Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2936082-ff7f-3c2f-b63b-c648c6fe5f22.roa
File: a2936082-ff7f-3c2f-b63b-c648c6fe5f22.roa (raw, json)
Hash identifier: Jj1tuR0TJ8aKlPxAC01CTEsIyhQiXQynFhx3xdEC2dE=
Subject key identifier: 85:6D:FB:A5:5C:A2:B9:B4:3D:B5:D8:C4:9A:4B:EE:B4:CE:D9:14:3F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848B1F64FC5F0D148A7C5FE2F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2936082-ff7f-3c2f-b63b-c648c6fe5f22.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 7922
IP address blocks: 68.87.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:4f:c5:f0:d1:48:a7:c5:fe:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=60931f86-5d6d-4303-b26f-561289d8cea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8c:77:12:38:f6:29:1e:6b:2e:67:b0:a5:26:
5b:7f:64:f6:ed:81:b1:4b:51:dc:bc:ed:7f:cb:10:
fd:f8:d0:50:12:e4:bd:5b:82:77:33:cc:12:42:62:
4b:df:fc:a5:44:c4:12:35:eb:6b:53:32:2d:e2:9e:
50:2c:16:e0:07:b5:05:6c:cb:6d:c1:58:59:98:59:
4d:b3:91:1c:ab:95:f4:0a:55:2b:5f:2f:f5:b0:90:
50:e5:b9:f5:3d:58:8c:1c:5b:70:88:68:3f:8d:ea:
a3:93:f4:44:a6:a8:8c:58:53:b3:29:5d:36:0b:28:
64:98:14:f8:7e:11:7a:75:9a:17:33:ea:ef:da:8e:
73:e5:17:6a:28:e4:06:59:5a:b1:03:2c:ce:e7:b3:
ee:38:c7:39:19:08:8d:fd:5f:ef:1b:af:b3:b2:85:
4c:d8:66:c6:0d:a3:76:dd:1c:75:69:17:59:58:ee:
0b:cc:85:bd:e9:c8:52:40:66:ad:fc:ad:e9:df:1f:
66:0c:75:1b:25:51:12:c5:eb:eb:da:dc:a8:80:29:
61:43:ba:95:7d:62:48:e9:cf:dd:1d:0d:e1:66:5c:
9e:3e:9a:75:a9:47:36:a9:17:52:63:3b:f8:a5:d0:
13:f6:2c:b8:76:9f:f3:ef:1e:b4:1b:7b:a8:b3:df:
20:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6D:FB:A5:5C:A2:B9:B4:3D:B5:D8:C4:9A:4B:EE:B4:CE:D9:14:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2936082-ff7f-3c2f-b63b-c648c6fe5f22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.87.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
da:d4:d5:f4:c6:93:e1:1b:73:6a:c5:b3:9f:f0:07:d6:c7:ca:
be:3a:4e:b5:83:49:fd:3f:4e:ac:19:a3:64:39:d0:bb:61:a3:
65:ea:ec:bf:72:c8:8d:67:0f:35:f9:e4:df:9a:2c:91:88:65:
75:c3:d1:0c:9a:01:01:8e:41:08:d7:0e:84:8d:35:6d:74:48:
29:6e:0e:18:20:5f:23:82:d6:6f:39:68:08:ca:6e:d6:c1:51:
bc:eb:e1:e9:da:a6:b9:5a:a9:b0:37:e5:87:94:cb:ab:ce:ed:
c4:5b:39:35:c2:d7:d1:e9:b8:2c:a9:10:0e:6a:58:3b:f5:f0:
da:03:39:7d:bc:7b:67:ad:51:7d:52:b7:78:54:b8:7f:2a:06:
ec:74:69:8b:3c:5c:72:56:fa:15:90:a3:63:65:be:85:af:7a:
1a:3e:48:c2:36:31:a9:8b:b2:b7:9a:53:c2:72:18:68:8e:4a:
0d:c5:ba:d7:4d:37:b8:2e:6e:21:e2:fc:d0:01:e3:53:ae:02:
b6:81:2a:5c:69:ae:1d:35:c0:bb:a6:8e:1e:8f:93:73:28:68:
74:b7:e0:cb:51:e3:1c:dc:5a:62:3f:b9:a6:72:ff:e2:7a:c4:
aa:ab:68:39:41:c4:0f:74:cf:2b:77:46:cf:d4:b6:b2:52:ef:
b0:e2:43:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:50:50 2025 by rpki-client