Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11e71c24-aa49-39f5-9e05-177883a45bf5.roa
File: 11e71c24-aa49-39f5-9e05-177883a45bf5.roa (raw, json)
Hash identifier: E6Td4BtC93P/WDV3gjRzsYI3tA0B7Qyr46Td0VPfNnE=
Subject key identifier: 7E:9E:17:79:E6:68:31:6F:B6:17:83:4F:54:E6:98:BE:9F:61:4F:50
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1286B2DEE53A302C4A0940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11e71c24-aa49-39f5-9e05-177883a45bf5.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 68.54.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:86:b2:de:e5:3a:30:2c:4a:09:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=6fc55e1a-f1f8-4ef0-b94e-beba21677b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f1:7e:fc:af:75:aa:27:bd:9a:8d:47:f2:a7:
e6:2e:4a:a0:71:60:5a:e1:94:a1:ac:cc:d6:52:9a:
80:e7:00:4e:ca:ab:cb:a6:d9:05:80:4b:6f:f9:9e:
b6:41:e5:ac:d0:aa:a7:39:ae:de:08:bb:77:e1:1e:
b4:0e:44:65:1c:ac:88:bf:32:e7:be:6b:5e:e8:c4:
8f:7e:e0:87:ef:62:ef:17:4a:86:90:1d:d9:91:15:
cc:e4:4d:d6:80:58:85:ce:3c:14:ee:01:83:be:8e:
74:1e:68:42:a1:4a:af:f9:2a:ea:3a:f3:d4:f3:87:
57:ce:5d:23:4b:e3:73:65:86:56:d7:20:44:37:ce:
d5:a0:cc:26:d6:1b:f0:f5:82:19:f2:b1:74:03:61:
13:dc:7e:40:3a:27:bb:88:1f:02:d6:b9:5c:de:5e:
09:b6:80:1b:31:8d:0f:e7:a4:15:a1:5d:d5:35:ac:
74:3a:cf:98:17:c8:c4:23:43:96:60:57:88:7e:18:
66:53:75:91:dd:47:74:23:5b:0a:21:6f:d8:2d:b5:
5d:e9:99:c1:1b:71:10:02:21:83:4d:93:90:77:90:
65:05:8c:45:c2:b3:91:10:84:68:fc:bf:3e:38:e2:
52:67:36:46:a8:0c:ce:7b:a0:3e:9c:1f:32:65:1c:
c0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9E:17:79:E6:68:31:6F:B6:17:83:4F:54:E6:98:BE:9F:61:4F:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11e71c24-aa49-39f5-9e05-177883a45bf5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.54.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:96:e9:eb:a7:a0:0e:ba:ad:8c:d3:9a:c4:31:85:86:7b:f9:
b2:23:df:87:e7:0b:0c:88:27:04:da:c1:54:6f:5d:ff:90:fb:
1b:50:af:7a:66:02:3d:52:dd:e6:7a:0a:83:56:4b:3d:a0:8e:
79:24:33:e0:22:b5:de:16:7d:8c:2b:fe:29:3d:1e:97:07:5b:
37:ca:c8:5c:66:c8:dd:be:cf:9c:99:10:be:a7:d8:ac:b0:96:
fe:37:d8:48:53:bf:29:83:9a:58:78:0b:75:ab:e0:79:16:59:
d6:91:6b:44:69:b2:86:a6:5a:73:6e:67:a4:46:1c:57:1f:bb:
51:cc:d0:7d:78:55:c2:1c:e3:2a:09:83:bd:7f:4f:2a:be:cf:
de:12:57:55:a2:35:fb:ab:cb:45:ba:58:64:ae:f9:7b:63:a1:
f5:5c:cf:cb:8e:57:00:0c:f0:d1:c8:25:6f:3f:c9:a7:82:0d:
95:d8:07:cc:a8:71:89:6f:a7:e9:7d:06:a2:86:07:c5:69:c8:
af:7f:c2:ca:01:20:40:a5:a1:d2:9f:78:d6:c8:0a:bf:17:2c:
4c:cc:31:ea:70:04:e2:0c:12:70:6a:b8:3a:ef:99:d1:df:77:
00:7d:b3:1e:8d:b0:2a:c2:62:6d:4a:fb:81:50:75:3b:6e:2c:
99:73:e7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:37:56 2025 by rpki-client