Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fef12d39-75b1-3b4c-8ab4-7a01a19da43b.roa
File: fef12d39-75b1-3b4c-8ab4-7a01a19da43b.roa (raw, json)
Hash identifier: tAf3Bh5GinJ0BwAj3g5O/Am+/Vrt79lXeMjQmmKVDeo=
Subject key identifier: 73:06:5E:69:8F:00:8A:F3:91:A7:E9:24:77:35:91:33:E8:EB:68:B8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6B8129ACCFBB87E112E800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fef12d39-75b1-3b4c-8ab4-7a01a19da43b.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 68.54.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:81:29:ac:cf:bb:87:e1:12:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=52722d6d-e059-43d4-9166-289fdf9b8821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a3:e3:e2:c7:03:52:20:59:49:45:80:c9:03:
8b:02:a7:4c:b2:6a:3f:1a:4d:c1:0f:b4:60:7e:bc:
0b:6b:d0:b0:36:c7:d3:07:7c:2e:4a:70:c5:08:21:
54:3b:4b:99:9e:2b:31:a9:02:54:96:b9:42:fa:56:
93:da:f6:e9:d4:de:df:3d:2a:ab:0e:03:35:0f:c2:
01:9e:d3:bf:c6:b5:c8:ec:10:cb:a4:2e:4e:fb:8f:
a3:1b:14:28:22:e4:e4:d4:94:10:09:02:d4:3b:e4:
98:44:e8:9b:c4:07:84:77:a9:e6:7f:a3:85:2d:f1:
15:e4:c2:70:db:1f:4d:7a:1f:ad:fb:3d:90:72:4b:
55:a6:13:48:a0:93:f2:40:bb:ec:5e:dd:bd:d0:1e:
f9:22:23:d3:b2:a0:61:9f:10:ff:45:d7:cd:ef:f0:
e8:f7:e8:14:34:a2:ea:85:14:90:2e:36:49:fe:9f:
2f:fd:91:99:7d:ff:90:27:64:34:cb:e0:aa:26:94:
8c:c2:0e:99:4e:92:4e:66:04:5d:0a:3c:67:5f:46:
73:73:41:81:d2:fa:95:ba:57:75:f7:7b:48:48:d4:
be:fe:ab:b5:30:15:1d:60:f1:76:ef:7a:b4:42:13:
c0:00:20:eb:70:e7:ce:d0:5a:2f:e5:66:7f:62:16:
b4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:06:5E:69:8F:00:8A:F3:91:A7:E9:24:77:35:91:33:E8:EB:68:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fef12d39-75b1-3b4c-8ab4-7a01a19da43b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.54.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:13:11:36:29:b4:b0:24:b2:68:5c:4b:f5:33:4f:38:35:71:
78:e3:48:6d:f3:6c:79:77:18:21:7d:61:94:b5:a5:14:9a:03:
66:5a:17:0d:eb:df:3e:b4:7c:17:f3:ef:ad:91:e8:71:68:20:
c0:7b:55:c0:14:7a:38:c7:bb:e4:5d:9d:5a:8c:6b:ee:59:de:
5b:f0:65:21:43:a1:25:d6:f4:00:da:1c:64:3a:61:70:7f:54:
19:e3:01:ec:fb:a0:81:4d:67:5e:3f:6a:1c:9e:48:77:c0:d4:
64:a0:a2:37:4b:6a:d2:29:40:76:da:53:b3:d2:94:5d:73:aa:
f1:bf:5b:af:3d:b5:26:9e:6c:30:23:b5:fd:11:69:e5:96:4b:
ea:e0:00:ad:d8:41:dc:94:b1:60:84:be:97:cd:15:b9:16:06:
e8:79:a2:ca:f4:91:bf:31:f4:92:05:04:85:2f:e5:cb:22:87:
bd:7c:cf:e9:75:93:9c:68:04:10:ff:f1:2f:10:36:0f:48:18:
52:a2:e7:f2:3f:a1:4b:9e:d6:b2:6e:1a:d0:e2:d2:4a:8c:84:
95:f3:86:d5:bc:d3:02:9b:59:df:55:92:cc:a2:43:40:cf:0a:
7e:68:fa:b3:1b:ac:26:d3:3f:c3:fb:ad:62:a8:fe:0e:fb:57:
ee:f0:4a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:46:35 2025 by rpki-client