Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd5e36f6-35a8-3db2-bc5a-b17b32a82c78.roa
File: cd5e36f6-35a8-3db2-bc5a-b17b32a82c78.roa (raw, json)
Hash identifier: u2VNF1VPs+SVFcD7a5RaFcR9XMA0cj1glwf9mHHzKzw=
Subject key identifier: 24:50:FC:50:27:DA:D9:00:96:D1:69:1C:1B:44:FA:31:31:D0:8B:C6
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F4D599F0538A9831EB980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd5e36f6-35a8-3db2-bc5a-b17b32a82c78.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.51.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:4d:59:9f:05:38:a9:83:1e:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=7358cbcd-86c7-4124-9218-6dccc51763f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d2:12:ad:70:0b:e9:92:48:a2:6e:56:c5:03:
b2:20:a8:f2:4f:25:27:50:d6:cb:df:7f:ed:81:ee:
74:85:96:31:c3:01:7a:4a:e5:e0:a0:58:68:88:d3:
9d:77:d7:86:56:3f:a7:21:67:af:31:28:cb:47:f8:
37:e3:af:dc:10:cd:2d:28:fb:72:0a:d3:90:09:33:
8b:99:e2:c0:4f:cd:c9:f7:52:b8:03:9a:0f:e5:66:
83:88:86:2c:73:be:19:f4:b5:39:ec:2e:e6:75:28:
06:48:aa:b4:93:64:e4:34:c9:1b:d3:f5:63:ca:68:
f5:f0:95:9a:e1:93:73:75:9d:91:4b:66:66:ec:8b:
2c:32:e1:68:fc:4a:1d:74:57:92:1c:c6:92:45:0d:
dd:3c:56:d2:37:fd:40:44:b9:67:a7:3f:1e:d6:84:
2f:6a:e0:ce:ef:47:56:52:41:75:4a:49:6f:e5:36:
e7:9b:07:79:11:58:a3:b5:f2:95:42:02:aa:e4:46:
b0:fc:4d:25:61:e5:c5:c8:f8:f6:fe:a0:71:d7:a1:
48:59:cf:2e:9c:71:a8:24:37:94:04:8f:9b:0f:e0:
fa:20:bc:6f:03:55:80:86:4e:41:61:ef:eb:06:50:
34:5c:78:66:64:9e:2a:24:fe:3e:9d:e0:cd:82:67:
6a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:50:FC:50:27:DA:D9:00:96:D1:69:1C:1B:44:FA:31:31:D0:8B:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd5e36f6-35a8-3db2-bc5a-b17b32a82c78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.51.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:d6:52:b4:ee:c3:cf:f8:db:81:b1:c4:68:91:bf:f9:a9:7c:
a8:d5:50:16:90:dd:98:2b:5c:9a:e1:46:08:9c:f3:84:87:d4:
e9:f0:9d:34:6e:ce:a4:7c:d3:d4:11:1a:bb:71:e5:2d:46:75:
d3:68:9b:a8:8a:61:45:a1:6e:39:9f:40:4d:c1:97:4b:04:34:
54:23:19:01:63:bd:35:d0:ef:b6:7d:d3:ff:25:31:66:1e:12:
d6:c3:ac:97:2e:b5:7b:2f:e3:21:75:10:55:09:24:e4:eb:26:
93:fd:38:0b:80:ca:7a:5f:7b:ab:57:b3:99:f5:c5:a5:56:f9:
e7:e1:3a:33:20:61:39:e3:4c:62:31:f6:61:ae:eb:9d:d1:b4:
a6:a0:2a:0f:c5:09:bd:e1:1c:08:e5:a8:de:59:0e:c5:ed:67:
f2:a4:da:36:79:57:55:34:f5:59:86:3c:61:20:84:42:c8:7b:
ef:63:44:8b:d1:15:ce:5c:80:0c:be:54:01:a4:0d:52:f1:9f:
d7:5e:f5:e7:3b:e3:a4:53:f1:87:51:d4:b1:41:bc:58:ba:0f:
f0:f5:87:d5:84:bd:e4:8e:be:a4:10:2e:23:07:6e:ae:9c:68:
99:2f:9b:2c:24:87:8f:75:01:e6:df:75:9e:61:12:2e:43:50:
fd:a5:23:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:14:26 2025 by rpki-client