Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f92e444-ae54-36ea-82f8-ab3ccc4c20e1.roa
File: 9f92e444-ae54-36ea-82f8-ab3ccc4c20e1.roa (raw, json)
Hash identifier: YOQQzVb3c88r0x5nw2dOK+al0I4mxK1YM2e0/h3x6nk=
Subject key identifier: D9:6C:B5:D9:C8:18:51:91:A6:C5:BB:21:18:78:12:E0:45:D0:12:F7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B5BF4146882C0A9AC19E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f92e444-ae54-36ea-82f8-ab3ccc4c20e1.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.48.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:5b:f4:14:68:82:c0:a9:ac:19:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=b13bf4fc-4102-43cb-a90f-4c93716d622e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:80:a3:0f:b2:a6:9d:33:35:45:37:25:e2:ea:
26:b5:49:48:d8:18:d8:c9:23:4d:6f:86:21:39:5b:
29:e1:7c:9e:51:8f:c4:0d:cd:fe:c8:42:70:3e:45:
7d:d4:03:10:4e:27:e9:88:f1:47:da:35:55:23:b6:
b2:5e:92:05:4d:77:1f:c2:ac:8b:dd:a0:1f:e3:ec:
7e:ab:0f:e1:fa:5f:e3:c5:06:39:4f:f4:9f:63:72:
eb:7a:a4:89:88:c8:11:8a:26:c1:b1:d9:c0:8a:66:
7e:7a:f7:66:60:f4:3c:24:32:26:98:69:a5:ce:7a:
86:c1:b8:b7:f9:bd:63:a4:96:95:93:96:92:f5:f8:
9a:13:89:a7:36:21:ee:84:38:a4:cc:34:a2:0b:d7:
23:47:cc:9e:d3:4b:f3:76:28:42:db:a9:b9:4a:aa:
0a:9c:ee:36:4b:be:30:a3:ed:b6:e6:0e:c5:54:f8:
d1:5b:04:ec:25:b3:eb:14:06:a1:b2:36:74:0b:9b:
f4:65:d1:ab:b3:72:2f:0f:fd:52:55:c4:0e:98:91:
5f:de:94:48:11:da:50:09:b0:6e:b6:ff:bc:da:87:
4d:ba:dc:d3:57:6d:4d:88:09:8e:11:88:fd:dd:f2:
b4:03:4e:b3:93:01:1a:f2:0e:ad:eb:24:03:e8:5b:
91:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6C:B5:D9:C8:18:51:91:A6:C5:BB:21:18:78:12:E0:45:D0:12:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f92e444-ae54-36ea-82f8-ab3ccc4c20e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.48.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:03:66:a3:fa:35:dc:18:66:25:32:45:74:fb:03:23:13:a5:
fc:07:c2:4f:5e:98:52:34:3c:18:05:1a:ae:38:f7:44:1e:a9:
00:8f:90:f0:af:b7:88:b5:20:20:8e:78:fa:9a:0d:10:a6:f7:
f3:16:a2:86:b9:a3:40:f5:36:11:8f:94:e1:a1:85:a0:39:1e:
a8:b8:da:35:f9:db:8b:87:b8:b9:4c:a9:01:de:00:db:75:9b:
76:0f:b3:5c:9e:d8:d1:b3:a2:d3:87:c3:3c:e4:bd:b1:51:aa:
c7:cf:0d:ec:de:7e:6e:be:35:f6:4b:a2:b6:df:6b:33:14:0a:
dc:27:50:8d:5b:bc:00:a0:81:31:27:8b:e4:b3:0a:1b:4e:8d:
8c:9f:62:c0:86:b5:50:9f:b3:b9:39:c8:26:3a:e6:03:c5:7c:
ac:02:0a:2e:a9:42:ed:3a:05:55:25:e3:aa:a8:56:25:e9:06:
49:02:fc:74:0d:d1:8e:b8:e5:5a:95:f1:9b:58:92:f7:c3:26:
4f:75:5a:0a:7b:8f:02:52:62:33:84:a3:e5:95:55:1f:3b:87:
7e:fe:c6:a7:e4:ea:a8:c7:82:d6:73:26:83:1f:2b:33:25:c2:
ee:36:de:0a:31:d1:ac:d7:35:92:67:32:65:aa:6b:8a:25:05:
d9:1e:6d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:53:35 2025 by rpki-client