Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f51b3ca-dd58-3845-bdbb-26d5534d5423.roa
File: 3f51b3ca-dd58-3845-bdbb-26d5534d5423.roa (raw, json)
Hash identifier: PZs+5ym6qR+J478adcxvD04FSoDteo58U6spvz/dWtc=
Subject key identifier: E4:C0:85:E6:C4:27:22:75:03:AF:E3:28:C2:15:6F:E5:F8:7A:CD:20
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10E57AE182AB862E9DD200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f51b3ca-dd58-3845-bdbb-26d5534d5423.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 68.50.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:e5:7a:e1:82:ab:86:2e:9d:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=da690e81-6de8-4aee-b82a-75a8b7793ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c8:87:b4:50:40:33:03:b0:f9:16:b1:a6:4d:
fe:7a:96:43:4e:40:ca:ae:0b:77:b7:19:cf:1f:2c:
90:4b:66:0a:7e:52:a4:6e:6c:39:a1:2e:b0:6c:21:
4e:f8:e4:ec:93:79:ba:45:71:26:66:b9:2a:7d:a1:
0e:40:49:3f:c3:37:05:c8:c6:20:6f:8c:b9:9e:82:
17:35:3e:e8:c7:13:2f:94:26:d2:82:f0:df:70:b5:
3e:3a:e0:ec:df:e2:67:20:53:72:9f:b5:f4:98:a3:
cb:0f:f4:1a:e7:05:fe:7e:cb:0c:a6:ba:9e:5e:0f:
07:b3:ad:99:e3:00:e8:82:01:ad:2f:8f:48:b2:98:
c8:aa:09:01:0b:25:31:66:7d:54:2e:7f:4f:fb:ad:
03:5b:a0:3b:98:33:6c:15:85:a0:0a:ed:2f:74:37:
25:1f:96:47:83:01:05:72:5d:13:b3:09:a2:86:3e:
d5:13:ea:3a:d2:24:8f:0a:32:11:b6:3f:8c:63:6e:
b6:a1:27:37:8a:c0:73:12:15:c1:29:15:ac:55:99:
76:7f:76:13:db:33:71:fa:41:11:8d:eb:81:39:4c:
cb:6f:8c:40:53:c7:e5:7d:15:66:3b:9e:3c:3a:83:
65:ff:bf:af:01:26:c5:1c:6c:57:7c:38:eb:c9:3e:
4f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C0:85:E6:C4:27:22:75:03:AF:E3:28:C2:15:6F:E5:F8:7A:CD:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f51b3ca-dd58-3845-bdbb-26d5534d5423.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.50.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:22:0b:ec:f9:42:9d:56:c5:20:1c:85:cb:55:76:6c:92:a4:
2f:4a:df:d6:f7:cf:28:46:a7:59:27:c2:e2:99:b8:5f:e1:8b:
77:d9:5f:7f:ac:01:14:17:80:d8:d0:04:75:c3:10:2b:62:18:
69:70:8c:9d:c4:55:e4:b0:ad:20:e3:ba:cd:60:e3:69:6c:ba:
f7:05:c8:5b:f6:6e:8c:2a:07:7d:74:7d:a1:fa:75:7e:6f:c3:
d3:15:96:22:d2:8d:e8:50:d4:22:d8:57:9b:75:df:5e:7c:f0:
40:79:c6:3f:cf:fd:85:a5:27:9b:d2:b7:dc:e4:fc:7a:36:48:
69:ce:7c:be:11:26:01:cd:7e:b4:c3:82:37:a1:79:6a:72:53:
84:7f:01:a7:d8:fc:39:91:d9:a2:41:f6:6b:18:79:9a:8c:da:
f1:68:a7:ef:4b:fb:f9:d9:58:29:24:59:67:08:26:b6:13:ab:
c7:86:8f:7c:ec:aa:67:d3:80:49:20:b3:6e:bd:9e:5e:3a:38:
71:9f:6e:9a:67:fd:33:1a:2b:02:9e:73:31:92:a6:ae:f7:cc:
81:b1:ea:55:cb:5b:01:d0:2e:5b:ec:a5:be:9b:db:24:ed:09:
62:3e:f8:8a:83:2e:0b:53:3e:27:45:89:28:80:25:78:51:cc:
ab:51:2a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:49:16 2025 by rpki-client