Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca49163f-85a9-39c7-84b0-4ec07d090282.roa
File: ca49163f-85a9-39c7-84b0-4ec07d090282.roa (raw, json)
Hash identifier: oTLc3PsChu5QG0rfxEB8gWQhA/MueM7EBV7Pxy2T1BU=
Subject key identifier: 0C:0D:D7:C9:7D:9B:8B:B8:9B:AD:C0:8B:42:9F:DD:D3:04:A9:C4:0D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10E8489CCD6375D351E2C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca49163f-85a9-39c7-84b0-4ec07d090282.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 68.51.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:e8:48:9c:cd:63:75:d3:51:e2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=b200c8fd-9468-473d-ac70-5e99bdddd32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4a:1a:4a:0b:18:34:8a:33:39:c1:26:08:6b:
a3:9c:72:91:89:ac:51:5a:f2:77:be:62:e3:cc:a9:
9f:c1:fc:be:92:de:f0:84:fd:0d:e3:a5:0f:3c:2e:
92:33:c4:27:db:e6:34:d9:74:26:9d:28:41:13:5b:
fa:cf:cb:6f:60:aa:60:e4:64:56:9f:4f:c6:98:19:
9b:fb:e7:a9:6a:8b:df:08:b7:19:b1:2a:2c:f2:68:
9d:22:12:aa:90:ff:54:05:35:c8:4b:b6:dd:20:0b:
c7:b1:a2:4a:28:14:39:86:4e:7b:27:6b:3e:ed:2a:
89:6f:10:86:cb:52:7b:cb:6c:b3:1c:db:e8:c5:75:
33:05:99:fd:f6:7d:2f:d8:17:21:7f:0d:14:89:6f:
50:d8:d1:38:c3:46:53:32:83:3d:88:04:ee:64:da:
bb:d5:f2:54:09:2f:e7:82:1e:81:17:21:2d:f2:80:
a0:c9:0f:24:88:3d:41:ba:db:7a:7a:e9:0b:bd:77:
00:9b:b4:f4:6f:0a:8a:d3:b1:a1:74:39:c0:56:03:
43:42:46:32:04:1b:05:de:ab:63:77:37:21:e3:1c:
37:8c:e7:85:07:32:76:b5:95:53:e3:dd:d3:a1:79:
b8:35:af:47:8d:7c:64:19:32:b2:80:5b:c9:bf:1d:
d9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0D:D7:C9:7D:9B:8B:B8:9B:AD:C0:8B:42:9F:DD:D3:04:A9:C4:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca49163f-85a9-39c7-84b0-4ec07d090282.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.51.37.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:dc:1f:2e:55:11:20:6d:2f:32:22:81:a4:e7:94:45:79:68:
3e:96:ae:64:66:78:17:25:52:eb:a2:3c:85:f4:3f:de:59:84:
10:1c:8d:a1:7f:c8:f2:c2:b3:b5:0f:fe:8a:f4:8b:ee:5d:45:
08:28:1c:05:b6:66:03:08:3b:47:3e:f6:04:ac:c3:12:81:4c:
9c:77:a2:40:e5:9d:3d:fd:2a:7f:9a:58:cd:1d:f5:97:90:98:
b9:85:99:ad:1d:fd:fa:ad:3f:ed:ae:f1:25:c9:90:9c:3e:a5:
21:c1:bc:0d:6d:33:02:17:fc:b5:f1:db:b1:48:10:c0:e0:0d:
3d:39:fc:5d:f9:19:5b:6d:8f:d0:09:83:1a:89:4d:e1:50:c9:
ac:19:ef:c8:d6:2f:6c:cb:de:9a:02:6d:bd:b9:5a:ce:e3:fb:
ff:8c:25:35:df:dd:ef:d2:eb:9b:24:d1:7d:a7:50:af:d3:8a:
15:da:56:dc:5f:bd:75:d6:6b:d7:8e:e2:d7:b9:42:68:90:19:
1f:dd:86:7f:9d:40:58:5e:ad:7f:e6:ed:04:7c:6c:cf:8c:1d:
8d:bb:ab:13:71:de:2d:98:25:f3:3f:bf:e4:7d:f3:39:df:f9:
6c:f3:9b:87:9a:54:89:2f:8d:f1:fc:8b:d4:48:74:6b:fe:32:
c5:5d:98:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:05:33 2025 by rpki-client