Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/222d55e1-f2cd-3d99-8d5d-59d874401e7f.roa
File: 222d55e1-f2cd-3d99-8d5d-59d874401e7f.roa (raw, json)
Hash identifier: 0KR2wof/KvQoBvEIKET1S8xnhfSpCm2gsy8I4E7eRfQ=
Subject key identifier: 79:E3:4B:A1:C2:6A:E3:6A:82:BC:15:9C:F7:58:AF:A7:FC:B5:60:AC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F4A3CB2FCE99EE62E9780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/222d55e1-f2cd-3d99-8d5d-59d874401e7f.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.49.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:4a:3c:b2:fc:e9:9e:e6:2e:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=8ced4c19-a235-487b-90fd-601f7abff161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f9:6f:c3:e0:40:49:9b:2a:a8:79:71:2b:22:
2c:42:b5:0d:ce:3a:38:36:f1:41:5f:1c:48:84:71:
ae:ae:da:5c:70:98:7b:15:84:e8:54:81:0c:bb:30:
30:62:4a:3a:d8:af:47:21:8b:a5:23:c9:0d:22:df:
c9:39:e2:b1:f2:d3:51:20:5e:2b:c8:f7:fb:5f:7f:
75:42:2a:15:d3:59:25:84:cc:63:e3:61:c0:6a:dd:
da:aa:69:33:1e:6c:4f:ba:32:38:cc:90:2c:aa:66:
b1:fe:5a:b4:4d:1b:35:b5:10:4e:d4:5e:b8:98:83:
28:a2:e9:da:f2:eb:da:fe:01:57:4b:e0:89:61:eb:
74:63:13:33:1d:1c:58:da:db:14:6d:d8:75:42:9f:
ee:4a:2d:b3:59:8d:17:5e:75:d9:d2:ae:75:66:52:
4e:58:f4:e4:21:a6:ad:6e:4f:d6:83:61:04:83:ae:
8b:5e:78:dc:4a:e5:df:87:a9:e1:19:a0:3c:d1:5d:
77:41:c4:94:74:e2:80:63:8b:63:1e:3f:50:65:1b:
7f:cf:f7:2b:60:97:55:3c:56:3d:1e:83:1c:67:ed:
4a:c1:7c:66:71:30:77:d7:ed:84:fa:c0:1a:3e:0a:
a2:88:f9:27:89:81:15:6c:b5:c6:76:e2:18:cd:c7:
29:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E3:4B:A1:C2:6A:E3:6A:82:BC:15:9C:F7:58:AF:A7:FC:B5:60:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/222d55e1-f2cd-3d99-8d5d-59d874401e7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.49.24.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:c7:5d:6b:d0:9d:74:bc:ba:f8:51:51:f5:6c:f8:9a:ff:b4:
bb:8f:bb:a9:5f:b3:32:b8:56:25:64:61:89:e8:37:17:8f:44:
b8:c7:a8:c6:39:87:a8:26:11:f2:b2:fe:a8:53:39:2a:6e:2c:
d6:a3:2a:87:a6:0b:3f:75:a3:e5:48:8f:0d:15:bb:13:3b:9c:
2b:a1:25:31:21:bb:d2:0e:f1:ec:72:ff:5d:04:72:d4:ce:36:
44:c5:72:b2:ac:d9:e9:0d:bb:71:4d:6b:b8:0b:88:f2:72:5e:
42:83:b6:c2:c3:74:57:a9:63:44:c6:07:2c:57:81:a5:ca:d6:
4e:1e:3d:26:18:41:21:97:aa:dc:3a:19:97:5b:46:f0:a2:db:
d5:1f:3e:1a:c6:02:6a:c5:07:c9:cf:77:89:51:8c:46:f6:d2:
af:01:e6:1d:91:fb:23:a2:53:08:16:fc:55:5b:53:50:6b:43:
5d:eb:90:53:0b:34:ab:9d:33:19:d5:a8:52:0f:92:4f:d0:1f:
36:ee:33:b5:08:40:8b:01:d0:3c:16:25:76:b5:b7:cc:3a:b4:
da:57:07:c3:c3:c0:ba:e2:12:55:36:5c:68:87:be:89:31:fb:
e6:24:e3:bc:38:96:36:4c:cf:dc:41:e1:04:3c:eb:f2:2c:83:
24:e1:62:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:07:54 2025 by rpki-client