Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0754939a-4b94-3e90-b248-4a19b0b70d5d.roa
File: 0754939a-4b94-3e90-b248-4a19b0b70d5d.roa (raw, json)
Hash identifier: GKbyscTDRhx6cIVMDLrkEaKdMwCG6O3iKGE81kSV3Dc=
Subject key identifier: 88:28:0C:50:8C:60:57:29:33:CC:AF:7E:FB:62:B9:1F:A8:DD:35:E4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B6463DC67B5C86A63D480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0754939a-4b94-3e90-b248-4a19b0b70d5d.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.56.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:64:63:dc:67:b5:c8:6a:63:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=9d4dc6d7-16d0-4099-ab24-87555c148b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b7:d1:15:27:e9:41:32:78:9b:c9:70:b5:b1:
d4:01:cc:45:38:5b:ad:4c:8c:a9:ac:40:bd:a3:d9:
84:ac:39:ec:9e:dd:2a:7b:ce:4d:db:a8:30:02:a4:
0f:e2:f0:d4:c1:8a:cc:c0:30:96:45:63:9a:2e:7b:
7b:6c:21:2f:cd:33:8e:9c:05:83:1f:43:61:a4:0e:
c2:64:7e:53:ef:69:1b:a6:f1:35:af:c3:fd:a0:59:
95:e7:b1:33:70:c0:12:58:0f:68:f2:16:cb:31:a0:
53:4b:e6:54:42:98:07:c4:bd:fe:ec:fc:57:d3:0b:
61:01:2e:98:e2:ac:a4:64:2d:92:05:63:ee:1b:05:
e1:c9:43:3e:c1:20:3b:56:77:a7:bd:db:b5:20:e6:
7e:f7:0c:1d:6f:4c:d8:e7:a5:4e:2b:1d:e7:d8:2b:
83:34:c3:14:1a:d0:77:1d:35:f2:b3:b4:c6:ae:5f:
89:3b:7f:14:4d:86:e7:63:92:8a:ee:7d:a4:a5:c4:
db:dd:80:d4:ac:c3:0e:11:3d:ef:b6:05:65:cd:ba:
62:46:a5:07:70:74:d0:55:77:16:2c:8f:3b:51:e0:
02:13:46:58:02:ed:8a:1e:68:0d:68:28:36:a7:92:
0e:c3:9e:82:47:4d:44:e7:50:ee:41:09:c4:8d:3e:
20:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:28:0C:50:8C:60:57:29:33:CC:AF:7E:FB:62:B9:1F:A8:DD:35:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0754939a-4b94-3e90-b248-4a19b0b70d5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.56.65.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:a0:bc:d1:94:d6:cc:96:2b:74:b4:0d:a4:28:38:bc:0b:b4:
64:11:6b:ce:6f:32:e5:6c:8f:c2:69:17:cc:29:31:45:03:ce:
73:b2:6c:51:fc:9f:9e:58:c7:d4:22:10:4c:66:86:f6:6a:2e:
f9:11:9e:bb:e8:23:9a:42:e5:92:46:90:fe:14:a0:35:0c:2f:
af:87:de:65:8b:00:d1:c2:3e:f8:34:37:3c:9b:f8:2e:04:2b:
47:70:26:e1:b6:4b:a0:00:62:b3:cc:ec:3c:89:10:de:18:a0:
8c:f2:1e:01:3e:d2:7c:51:3a:d5:68:21:ff:c2:06:30:b9:95:
aa:94:52:5a:be:83:65:58:e1:bd:0f:f1:08:6a:d1:b3:21:cf:
c4:f6:31:d0:56:00:3e:fa:0b:51:e3:d1:29:52:3f:05:09:38:
5d:81:8b:c0:0c:44:92:95:6a:9d:49:eb:9e:e6:27:13:5d:08:
c2:c6:0f:0b:cc:2f:68:d6:a8:d5:e4:0d:3c:da:6a:87:70:db:
66:49:f5:5a:ec:53:bb:08:b4:84:19:39:53:ff:2c:d3:41:86:
aa:8b:c5:12:52:38:5d:93:ea:63:ce:12:30:f1:99:20:34:90:
5b:cc:73:08:82:af:7f:05:76:4a:b3:cf:1b:42:34:b1:1f:42:
24:40:b9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:08:06 2025 by rpki-client