Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64da350a-f728-3ff9-9de8-5c72a8c80eb8.roa
File: 64da350a-f728-3ff9-9de8-5c72a8c80eb8.roa (raw, json)
Hash identifier: 5Xr1k3O8cmec1g3XugKdSWA3sRqaCNhHsd/RAUJ9Ysc=
Subject key identifier: 8F:D5:24:A0:B8:E6:08:15:C9:79:37:2B:F8:81:E4:45:F9:80:74:44
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B5BDA9A33C993093765A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64da350a-f728-3ff9-9de8-5c72a8c80eb8.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.48.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:5b:da:9a:33:c9:93:09:37:65:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=18fe9e5f-73d1-4b83-9ca7-1a04d4fa4a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ee:74:29:1d:b5:68:28:9d:9f:1f:d0:a0:c4:
2a:6c:cf:b5:70:80:e9:7f:d2:1a:9f:90:40:77:bb:
f5:97:44:9e:f2:40:25:92:f7:79:83:ea:d0:61:d4:
3d:dc:ec:00:ad:4d:f3:ec:a6:4f:ad:b3:0d:d7:16:
3a:be:bb:02:8a:8e:61:06:4d:d3:b6:8a:09:88:02:
c6:1d:67:53:00:8e:09:1f:39:7d:f2:5a:92:d6:8f:
fd:00:0e:79:ca:c2:28:cc:9c:18:99:f6:9e:f4:b3:
99:b6:0c:05:fe:75:e8:23:67:3f:74:79:74:b1:6f:
4d:56:22:b4:6e:1b:5a:6e:fd:7d:89:59:85:36:33:
f8:70:48:ff:0a:57:a6:f0:fb:87:b0:57:44:2d:ca:
9e:79:60:50:ee:be:e4:28:c2:91:86:f3:84:8d:ee:
02:35:80:10:e2:00:91:c3:f0:ed:94:fe:93:5a:d1:
b2:c4:bb:ce:73:cd:6c:6a:68:0c:74:9a:e5:eb:49:
ee:2e:f1:35:85:72:12:48:d9:f8:9f:79:43:a5:62:
bd:51:c7:26:bb:a9:16:b8:5c:1f:5b:38:e2:66:77:
7e:1b:f3:46:ec:90:e2:6f:2b:cf:f1:1f:57:c6:be:
20:6e:6f:d9:76:f8:5b:d9:eb:36:98:e2:ed:61:7d:
94:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D5:24:A0:B8:E6:08:15:C9:79:37:2B:F8:81:E4:45:F9:80:74:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64da350a-f728-3ff9-9de8-5c72a8c80eb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.48.134.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:50:c8:1b:b8:d5:73:e7:9a:94:42:9d:3a:28:38:07:db:6e:
e8:6c:0a:00:6c:db:3f:87:a1:3f:af:76:ce:18:b4:1f:a6:d7:
80:1d:8d:40:25:28:4a:11:09:ac:5e:9c:8d:26:45:1a:66:67:
e5:78:50:8a:10:89:75:d6:ab:50:34:4e:5a:e1:5c:71:2e:f0:
d4:d2:bf:d0:e0:df:54:80:28:d7:a6:b9:79:e1:74:29:fe:d0:
7b:b9:7c:2c:1b:ba:bd:08:e3:49:27:bf:e0:ed:97:2b:e6:7f:
20:65:2a:02:c0:f2:02:62:e4:2d:bd:e5:94:7f:ae:b2:fd:4d:
c5:b3:7a:47:31:ed:4e:ea:bd:98:98:c7:71:40:d2:05:35:4f:
3c:da:e7:eb:ad:b2:2f:76:cf:90:73:8a:2c:12:a8:dc:32:0b:
91:93:0f:8e:f8:31:db:d0:24:54:d6:bc:29:fb:70:96:c0:3c:
dd:e0:0a:af:5d:62:ef:dd:86:21:92:f1:58:da:73:f5:2d:6e:
05:4d:0c:07:ac:21:bd:88:f1:40:04:42:7f:59:80:46:64:79:
2e:28:2b:f5:be:59:6f:ea:95:19:88:e9:67:12:68:77:83:0c:
fb:f8:6b:8b:8e:a2:de:c9:a3:37:a4:a2:6a:36:65:eb:d7:ae:
be:24:8c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:50:00 2025 by rpki-client