Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/da87a5f5-9c52-3ea4-a8a6-3054f85c742d.roa
File: da87a5f5-9c52-3ea4-a8a6-3054f85c742d.roa (raw, json)
Hash identifier: 4fnoEH1pIyBw4lRgZUWdpR0qzrRhsvk03T+rZ4hWx78=
Subject key identifier: CA:F2:9C:05:E2:1D:EC:C9:E6:C1:9E:FB:B8:A3:8D:43:75:DB:EB:09
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285848EF616C7CB843C23D7867DBC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/da87a5f5-9c52-3ea4-a8a6-3054f85c742d.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 22773
IP address blocks: 68.227.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:6c:7c:b8:43:c2:3d:78:67:db:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=018620ad-4506-4607-92c6-884db294aedc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9a:1b:a1:19:80:db:b0:f6:1a:02:e7:6a:56:
69:ee:1c:06:c3:b6:67:4f:e5:dd:e6:5a:f5:b4:6f:
00:e1:b8:58:48:cd:b5:8c:2a:6d:b3:dc:59:7e:bc:
c6:c6:58:fb:e3:61:56:3c:8d:80:12:56:98:78:c9:
43:03:d2:e1:b0:82:ec:26:77:cd:74:dd:dd:41:0a:
fa:93:b3:09:0d:63:bb:87:66:84:be:6e:3b:ec:85:
90:c6:4c:23:3e:30:63:48:b2:5f:4b:de:34:bb:3e:
36:bd:1d:b3:37:9c:87:e8:32:1a:3b:7b:d0:75:e7:
21:d3:b9:de:16:f2:df:cf:e0:32:e7:ec:65:d9:7d:
de:cb:be:10:57:41:6d:62:05:c1:42:81:45:a8:45:
ef:1e:be:9b:6a:87:f0:45:ae:56:f1:94:b5:22:00:
15:e9:7a:8d:10:ad:e2:12:a7:8d:2c:b7:a3:78:cb:
3b:20:46:a9:7d:5f:41:44:ab:2a:dd:f5:45:61:04:
48:a6:1a:4e:49:b9:d1:ba:77:74:91:91:05:22:83:
23:fd:c1:c4:0b:5a:28:ac:34:ba:ad:d4:05:05:e6:
49:19:56:2c:4d:f3:72:a5:ce:fc:0f:78:23:c5:f2:
2e:a1:a2:40:5f:83:6d:dd:48:6a:67:90:14:63:75:
db:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F2:9C:05:E2:1D:EC:C9:E6:C1:9E:FB:B8:A3:8D:43:75:DB:EB:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/da87a5f5-9c52-3ea4-a8a6-3054f85c742d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.227.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:b5:22:7d:00:5c:ce:27:78:f6:04:18:b4:d6:9d:98:d8:66:
bb:2a:9c:c6:a3:a6:e7:3c:d5:c8:37:96:b9:f2:3c:c8:db:c4:
fc:7f:f7:91:c9:e6:a9:69:9a:1c:db:45:22:16:55:f7:da:67:
22:53:d7:7d:f0:a2:03:40:67:94:b1:20:be:95:33:75:80:d9:
9b:65:d7:65:4d:22:9b:fb:d0:44:f3:db:e3:4a:d4:60:aa:c3:
d2:23:bb:7a:e6:f1:da:c8:2a:1c:ed:5e:01:0c:7b:a8:0b:ad:
16:a8:90:c5:3e:86:ab:de:da:f9:94:05:45:af:6a:78:31:a9:
c9:92:ac:55:88:61:ef:e5:90:83:2d:37:44:d5:50:8e:49:ae:
88:61:80:45:a6:16:50:05:f2:94:87:7c:a1:ac:95:e9:75:7d:
79:b1:20:69:bc:fc:38:e6:1e:28:27:22:f1:88:95:4e:43:af:
56:91:43:0c:52:93:a2:be:cf:88:68:84:d9:86:4d:3b:07:ea:
9a:98:b5:b0:df:54:2d:3c:e1:48:74:c9:37:d9:b7:85:17:ab:
6e:d9:24:7a:11:ce:b1:8f:75:a3:e4:2e:2f:97:91:da:c8:1e:
aa:f5:99:2a:85:0e:09:2f:a2:8a:84:47:e8:f8:ae:88:fb:68:
38:94:f3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:53:38 2025 by rpki-client