Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e39a210-5acc-3748-95db-29bf2d518642.roa
File: 5e39a210-5acc-3748-95db-29bf2d518642.roa (raw, json)
Hash identifier: DZxkk7NnYT6gZ5cWKp8Ipo3QhmtWGhveZ71y0BhVTVg=
Subject key identifier: 62:94:92:20:C2:EE:94:6D:1B:27:71:CA:EE:2C:C7:77:F9:42:31:77
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285848B62621153B2AADB25080B400
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e39a210-5acc-3748-95db-29bf2d518642.roa
Signing time: Thu 30 Jan 2025 02:00:40 +0000
ROA not before: Thu 30 Jan 2025 02:00:40 +0000
ROA not after: Wed 30 Apr 2025 01:00:40 +0000
asID: 22773
IP address blocks: 68.227.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b6:26:21:15:3b:2a:ad:b2:50:80:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Jan 30 02:00:40 2025 GMT
Not After : Apr 30 01:00:40 2025 GMT
Subject: CN=959fa4c5-d511-4adb-862a-cddb9c1908b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a9:91:45:b5:cd:4e:7f:da:54:af:e3:fc:d6:
e2:3f:e5:ce:2f:06:31:5d:e4:9b:17:c7:1d:00:36:
33:a4:09:a1:a6:3e:c0:60:3f:df:0c:1b:c4:12:44:
b1:8a:97:36:11:5b:05:2b:30:63:0a:8f:99:af:cc:
9e:c8:8e:a0:50:66:32:5b:3a:ef:1f:24:a2:7f:7f:
7e:c3:3e:f4:73:88:f4:b1:63:12:f1:8d:ca:40:fc:
c7:9b:7a:4c:37:8f:b6:a2:17:08:30:d7:22:e2:ca:
8a:e9:ac:e0:aa:a3:1b:ff:80:66:1d:65:17:53:2e:
93:b7:53:72:c9:b0:93:87:14:c4:17:de:f0:7a:b1:
e4:be:75:ad:8c:3c:31:cd:25:eb:e9:0a:4d:8a:f1:
10:e8:d3:3f:e7:de:4a:8d:d4:e3:ad:a7:29:ac:e6:
b4:b8:47:92:b9:f6:40:1d:7f:58:ff:8b:71:fb:79:
68:55:80:e8:ba:e1:b6:6b:39:32:d4:f4:39:c3:a8:
f8:8d:cc:fb:f0:f0:ad:85:dd:7f:c1:f9:0b:ff:32:
85:22:56:ba:99:b9:c8:24:6b:93:c4:6f:df:6b:d6:
a5:f5:30:b3:a5:16:42:50:22:90:0d:e7:fd:53:b1:
41:a3:7f:96:0c:1e:f5:23:b4:a7:08:7b:e0:83:20:
8e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:94:92:20:C2:EE:94:6D:1B:27:71:CA:EE:2C:C7:77:F9:42:31:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5e39a210-5acc-3748-95db-29bf2d518642.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.227.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:fe:01:78:63:59:cb:50:7a:35:d3:af:20:60:20:ce:92:d4:
a5:52:e8:30:6a:0f:09:41:15:d0:11:5b:3e:f6:2e:9d:5e:64:
fe:7d:8b:4e:80:69:61:74:7c:ed:4f:ce:b8:8c:14:89:13:25:
c8:2b:2b:f6:ab:03:50:88:32:e0:4b:72:21:d5:bc:c9:ac:8f:
a3:1d:fc:93:5a:c9:14:d6:99:f3:fe:8f:4b:9a:86:83:8b:bd:
a0:be:65:6b:5b:fe:6b:ba:4e:03:71:d7:ca:7a:5a:e2:88:4a:
10:75:f6:11:43:6e:9c:cd:70:b3:35:8c:88:8a:39:57:c0:39:
a8:10:92:e3:c9:be:26:70:09:33:ae:d7:d0:ce:11:0a:fe:e8:
1b:60:a2:79:22:91:2a:6c:f5:1e:30:b3:87:51:f0:d9:c3:d8:
e6:0b:f1:53:29:bd:5f:5a:a5:e5:75:61:d6:5b:2e:3c:16:1e:
da:c0:b4:1d:c6:4f:58:36:38:1f:26:1f:41:77:65:ad:54:75:
47:df:fc:a5:c8:3e:1f:f1:70:e2:89:a3:a5:02:dd:97:5b:54:
41:c4:1a:71:72:c5:8c:e4:eb:35:ad:14:c1:d5:a1:d5:e6:bc:
e2:e5:00:26:61:49:1d:19:f4:98:52:10:82:37:67:55:c4:ff:
a0:48:75:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:26:39 2025 by rpki-client