Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff1f78e2-f7f8-3723-ac82-183d9d84a9d4.roa
File: ff1f78e2-f7f8-3723-ac82-183d9d84a9d4.roa (raw, json)
Hash identifier: SwTdRx5k3XwdVj2FWCmzJS498kzyTbeGaZFqXOtP6Ow=
Subject key identifier: 56:D3:48:9D:13:81:D2:95:BB:C1:F0:68:44:50:9A:94:84:4D:A5:A0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6B80C445FA4DF2E6702640
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff1f78e2-f7f8-3723-ac82-183d9d84a9d4.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 22909
IP address blocks: 68.53.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:80:c4:45:fa:4d:f2:e6:70:26:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=9326d199-b4f3-4a71-b9ea-982788742179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b7:19:6f:61:57:e0:ea:13:79:16:58:64:a1:
ab:d3:b4:9f:28:83:eb:b8:0a:10:68:41:95:6c:06:
c8:a1:82:2e:68:02:a5:d1:63:8d:5b:dd:14:ca:b1:
c5:99:d8:a8:72:fb:bc:6d:73:a1:a8:ce:e3:00:1b:
77:3a:a7:78:43:ce:24:ce:c7:9c:fc:78:e8:15:86:
03:bf:1e:ca:6b:83:e0:50:20:93:f7:99:db:e9:19:
e8:19:71:a7:7a:ef:ca:74:84:42:7d:ff:42:fe:22:
40:1e:ce:1d:52:14:b7:60:e7:5b:18:77:94:c7:92:
ad:65:f7:3d:13:de:4b:06:a0:6c:96:e7:7e:fc:81:
f9:05:89:26:0b:62:ff:fa:3b:0e:6e:ed:52:94:39:
e3:16:5b:4c:34:6e:d5:99:a4:17:19:6a:cc:b4:60:
25:aa:2f:6a:2f:3e:7e:04:5c:ed:3c:34:39:23:22:
21:c5:ab:c6:a6:cb:c0:63:e1:b2:df:3c:15:8d:4e:
ed:6a:9b:88:5b:a7:b7:a8:78:08:b6:d8:f7:96:63:
57:29:67:47:ce:08:c1:9e:70:aa:59:02:f2:9b:1a:
a0:93:21:53:c4:be:32:41:32:82:66:5a:3e:6d:2f:
6a:94:5e:3d:19:97:00:50:85:64:5e:31:dc:22:11:
f5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D3:48:9D:13:81:D2:95:BB:C1:F0:68:44:50:9A:94:84:4D:A5:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff1f78e2-f7f8-3723-ac82-183d9d84a9d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.53.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d2:88:f1:27:6c:71:d8:43:0a:82:f8:cf:68:3c:af:17:3b:62:
54:8f:6b:30:6a:fc:9f:29:55:19:e3:17:6c:af:a0:80:67:72:
2f:f7:d9:50:96:ac:b6:2f:d2:9b:25:c1:ca:a0:76:c7:77:2b:
e6:87:b5:3b:65:b5:f8:60:48:75:6e:08:27:f1:b4:46:f9:b8:
ef:6e:be:eb:ea:b2:29:b5:c7:32:40:19:f3:90:c3:91:09:9f:
39:ed:6c:0a:f9:fc:ef:db:52:59:45:94:66:da:63:69:41:7c:
49:2a:67:ad:d7:a1:db:34:75:5d:e7:b2:8f:b5:76:db:56:70:
ee:bd:f0:00:65:4f:12:c9:0c:b4:71:c5:18:5a:6e:8f:50:6c:
be:ba:d5:e0:e3:63:22:95:d8:69:be:3f:55:32:ab:d2:bd:40:
96:f2:d2:e1:cf:09:5e:69:b6:83:c3:65:bc:38:bd:63:94:39:
e1:43:e3:b4:e5:3d:88:45:9d:7b:2e:b3:5e:f8:19:8a:8f:ea:
61:74:d4:4c:38:f8:1c:49:61:03:8d:22:19:6a:58:54:ce:6a:
8d:be:9d:dc:5e:f6:a7:9c:12:30:8d:db:0c:80:fa:63:25:c1:
f3:8e:4a:6b:bf:c0:a0:b8:81:06:11:58:cb:dd:2a:7d:7d:56:
78:fe:02:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:08:45 2025 by rpki-client