E:3C:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3fca446-8656-3ce3-beb3-a112e15d0c67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
75.68.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ca:db:1d:77:1b:fd:b1:9a:6f:62:77:7e:60:61:66:5b:86:01:
eb:e4:50:13:7a:c3:d6:d3:75:59:a2:ad:e3:5d:a6:fd:57:bc:
a5:12:12:ae:ff:20:1f:d2:ac:d8:ea:c9:01:66:8d:15:2e:60:
b0:02:96:0f:e8:e1:21:cb:b1:91:cf:19:c4:45:20:ea:2e:47:
3c:b5:74:71:7d:c0:08:b3:df:88:e5:7a:d7:0b:79:d2:8c:c9:
b0:c2:17:48:3d:10:20:a0:aa:08:db:5c:29:28:72:cb:68:61:
58:66:0b:26:bd:15:fd:60:c0:6b:c9:ce:5c:c6:e7:4b:ff:9a:
90:dc:e9:63:a2:29:7c:ff:8e:92:4d:3f:38:10:07:aa:c7:58:
c2:ff:51:84:a8:4b:78:5e:c3:32:14:c5:77:2d:8b:5a:93:f2:
2c:a8:c2:07:32:27:90:1d:72:24:8e:fa:42:71:88:fd:97:4f:
b7:ce:98:98:ea:b3:e8:f3:c8:74:be:f2:16:ed:a5:ec:14:ed:
d5:b0:0b:5d:bb:b9:18:5b:a2:62:46:21:c4:7b:4b:03:f8:9f:
cd:c1:b2:6b:c4:b9:e3:8a:8f:62:00:88:97:97:82:3c:f1:0c:
cc:a1:03:ef:e8:e5:bd:8d:70:d5:36:75:a7:87:41:c8:36:f8:
44:ca:b0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:29 2025 by rpki-client