Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7bcfb64a-1c0c-39d7-b291-fae1ea3bc49e.roa
File: 7bcfb64a-1c0c-39d7-b291-fae1ea3bc49e.roa (raw, json)
Hash identifier: qjeW5dny9tU8TqY8hB/fvx0vDTCpt7lhtcsHGlCt6f0=
Subject key identifier: 61:AC:A4:28:38:6B:E9:2B:9B:66:9B:B5:DD:56:98:7D:C5:2C:16:99
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B5E28FE0582EB04343700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7bcfb64a-1c0c-39d7-b291-fae1ea3bc49e.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.49.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:5e:28:fe:05:82:eb:04:34:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=db617fca-571d-4b28-b0d8-643494cc9052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dd:ec:19:10:1b:81:8d:24:d2:b3:96:76:b7:
4a:42:ed:59:1f:5d:a8:e5:46:ed:50:d2:c1:e9:e4:
b9:48:45:15:2b:cb:68:fb:89:df:5d:1c:7a:9a:7a:
9f:df:8e:68:75:c3:8c:32:f1:84:7e:1e:bf:57:2f:
2d:0a:58:b4:a7:60:02:4e:93:3f:6b:51:01:50:4c:
38:be:06:08:7b:98:67:bb:74:6b:ec:ba:f1:4d:53:
44:45:9c:cb:aa:2e:6a:28:5b:e8:56:88:e4:f0:cc:
05:84:0f:88:bd:28:50:f6:e1:84:4a:f5:7b:f8:57:
03:57:35:1b:fc:7e:c0:2a:48:59:24:e8:77:d3:34:
f1:4f:c3:91:e0:04:19:73:f0:d6:35:65:67:2e:5b:
30:a9:8d:47:09:80:a8:82:4f:6b:1b:90:d1:48:aa:
a9:d9:28:0b:fd:4e:b3:b5:1f:7b:5e:8d:de:ec:17:
57:14:75:7a:ef:50:6d:a2:2f:24:bd:4f:8f:9b:f5:
a2:0c:e4:e4:91:62:2c:04:d6:b9:f8:6a:39:83:d1:
d8:79:0b:eb:48:d3:45:06:bf:a3:1f:29:7d:6e:28:
8f:a2:91:11:ea:fc:a3:5b:24:ed:cd:ac:ac:2e:6d:
e2:92:9e:87:81:4a:7c:83:da:66:5e:81:77:ac:e4:
fc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AC:A4:28:38:6B:E9:2B:9B:66:9B:B5:DD:56:98:7D:C5:2C:16:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7bcfb64a-1c0c-39d7-b291-fae1ea3bc49e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.49.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:27:20:c9:da:24:ef:25:6f:b6:e5:d0:63:a8:14:6d:63:88:
5b:78:67:5f:3c:8e:24:01:4e:3e:7e:a5:53:9b:8a:64:e0:40:
14:58:b4:f7:13:35:43:c8:c0:2a:2d:62:f6:a1:88:da:eb:d7:
17:16:8a:11:e6:10:ba:33:da:23:39:78:f6:b4:79:b7:1d:21:
5c:51:e1:a7:82:d0:da:20:b1:10:2e:0e:a5:30:06:e0:be:67:
e1:76:d0:47:48:7f:41:ec:e0:29:75:c2:26:86:64:7d:b4:f3:
22:b4:ca:0e:67:18:b4:38:29:e8:dc:f8:43:2a:33:1c:eb:93:
be:b8:83:0c:d5:e8:51:d1:73:e9:40:f7:52:d4:93:30:cc:fe:
53:88:78:9c:87:e2:ef:a2:06:ff:55:27:7b:32:30:7c:df:cf:
9e:75:8d:5f:4a:dc:ef:3f:cb:63:fc:75:8d:9c:0b:1e:f8:77:
e6:1d:dd:a9:b7:d1:09:49:13:05:c4:9d:72:72:f8:39:52:14:
12:5a:2a:81:ec:7f:16:4c:2d:cc:e1:17:c3:a1:bf:06:6d:38:
fe:5b:f0:8a:5f:0e:b8:05:72:ee:d4:1e:24:63:f3:a5:3c:63:
50:48:84:86:10:3d:ad:6f:0d:3f:b9:ad:7a:11:2b:c4:69:98:
2b:5e:69:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:19:19 2025 by rpki-client