Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5252d8f8-00b1-32f1-b46c-1ef9ccb3d2e2.roa
File: 5252d8f8-00b1-32f1-b46c-1ef9ccb3d2e2.roa (raw, json)
Hash identifier: H2pGMJOaHZmG7jbfv+vE9C75vRSP1JOySOf5O0czq1w=
Subject key identifier: AC:A6:CC:B9:1F:F1:5A:CE:02:BC:CA:E6:FF:7A:E2:22:A8:E1:47:86
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B6424F46334FA5B73D780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5252d8f8-00b1-32f1-b46c-1ef9ccb3d2e2.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.56.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:64:24:f4:63:34:fa:5b:73:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=718de98e-6f5d-4412-903f-aaac8b3a603b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0a:fe:22:af:25:ef:53:9e:4c:6c:d5:55:57:
2a:6d:e0:8e:fb:83:2e:2e:3f:00:be:fc:02:1b:44:
25:b4:2c:a2:47:b1:82:25:ce:06:a8:72:f4:a9:bc:
64:19:d2:ff:21:ee:40:88:71:55:55:f8:87:6c:bd:
e5:ab:5f:d5:19:1a:48:28:0a:83:e6:a7:b3:14:e7:
f1:c0:78:67:47:17:48:7a:88:88:21:d8:ce:52:93:
11:3a:38:d8:05:10:0c:4d:01:7c:31:b8:09:6e:bf:
7d:fe:ca:0d:a3:be:78:86:f7:30:d5:ec:ef:ae:68:
b2:34:a7:70:6c:47:9e:95:15:b5:bd:82:70:29:7a:
07:16:48:ae:a2:f2:a0:c0:94:c7:a0:2e:26:88:5d:
d3:de:04:56:ed:30:a3:77:23:14:4a:65:65:b6:4b:
71:67:b8:32:81:07:b7:94:01:b2:d8:94:ea:00:86:
bd:86:12:8b:07:19:36:05:f1:2c:a3:48:19:d9:b6:
ca:1f:05:25:31:d9:63:6a:05:1b:e4:99:94:52:a4:
c6:1d:30:ec:40:c7:c7:83:4c:46:ac:99:d8:d8:32:
03:9e:e2:38:b4:cc:7b:01:be:15:27:2c:dc:74:ae:
9d:f5:39:32:67:4a:5a:76:4c:c7:32:41:1a:a5:36:
3d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A6:CC:B9:1F:F1:5A:CE:02:BC:CA:E6:FF:7A:E2:22:A8:E1:47:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5252d8f8-00b1-32f1-b46c-1ef9ccb3d2e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.56.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:3e:f2:69:30:77:4c:ee:b9:9e:40:75:f2:36:e8:76:6e:4e:
b2:6a:de:51:37:ee:87:2d:ab:8c:34:21:5b:87:44:19:de:f6:
c8:e2:95:94:e9:9b:f0:00:6f:e8:b4:a8:e8:bb:4d:60:22:c4:
e8:ed:e1:22:f9:7e:29:56:55:e7:27:73:c1:97:78:9e:f3:0f:
f5:12:f9:11:81:b6:d5:06:eb:77:8e:ca:6e:24:74:43:0f:c2:
f3:f1:62:58:54:eb:b9:93:c0:0b:9a:8d:50:9a:2f:86:1b:3f:
9e:38:76:10:ab:5a:bd:ba:cd:97:20:fa:40:24:0e:63:d1:20:
3e:07:68:79:39:f9:47:55:44:14:2d:d2:69:f3:9d:2b:9f:e1:
b5:69:97:7f:ad:d4:29:b9:21:ea:b6:6c:32:82:ae:74:09:21:
62:65:dc:09:f8:0c:12:ca:93:7f:b6:30:ed:e6:f1:9c:01:5e:
e4:da:a0:3c:57:78:c8:40:55:69:36:67:83:45:5a:a8:d3:e2:
17:eb:b4:2b:c3:2a:12:d9:d6:3c:71:b6:b3:eb:e1:d5:c2:aa:
76:cf:74:38:7e:26:42:8c:7b:ac:fe:b3:fe:50:b5:7b:05:fb:
61:88:6c:7c:76:23:89:2b:ce:16:e0:48:a1:f0:28:cb:1c:ef:
1e:b3:e8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:39:18 2025 by rpki-client