Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2ac94a1-32d4-3271-9f77-7c119fac8011.roa
File: b2ac94a1-32d4-3271-9f77-7c119fac8011.roa (raw, json)
Hash identifier: 2SCGEKauLtokjZU3iTUgdVeC2G4l4OL/Z1AOmFfYQ1w=
Subject key identifier: 90:F2:88:2C:5D:A5:B5:DB:C2:26:F2:C2:27:84:3D:80:18:4F:5F:74
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12859D5124EE63AC8A8840
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2ac94a1-32d4-3271-9f77-7c119fac8011.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 68.51.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:85:9d:51:24:ee:63:ac:8a:88:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=25a045cf-008c-4d2f-85b2-db28127b59f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:77:fb:e2:3d:23:48:b2:5c:59:17:27:63:02:
c9:9e:79:87:eb:04:7d:88:f2:54:4c:03:19:22:b1:
29:94:87:3d:68:b8:bd:23:0b:2e:a9:57:9e:b0:f3:
b0:54:45:2e:47:95:2d:80:f0:1a:52:03:fd:50:f4:
28:00:e4:19:51:2a:8a:03:50:af:8f:03:a5:65:b6:
66:52:15:01:1f:e1:05:d6:d6:19:ba:2a:93:b9:2d:
6a:09:eb:d0:9b:ee:14:d6:2a:64:e4:ba:7f:ec:e0:
78:7b:44:89:58:31:d5:7f:1e:f6:59:ac:5f:3d:82:
87:40:ad:29:df:2f:ed:a7:36:a5:e6:4b:ad:c6:24:
26:2f:e5:55:5f:14:1e:cb:b4:cc:b4:74:a2:9e:f5:
ee:bb:7e:b9:97:82:1f:a5:fa:f9:27:a2:37:57:69:
95:68:3a:5e:d4:c6:09:18:aa:43:19:42:fb:16:00:
f5:37:69:7f:91:80:bc:7e:3b:19:44:8b:38:e4:64:
85:0a:c0:3d:bb:78:a6:83:20:aa:d8:22:63:21:ba:
5e:52:23:33:fa:13:cd:ca:b2:10:98:79:b0:ad:00:
47:ae:09:e2:b6:1b:30:36:e8:f5:53:58:3b:5a:90:
53:10:71:82:f4:54:a9:26:03:f2:e1:1f:63:16:51:
c9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F2:88:2C:5D:A5:B5:DB:C2:26:F2:C2:27:84:3D:80:18:4F:5F:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2ac94a1-32d4-3271-9f77-7c119fac8011.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.51.60.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:c2:6a:81:17:82:94:03:a5:7e:8b:20:6a:6e:ff:d5:82:20:
b4:4b:be:e6:9f:e2:8f:5a:3e:dc:ae:2f:48:bf:b3:06:04:82:
c8:d6:a6:7d:3b:00:3c:ed:40:f7:e9:a0:10:7f:18:f1:3a:4d:
88:30:83:93:05:10:36:5d:fc:9f:77:2e:94:cc:0b:44:f8:b3:
fc:2b:de:59:2b:c2:24:df:d2:0f:4c:57:9c:9f:f3:0b:7d:7d:
5e:b9:b5:5e:23:b9:67:d2:6e:55:48:27:c2:e3:6f:89:e5:26:
ef:05:c4:2b:9f:81:a5:03:d7:c9:69:e9:36:d6:a4:f6:56:51:
84:ae:7a:87:9a:2d:96:06:ae:d6:f2:6d:9c:f5:2d:74:3c:08:
b8:a1:c2:7d:b7:4c:dc:f4:0a:c3:0b:b1:fb:b7:86:04:d9:2c:
f5:2f:c1:dd:a5:f5:41:c2:46:c9:97:3b:d5:7e:c4:23:db:ac:
f3:79:9e:cf:1b:b8:e0:7f:68:d7:02:14:f2:40:10:97:12:a1:
95:d7:5b:50:d7:28:88:37:b0:a3:11:6b:56:90:8c:30:af:48:
3d:e3:f1:7d:54:94:80:bb:34:42:86:2b:7c:34:97:1d:2f:27:
67:ee:7c:61:83:f8:f6:2a:c1:34:dd:08:d4:b4:c7:fa:35:bd:
8d:a3:5f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:12:44 2025 by rpki-client