Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd014180-a8c8-3a16-a1b3-72fbe5df7860.roa
File: fd014180-a8c8-3a16-a1b3-72fbe5df7860.roa (raw, json)
Hash identifier: zJ9E1Xv92+eMF5YLhSe8sMV8C7Hqz4WiBk7dATUMmRM=
Subject key identifier: C9:F8:0F:31:A2:B7:FF:1B:1C:41:1F:95:8D:5A:39:A0:E5:89:E4:63
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F7A78ABA91F7C8EBDB4200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd014180-a8c8-3a16-a1b3-72fbe5df7860.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33668
IP address blocks: 68.61.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f7:a7:8a:ba:91:f7:c8:eb:db:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=b2e25c1b-151d-42d7-bad1-8319a898b852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:af:12:bb:2a:ab:91:3c:47:56:67:60:55:84:
5e:45:7c:ff:c6:f6:06:df:04:2e:60:ce:d0:da:7c:
15:25:ad:6d:d6:5b:dc:f7:ef:c7:b3:a8:35:6d:d5:
0b:b0:12:4c:ab:5f:e4:59:bb:be:5e:95:22:4f:65:
95:a1:68:43:18:21:ae:18:d5:58:3e:9d:08:ca:9c:
bd:55:7c:09:29:c7:14:26:ba:28:70:a5:c8:e1:6a:
86:20:33:d1:53:9e:d0:cb:32:56:6d:04:56:ac:ea:
df:83:d5:4f:12:6c:12:bf:63:59:ad:bf:d7:eb:d4:
92:8d:87:ad:6d:af:31:ca:db:cd:fc:7f:28:55:0a:
a8:03:76:4e:12:10:67:59:c9:f7:a0:72:89:bb:f7:
75:ba:ab:64:55:9d:d6:a7:c5:31:1f:f1:87:fe:ff:
09:85:00:81:94:26:a0:42:26:9d:c0:2d:9b:cc:54:
70:99:66:0a:88:32:fd:85:f3:3a:1d:2c:df:e7:41:
98:50:6f:4f:d3:15:d8:b9:8b:b2:af:90:a6:3d:32:
82:d4:53:ae:0a:fa:72:cf:60:a2:58:66:53:ac:57:
00:20:50:d1:87:01:06:6b:1d:17:6a:6b:ab:c3:65:
85:80:da:4c:57:a4:c4:fc:55:80:47:56:ff:c6:04:
77:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F8:0F:31:A2:B7:FF:1B:1C:41:1F:95:8D:5A:39:A0:E5:89:E4:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd014180-a8c8-3a16-a1b3-72fbe5df7860.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.61.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:c2:6e:37:8a:99:2d:da:ff:e2:70:f1:06:44:9f:fd:b1:4d:
98:20:ba:6f:a3:68:26:9e:86:6c:04:af:d1:91:57:55:7a:e2:
7b:22:0a:f6:e0:be:64:33:fe:ab:f5:d0:90:f3:12:57:fe:cb:
fd:b6:ea:f0:af:12:a7:92:4a:0c:06:93:aa:28:d7:8a:4e:64:
98:d2:95:b4:2e:83:0d:7e:6c:00:85:38:7b:b5:20:e7:cc:06:
72:5c:31:c3:a6:96:46:ac:e0:5f:25:1c:db:54:8a:a4:f7:5f:
27:01:c0:41:81:4f:d4:60:4c:4e:df:98:55:4b:91:df:7c:ca:
f8:71:eb:b5:2f:25:9c:f0:81:5a:a0:82:a2:d5:81:7b:72:7b:
67:d2:d9:b0:82:10:61:0a:27:74:e8:d1:f0:b5:cb:f8:b1:e3:
99:7f:38:8b:9d:66:fb:b5:99:da:be:6d:97:6c:9a:8a:8d:72:
cb:7a:db:aa:5a:d8:1f:6c:71:68:cc:f3:c8:0e:40:62:04:63:
98:e1:10:b4:de:b2:64:31:b6:b7:91:50:89:3b:08:45:a0:ea:
5d:a0:c4:8b:e5:09:8e:cb:9d:bf:ca:85:57:1f:0f:d1:a4:a5:
bb:fb:f8:ee:57:50:7a:ba:f1:5c:7b:c3:6b:76:4b:54:51:74:
ee:e5:7c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:53:20 2025 by rpki-client