Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ebc30010-ff2b-32d6-96a6-7bd61d0b56a2.roa
File: ebc30010-ff2b-32d6-96a6-7bd61d0b56a2.roa (raw, json)
Hash identifier: JNEPAfsta9dP+ljjAgIsad2OOq1S2/uQGWm3E0A4sRo=
Subject key identifier: BF:5B:4E:68:36:59:FE:2F:B1:91:9C:1B:75:36:75:92:01:06:87:EB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F484F6C51145570550680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ebc30010-ff2b-32d6-96a6-7bd61d0b56a2.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.48.86.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:48:4f:6c:51:14:55:70:55:06:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=928a259b-3fae-42af-8f44-f351ebf6d9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9a:30:c4:3a:4a:7c:f3:99:67:1d:f1:fa:d4:
0d:97:eb:7a:96:a3:da:a4:38:42:b5:fc:55:87:bd:
4a:ed:b2:16:2d:12:e9:c6:23:da:3b:72:b8:31:3d:
e9:77:ae:c6:04:05:f8:53:55:f2:90:2b:1a:f2:27:
06:d9:72:31:cc:71:28:3b:5a:51:18:7a:38:94:af:
ab:43:a7:27:3f:d2:46:1f:1d:7b:02:7a:4e:3f:24:
2a:56:75:6a:16:b0:18:5b:e7:a8:c2:33:c8:39:b0:
af:c8:c6:15:91:bf:db:1d:d5:c4:cd:f8:0e:7d:61:
99:68:a0:3c:be:30:32:e6:df:ca:a9:d2:23:ca:cd:
68:c5:f5:62:6f:c9:1a:8c:62:89:2b:ea:52:a1:07:
4c:95:20:2e:83:5d:cb:9f:9c:42:07:aa:74:00:51:
0f:aa:20:76:20:ba:48:77:1c:30:fc:46:e0:da:bf:
d3:3b:a1:9f:99:27:cf:f1:e9:f6:ad:b8:08:4c:78:
5c:c0:f5:76:a3:aa:40:9b:47:d4:93:d8:14:0b:80:
80:2d:f7:fd:13:4d:9b:2a:34:37:0e:66:db:25:7e:
04:3f:1d:24:c8:a8:75:32:31:bc:92:cd:a1:82:da:
b5:26:d4:28:08:85:56:e5:53:35:a2:f0:70:26:1f:
ef:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5B:4E:68:36:59:FE:2F:B1:91:9C:1B:75:36:75:92:01:06:87:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ebc30010-ff2b-32d6-96a6-7bd61d0b56a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.48.86.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:8e:78:21:ae:24:72:d7:cf:82:48:45:50:95:7a:ed:15:cc:
5f:f3:df:4b:71:c1:5f:02:25:e6:bd:05:d0:5d:f9:f8:97:75:
e6:f4:18:e6:b3:34:b3:61:94:67:d7:ff:20:aa:2b:1a:e0:b8:
71:04:a8:f3:ab:79:ad:5f:e9:ee:af:80:92:5b:b0:be:88:40:
9a:f8:72:1e:04:c2:e7:40:1a:11:79:8f:11:6d:24:16:b2:57:
e1:13:f6:bb:f4:b5:98:a2:21:d1:f3:12:d4:27:75:e3:d7:17:
62:d2:66:b3:22:ec:3d:7e:34:04:7b:58:00:c5:10:c9:cc:e8:
34:ef:69:be:cb:18:85:55:1a:df:df:c6:77:38:ef:69:a6:16:
ce:6f:ff:25:05:ea:86:a6:61:50:a1:22:ec:27:ec:c4:f2:df:
1f:9c:1f:e2:75:0d:82:ff:ba:86:8c:b4:38:46:7a:b5:8c:ce:
3f:e0:e0:af:e4:1b:16:dc:b3:47:53:eb:df:92:02:3f:4b:18:
fc:ba:85:4d:2b:6c:f3:27:c1:7e:7c:71:6d:57:09:e9:98:27:
b2:65:76:d8:f1:07:71:c3:02:21:16:fc:7c:ee:1e:28:18:71:
f8:b7:70:9c:0f:cb:d6:2a:3e:1d:9b:3a:95:fb:08:13:82:97:
83:9d:96:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:38:57 2025 by rpki-client