Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9a1f5197-a8d0-319f-b00e-70231d2a5e08.roa
File: 9a1f5197-a8d0-319f-b00e-70231d2a5e08.roa (raw, json)
Hash identifier: 8D2M+Rtn8Xb/V2qvNZ7u3h0KN0iz3Hw6GvFLj/1ljYY=
Subject key identifier: 15:C7:5E:42:45:D0:0C:16:77:E9:E1:C9:E7:E3:56:8D:90:92:BF:68
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F432858490CB176C414DE78F6A4BF3400
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9a1f5197-a8d0-319f-b00e-70231d2a5e08.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 22773
IP address blocks: 68.227.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:76:c4:14:de:78:f6:a4:bf:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=b5ff1325-f677-4aee-ab1c-38dd5b8ffc70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ab:6e:fb:f4:25:c1:bb:8a:61:47:ee:d4:49:
24:13:00:f7:1d:01:13:25:85:50:1e:f2:6d:cb:34:
4a:fd:e5:19:2d:47:f5:d1:34:b5:a8:6b:7a:9d:93:
f7:c8:fa:fd:8b:e0:b5:62:7c:12:a0:33:80:35:fe:
1b:d3:71:e3:f4:c0:52:67:fc:85:d9:80:82:75:c8:
24:d1:15:91:fa:d6:2d:dc:e1:30:af:07:37:4d:69:
84:e2:32:8d:d5:da:29:b3:5e:1f:e4:a3:9c:2b:f8:
2a:44:97:ee:4a:4b:2c:e4:1e:8e:84:ca:0f:31:78:
85:43:35:24:af:a5:3e:0e:74:fb:3e:2d:41:8e:2c:
43:13:9b:75:ab:72:f2:d1:e5:67:c5:a7:ae:4c:2b:
b8:73:14:08:0c:74:01:04:56:0c:dc:e1:f2:c8:1a:
60:65:bc:90:20:57:a4:19:88:03:1d:0e:46:8c:a7:
33:f2:aa:a4:a0:19:f0:e5:47:f9:ba:0e:fc:84:92:
60:16:c4:d4:a6:c0:b6:c3:f2:71:2f:54:c2:8e:90:
53:ce:87:29:ae:77:87:15:ed:ac:e2:97:59:3d:ab:
56:b5:64:44:a4:2d:31:04:fe:76:a8:3f:60:86:59:
01:4f:63:fa:ac:5c:8a:40:ea:33:7f:2d:2a:31:3d:
df:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C7:5E:42:45:D0:0C:16:77:E9:E1:C9:E7:E3:56:8D:90:92:BF:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9a1f5197-a8d0-319f-b00e-70231d2a5e08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.227.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:04:f4:a8:6b:75:f4:9a:fe:f6:a2:6f:6d:4f:ab:ad:96:af:
fa:3b:2c:af:bb:4a:d8:78:5e:86:41:61:df:1b:28:57:19:f6:
47:d5:60:e4:6b:81:34:68:36:9a:d0:be:69:49:3b:67:99:21:
e9:1f:3a:af:7e:bd:0b:f6:0a:64:03:a1:d8:b4:bb:f8:1b:8a:
37:e0:54:99:73:87:ad:77:a8:41:ce:ee:74:ef:8b:80:40:4e:
db:87:2b:2a:10:70:aa:1e:13:32:9e:e5:ce:cd:15:cd:59:ea:
ad:f4:11:66:80:12:d2:f7:a5:39:bb:b3:3e:e8:03:b1:f5:f9:
0d:cb:ad:3b:ac:d3:2e:74:3b:d5:a3:70:d0:a7:6b:20:04:d4:
d8:7b:4b:5f:ec:b6:c4:f8:44:9a:a5:82:17:8d:eb:1e:64:a6:
1a:c1:9c:d3:b6:02:e9:30:57:12:c0:b8:37:c5:d1:6e:62:82:
74:46:eb:2c:ff:69:85:5c:9f:53:d9:58:90:ac:4f:a7:89:11:
f9:f0:83:db:14:66:1c:26:03:fb:46:bb:38:dc:2b:c0:58:af:
a2:65:fa:56:99:a6:35:d9:4a:d4:4f:0e:c5:5e:a2:8a:31:6a:
8c:ab:15:5e:81:c5:97:9b:bf:7e:e8:20:d7:85:32:b4:76:fb:
a7:f7:96:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:58:28 2025 by rpki-client