Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/627088ed-7410-3a37-970d-470372c55f2b.roa
File: 627088ed-7410-3a37-970d-470372c55f2b.roa (raw, json)
Hash identifier: tAumiisBVcaOm2kn3rrzwiVM25x02mUpezwHfuTh0aA=
Subject key identifier: 74:36:66:EF:40:AF:FB:3F:51:51:12:9A:EC:44:84:16:D3:83:9D:C6
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B57BA12953F1450FC06C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/627088ed-7410-3a37-970d-470372c55f2b.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.42.220.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:57:ba:12:95:3f:14:50:fc:06:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=bfbedd72-9b8a-4bef-814a-f9755e8c161a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b4:02:ab:03:54:05:dd:8c:5a:18:f7:a2:3b:
c0:f1:52:e7:4b:ed:ab:b7:12:7b:25:0f:92:68:94:
e5:d9:0c:16:1e:ff:14:2b:af:d6:3f:1e:e2:5f:82:
c9:19:c7:f2:7f:34:4c:a7:a2:4e:c6:c9:6c:4a:a0:
cb:77:6e:d4:78:d0:fa:d0:7c:90:ff:b8:d3:88:23:
a1:f2:80:fe:66:aa:9f:0a:1d:b9:87:79:e1:49:3a:
5c:f2:0f:7f:54:75:64:54:7a:38:99:4f:9c:02:d1:
0b:40:0e:d9:c1:d6:57:9f:0b:f4:97:01:28:c4:39:
7f:cb:44:c6:ac:11:c1:87:cc:9d:d8:07:82:28:88:
4b:f4:77:ed:61:e2:88:2e:5b:e5:d2:e2:fb:bb:ea:
2b:29:60:38:9b:d8:e9:5e:cd:17:2a:2f:f4:d3:cf:
a8:f1:78:24:62:74:25:9f:e3:d0:fc:6d:45:93:f8:
dc:d4:75:7c:bf:c7:0e:cf:8e:22:7c:2a:1d:c2:82:
56:47:10:d7:bd:48:f6:43:18:48:44:e6:2d:87:9f:
0b:c9:4e:ee:e7:13:28:3b:23:53:58:d3:96:4d:c8:
2b:e2:f3:85:3e:81:5d:79:63:82:28:e3:72:30:ee:
10:ae:c9:fb:83:09:8f:81:5b:32:b6:9e:64:b7:c5:
fb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:36:66:EF:40:AF:FB:3F:51:51:12:9A:EC:44:84:16:D3:83:9D:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/627088ed-7410-3a37-970d-470372c55f2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.42.220.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:50:20:3d:e9:56:6a:ca:9f:b4:80:eb:35:2b:30:ef:6b:4b:
51:89:5a:cf:ed:f1:88:21:a8:63:cd:12:67:ab:fd:f9:ee:44:
b2:1f:80:aa:ee:9a:cc:62:a5:bb:c9:9e:50:c5:cd:57:1f:60:
80:4d:31:00:f7:8d:7e:74:9e:9e:06:41:38:59:58:86:3f:af:
07:5c:c7:59:da:82:ba:9b:86:62:53:fc:d2:30:90:52:39:92:
b1:3f:75:a5:ab:ce:32:eb:92:e2:c9:83:3f:dd:5c:1d:3a:c6:
90:29:65:aa:31:58:4a:ab:79:71:72:77:aa:28:bb:72:6d:b1:
50:9f:0a:d9:de:3c:a3:cc:08:bd:38:df:4d:15:10:94:ba:f0:
db:7a:c5:33:f0:be:05:5d:19:1e:7e:69:a8:a8:1e:29:45:f3:
2e:5a:ee:06:8e:74:7f:20:22:81:5e:5c:6d:08:d6:a1:46:53:
70:b6:f0:19:4c:b2:c9:74:34:a9:b2:56:b3:e7:e7:db:b7:91:
aa:5f:81:a9:e9:4d:e4:82:bf:01:e8:20:92:d8:43:be:76:65:
72:c4:89:f2:b8:09:b6:17:00:8f:c7:82:da:b9:ef:df:17:cb:
2f:71:35:61:55:ea:b7:a6:96:56:f5:90:93:1f:0d:67:73:54:
34:2a:45:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:26:29 2025 by rpki-client