Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/151933d4-3fe4-3f3d-96b4-b9b7d0ae57f5.roa
File: 151933d4-3fe4-3f3d-96b4-b9b7d0ae57f5.roa (raw, json)
Hash identifier: 1nM+zvYu/zbuX58bQVhuJnVevfGiYOuLeopAH5f2xPY=
Subject key identifier: AF:FE:0A:A7:40:4A:AB:AA:A4:33:4E:CA:21:89:BC:39:AD:46:FD:77
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F48EF555C1B4F5DB1F000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/151933d4-3fe4-3f3d-96b4-b9b7d0ae57f5.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.49.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:48:ef:55:5c:1b:4f:5d:b1:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=1d50febe-4229-4889-abf8-75009aba7884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:95:b5:b7:65:83:d7:0a:c4:89:7e:c7:38:b4:
57:ff:00:23:4a:77:b5:fa:9f:21:98:3a:5b:8f:06:
7c:3c:09:e9:36:7c:79:13:62:1a:cd:0a:2e:e0:14:
cf:9d:5b:42:76:0e:f5:9c:cf:e8:d3:65:39:21:ac:
bc:83:2f:a3:53:d2:41:df:5d:d0:a1:78:bc:8a:61:
af:1c:1a:23:c2:8f:70:0a:b4:2e:30:63:e2:da:d5:
87:26:b0:f7:64:7b:bb:e6:b1:ac:18:1c:47:92:50:
91:7d:25:1b:38:af:c7:5f:36:70:9a:da:f6:e6:fd:
7b:cc:f2:4d:98:fc:a7:c3:fd:0b:d3:b8:28:e7:a3:
08:32:d8:96:12:84:cd:12:df:b5:36:4f:03:b9:a6:
8e:34:4b:65:39:5e:0b:6b:ae:a0:c6:fb:fc:6c:66:
ad:13:e2:cd:52:87:9f:61:77:3b:79:0b:1c:5e:1f:
06:5a:17:54:65:ce:a4:19:eb:25:6d:d5:86:c0:40:
d1:46:04:ed:a3:d1:0f:3e:48:09:34:3c:da:2e:f1:
df:d6:e1:62:6d:0f:b9:35:3a:10:e7:1a:08:b0:fb:
8f:ca:83:db:f5:a4:95:50:1b:4f:ea:d0:fb:b1:7e:
aa:47:26:c3:b7:37:01:0d:e6:c0:40:67:95:26:f3:
3c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FE:0A:A7:40:4A:AB:AA:A4:33:4E:CA:21:89:BC:39:AD:46:FD:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/151933d4-3fe4-3f3d-96b4-b9b7d0ae57f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.49.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:7f:c5:44:aa:8b:20:02:19:83:8c:6d:2d:27:05:bb:d9:82:
eb:04:6e:cb:c1:cf:8d:5a:23:be:43:f9:33:6e:20:51:3b:53:
97:6d:3f:ef:62:f7:da:24:09:15:0f:0a:90:26:6b:e6:ff:65:
d4:ba:aa:d9:53:e4:64:e2:9f:07:56:46:7b:74:19:90:11:59:
c7:7b:b9:6a:46:f4:5b:54:13:52:d6:e4:9a:2a:1e:9a:25:5b:
4e:01:6e:be:5f:df:be:6b:37:84:b5:ad:ef:a6:02:92:66:a9:
98:f6:d1:9c:6a:2e:5e:b0:66:20:87:11:d5:03:e5:fd:45:0a:
d1:f5:5b:06:65:69:54:a7:7a:dc:64:0f:ac:89:66:ec:2b:c5:
d4:04:ce:53:bb:46:b0:b7:05:ae:4a:94:ad:01:03:96:5b:10:
11:f8:62:4b:55:fc:02:4c:e1:1c:6a:5f:42:ce:14:ac:07:8b:
7c:08:f5:df:95:89:13:c6:c5:ac:97:80:8d:09:f6:54:c2:65:
cc:de:15:92:95:f0:4b:3f:d7:fc:4f:ec:81:8a:59:ba:ea:2a:
2d:30:72:5c:51:95:fd:ce:4f:0e:8a:93:f2:c4:55:cd:0f:0e:
83:ce:2c:fb:17:a4:5d:9a:fd:84:8a:ee:6b:08:5c:fc:b0:32:
f6:86:25:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:44:45 2025 by rpki-client