Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0c45078-2fc4-3ee2-b909-c051e7dcc5be.roa
File: b0c45078-2fc4-3ee2-b909-c051e7dcc5be.roa (raw, json)
Hash identifier: QQv5YFbSprmxQnIgjJMKMfNBNtGoeDUxpPqJgkNg84s=
Subject key identifier: 30:07:7E:0B:00:F7:C3:EC:28:F7:F7:DD:2A:3F:AA:8E:B9:F8:CD:99
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B5E1EAAF083CD05D909C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0c45078-2fc4-3ee2-b909-c051e7dcc5be.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.49.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:5e:1e:aa:f0:83:cd:05:d9:09:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=07c5d98d-eefa-4342-99bd-5c44339a99f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8d:06:47:ae:ad:8c:4d:64:5b:a3:81:8b:bd:
74:fd:9e:79:18:90:bb:e4:be:58:d3:ba:eb:bd:c6:
7a:87:79:f9:9e:5e:ec:28:0c:7d:0d:d6:bf:13:c4:
bc:93:88:a0:5f:f8:3a:05:09:5f:88:f4:e5:68:f8:
ad:7c:56:61:49:6e:90:73:81:74:e4:d8:b0:b8:45:
eb:94:14:0d:62:19:ca:b2:b9:32:74:cf:bb:32:86:
9c:8e:bd:91:fd:dd:35:d8:ea:0d:32:05:33:03:f1:
2e:c1:0b:85:71:d3:47:15:3c:dd:52:7e:a5:ab:b5:
5c:ed:66:2c:c5:ba:72:22:85:61:4e:93:d7:70:bf:
6c:55:c2:70:6f:3f:5a:94:41:fa:07:2d:a1:64:64:
aa:2e:aa:66:6d:09:aa:cc:04:96:c1:68:51:67:a4:
05:d9:71:7e:e2:1c:0d:27:e8:b0:42:e1:68:b0:b5:
b2:17:bb:d7:f2:54:f3:e9:7f:a7:b5:3f:b2:fe:45:
6f:ee:a7:7e:59:b4:da:45:e1:90:89:69:3c:59:8b:
33:67:77:a9:c6:be:4a:6a:02:d3:f9:3d:4c:e7:a1:
51:01:cb:a1:98:6a:46:90:0d:15:90:f3:dc:46:57:
d2:80:35:34:05:d9:28:a0:1b:08:4b:59:07:86:50:
94:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:07:7E:0B:00:F7:C3:EC:28:F7:F7:DD:2A:3F:AA:8E:B9:F8:CD:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0c45078-2fc4-3ee2-b909-c051e7dcc5be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.49.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:76:22:56:6d:b0:3c:ba:b4:40:01:2a:d9:9e:e1:23:20:4f:
92:c2:10:a6:4e:f1:d9:6b:19:bf:73:76:a0:05:78:b5:bd:80:
d6:c5:95:54:ff:05:a1:21:e4:62:f3:6a:ef:8c:dd:41:8f:e0:
45:7e:13:02:29:d9:ae:1d:52:d3:5f:41:a1:9e:ee:f0:75:6d:
b2:b6:64:8b:01:d2:02:97:79:4d:d4:3c:14:75:76:f9:a7:9f:
9b:0c:3d:75:0a:f7:c2:b2:b1:a6:93:b8:7d:eb:8d:f0:56:cd:
38:60:33:23:3e:eb:53:a4:74:5e:eb:7a:24:0f:59:1b:7e:dd:
a7:6f:b5:8c:99:0b:f7:31:85:cb:64:e3:72:fe:b4:08:55:2d:
ce:29:92:47:53:b1:20:6a:76:3d:8d:f5:c3:d6:68:58:80:26:
75:96:71:fc:db:6c:ca:d4:94:16:d7:34:db:48:54:a9:5d:20:
66:78:52:61:af:5e:28:c9:59:9a:34:61:e6:92:88:00:28:4b:
29:7a:40:99:df:3d:5d:5b:6d:f0:f5:69:46:3c:fe:4a:56:8f:
4b:38:87:4f:77:f0:69:35:8b:6f:2a:53:68:79:e2:68:39:a6:
94:80:09:02:c2:02:58:21:81:4e:b0:b8:2f:9a:da:46:7a:58:
6d:1c:3b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:17:34 2025 by rpki-client