Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff6d9a97-a89a-3816-bda6-f1bcc9bb3a7d.roa
File: ff6d9a97-a89a-3816-bda6-f1bcc9bb3a7d.roa (raw, json)
Hash identifier: 1WnElC7akfJryZTgheHoCAlGmNK+fg7w5BMygD7aSCA=
Subject key identifier: AA:9C:58:19:34:76:E9:9E:1D:12:3E:0D:8A:77:72:62:B5:37:C8:EB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAF4B7FB429C2B6BEAD8B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff6d9a97-a89a-3816-bda6-f1bcc9bb3a7d.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 68.45.86.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:4b:7f:b4:29:c2:b6:be:ad:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=024f1dcc-9fa0-4b2c-ab32-dd58a9ae379c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0c:90:bf:59:ed:87:5f:1d:5e:5f:c9:04:0f:
f0:a8:3f:d3:8b:66:5a:60:23:20:53:22:41:ab:63:
92:80:46:a0:48:58:06:1d:a7:07:76:41:f8:63:97:
a0:3e:fe:c8:63:96:30:95:ea:26:d9:94:63:21:69:
ca:46:bb:23:eb:94:be:1a:59:8e:6a:7f:62:90:f0:
8b:e1:7b:9e:1c:02:87:7f:fe:34:16:b7:a4:65:23:
f8:38:12:48:0a:dc:68:61:0c:fd:fb:10:6b:37:55:
89:3a:6f:79:5a:3e:07:3d:bf:fa:45:da:6e:8e:1c:
28:07:be:fb:5a:a3:a1:4a:90:53:0c:17:99:c4:8a:
f4:f7:c7:d4:64:4e:b3:3d:75:c1:9b:f7:34:9c:6e:
57:64:69:84:ba:f1:2c:b0:36:b7:75:9c:16:7a:75:
f0:33:bd:74:76:9e:63:c3:7a:e4:62:c3:6d:4f:9e:
65:02:de:6c:47:40:24:f2:b5:66:21:6f:2f:14:db:
58:f7:3a:83:55:16:b0:ca:25:18:c2:d1:61:7d:1f:
6b:2f:e3:28:93:d9:6d:66:49:5e:f7:a0:a3:da:13:
19:f2:14:42:d2:60:ba:8f:78:c6:d2:34:bb:ad:b2:
fe:5a:0a:10:14:71:01:5a:ce:e7:6d:bc:9f:14:ca:
d4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9C:58:19:34:76:E9:9E:1D:12:3E:0D:8A:77:72:62:B5:37:C8:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff6d9a97-a89a-3816-bda6-f1bcc9bb3a7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.45.86.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:21:65:ef:15:71:9d:91:cf:93:f6:67:fc:d7:6c:33:d4:a0:
cc:f6:6a:6c:e2:ca:72:41:0c:9d:e6:c0:17:2b:64:dd:24:bd:
d1:28:29:1f:c9:f1:83:85:36:92:20:32:e9:2d:66:d2:3c:e6:
16:c1:97:79:9b:04:14:24:64:5a:8c:61:28:f3:dc:bb:82:ac:
32:83:e9:b1:17:46:e7:fe:68:79:97:ce:09:4a:d8:b0:8f:49:
9a:7e:be:49:2f:fc:28:a3:63:41:6a:71:ca:4d:59:7d:98:c9:
92:17:9a:53:f5:ae:b7:f3:4a:20:cc:1d:c5:62:06:58:19:90:
58:55:e9:74:b6:c7:0e:ee:96:a6:73:5f:ae:6f:b1:09:ab:93:
50:77:5f:07:b1:0d:cd:1f:7e:4b:d5:9b:58:c7:46:0e:7f:40:
d6:4b:cd:19:39:26:4a:51:10:ab:4d:f4:e1:e6:df:38:9d:6c:
60:77:72:22:64:1d:f5:38:7f:a9:f6:99:a4:06:86:b6:f8:45:
37:51:e8:11:b1:78:1b:0c:75:09:32:ea:28:a7:46:fb:a2:b1:
73:86:01:6e:4c:19:9f:e6:4f:9f:2a:68:7d:fa:f3:05:d0:6f:
f8:14:1c:10:4d:d1:20:44:b9:a2:04:7b:8e:df:3c:22:d1:19:
cb:85:04:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:11:25 2025 by rpki-client