Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/863a4b84-1653-3d1b-9139-69e7b60c3efa.roa
File: 863a4b84-1653-3d1b-9139-69e7b60c3efa.roa (raw, json)
Hash identifier: 5LmMjO40oBJUG+0IyQpHlZioDzmr0DpcCIncGRIOY3c=
Subject key identifier: A6:40:DE:29:30:CE:48:CD:95:2E:12:64:9A:69:2F:A6:0A:CD:DE:7A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B5E57093B465449FF98C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/863a4b84-1653-3d1b-9139-69e7b60c3efa.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.49.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:5e:57:09:3b:46:54:49:ff:98:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=8dc334bf-1f7c-4f4c-bdec-55405fe8cd15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cb:d5:f2:bb:fe:7c:a3:59:cf:5f:d2:dc:fa:
52:22:9f:b8:fd:ba:78:05:d6:66:52:50:4d:c0:66:
26:76:92:46:70:91:ee:92:56:6f:f1:66:f1:78:6a:
c0:3e:58:db:7b:d0:10:ca:8a:14:b5:c5:09:17:6d:
b5:a6:cd:68:c4:85:05:1e:7d:71:7f:c3:1e:61:53:
2a:74:a6:45:b9:07:dc:96:fa:73:1b:88:bf:19:75:
fb:dd:1d:51:1a:f9:54:de:e7:e1:73:ce:98:6b:de:
16:2f:5b:65:a2:88:2a:41:50:f9:23:65:61:9f:4d:
8a:ad:cb:cc:67:9e:ca:01:9f:ee:95:d2:c7:ca:74:
68:78:b0:9f:de:d8:33:a7:aa:82:72:75:1d:7c:ed:
02:f4:52:44:f6:98:b5:c6:d2:ac:d5:62:48:34:5a:
a6:bb:4f:4c:db:71:74:17:aa:02:2e:51:ae:9c:3f:
b7:43:8f:e8:ee:5e:69:dd:6b:c2:37:2a:48:3d:e7:
88:7d:de:0f:45:2b:ac:db:93:bb:ca:98:7e:70:fc:
92:e7:a5:07:3f:7f:4d:b8:92:1b:cf:27:20:28:a9:
4c:9f:97:43:af:a1:6a:b4:76:fa:c2:52:00:e0:d1:
1c:36:01:6c:f1:fa:93:47:49:3d:e9:74:87:f5:21:
ec:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:40:DE:29:30:CE:48:CD:95:2E:12:64:9A:69:2F:A6:0A:CD:DE:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/863a4b84-1653-3d1b-9139-69e7b60c3efa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.49.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:1c:e2:01:7b:06:0d:bc:d8:04:3a:cb:b0:32:ee:0b:e6:a9:
d9:05:0f:5b:98:da:d3:d4:3e:a6:82:62:be:42:ca:30:fc:88:
8b:13:57:46:72:17:e9:24:43:7c:eb:5b:8a:5c:2f:41:0e:38:
65:2b:ec:2d:77:07:31:04:c4:9a:3a:e8:5b:9a:90:4b:90:c4:
20:3e:4f:72:f2:10:d9:25:5c:8a:e4:b4:23:f9:62:9d:8f:d2:
b4:21:c4:cd:5f:05:40:12:67:32:86:00:5c:a2:7a:13:5d:c8:
d2:e0:34:d8:6d:43:7e:af:6f:4e:75:da:a1:64:11:e8:53:fa:
20:de:0b:54:cc:0c:aa:9f:e1:c4:bb:07:17:11:ab:45:5e:3f:
b1:d2:4f:de:4f:0b:74:f2:d5:eb:72:5a:66:6e:5e:39:2c:00:
09:45:8b:95:f3:a7:05:b9:74:8a:92:bd:8a:43:11:50:f1:6e:
e4:da:b0:5d:fd:84:7d:d1:59:8e:57:b8:5e:8d:10:13:ce:a1:
4f:cb:ab:56:e3:e0:42:96:d5:26:33:f9:ca:bd:c9:12:ee:bb:
08:21:b3:ed:91:e6:0c:39:23:75:68:49:04:58:46:26:2d:c2:
39:08:13:fd:53:40:5d:6e:62:77:b3:f2:8a:bc:d0:9f:1a:46:
6a:65:f4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:35:27 2025 by rpki-client