Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e337463-0458-3203-ae5d-07977272f705.roa
File: 4e337463-0458-3203-ae5d-07977272f705.roa (raw, json)
Hash identifier: 3flK8VxF+FjSQbeBGDem4KxXfDWvCQgP2H0+VqaOmSg=
Subject key identifier: 7A:4C:20:2D:F1:5B:5B:67:BC:7D:CF:5C:33:D9:73:D5:77:5E:E2:58
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328576D51CC73C042CFC172D2CD7D1E
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e337463-0458-3203-ae5d-07977272f705.roa
Signing time: Sat 20 Jun 2020 17:36:21 +0000
ROA not before: Sat 20 Jun 2020 04:00:00 +0000
ROA not after: Wed 20 Mar 2030 04:00:00 +0000
asID: 8068
IP address blocks: 65.54.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:d2:cd:7d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Jun 20 04:00:00 2020 GMT
Not After : Mar 20 04:00:00 2030 GMT
Subject: CN=4ffaed27-0cb2-475a-a46a-1631a9de1023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f7:45:18:99:cb:6b:3e:d1:73:2e:fc:f2:6c:
a1:10:a2:31:04:c2:e1:d5:a5:1f:a6:28:e7:20:03:
2f:f3:d6:d3:b6:a8:14:0e:0c:88:f4:5d:87:79:8e:
ec:c3:52:45:43:df:bb:34:bb:c4:f0:f9:79:12:04:
5d:8c:25:fa:46:e6:19:5f:22:fd:71:9a:cc:4b:ee:
f1:81:c2:af:b0:f1:3c:a8:5d:29:4c:ab:7e:e9:de:
85:d9:03:cc:94:91:1c:d3:b9:51:79:ac:4e:07:1f:
0d:82:4f:a1:fe:d8:8e:06:ee:b3:cd:d8:67:08:b1:
5a:3e:52:04:eb:f6:1e:cb:20:ba:4f:91:2f:90:ee:
52:01:a9:85:f9:b7:f2:4b:77:6a:f0:50:72:6c:2d:
d3:09:36:78:87:5f:60:ed:a0:30:e6:c0:e6:56:b3:
c0:5c:10:43:f9:84:bd:99:94:2e:75:34:bc:b9:ca:
b2:e5:17:0c:45:1e:cb:ac:de:67:94:e9:c3:0c:2e:
cf:56:a3:78:81:09:e2:00:38:6b:32:79:6c:16:7e:
44:26:21:04:b4:c5:83:91:06:f7:32:f7:69:c4:71:
ad:cf:c1:a0:0a:85:1d:26:4f:70:5f:ec:53:23:a6:
e4:07:17:52:67:2c:61:c7:3c:24:af:5e:e7:6c:e6:
50:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4C:20:2D:F1:5B:5B:67:BC:7D:CF:5C:33:D9:73:D5:77:5E:E2:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4e337463-0458-3203-ae5d-07977272f705.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
65.54.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:ba:16:a6:ee:28:62:20:35:98:ba:d5:90:a2:80:b2:d0:26:
a7:67:7a:e7:18:71:c4:18:6a:8e:3f:c7:df:d4:58:bf:41:ea:
51:6e:d1:4f:c5:f6:6a:01:f2:ad:8e:95:d1:ac:f5:3c:0b:a5:
23:19:9c:79:2a:fc:bc:99:99:d1:42:9a:ac:12:bc:38:24:e1:
78:2b:6e:6b:88:cf:43:2b:12:e7:a2:8b:83:c1:2f:f5:e4:f5:
3b:f1:85:b7:24:2f:0f:84:6d:57:e6:1b:5f:6e:54:c5:7f:8b:
45:20:ce:f6:52:23:56:82:b8:47:85:a6:e9:ba:b4:60:9b:dc:
0e:ab:d2:15:8e:51:59:b7:a4:44:9c:10:d5:1a:f6:b4:af:df:
d3:9a:ef:03:7f:ae:9f:be:3c:48:a6:34:3b:ab:41:c3:de:f0:
59:23:fd:6c:e4:1f:71:0c:04:05:fc:4c:bd:ac:c0:e2:a5:31:
3e:04:78:35:56:ab:38:02:71:b2:1e:cd:eb:3d:bc:ed:4b:6c:
db:eb:76:3b:e8:84:57:45:fc:d9:3f:32:eb:5f:41:97:4f:38:
aa:b4:35:14:b8:f1:61:ae:2a:c1:59:93:9d:60:c0:a4:92:80:
b5:e9:76:14:95:60:0e:3a:73:a5:8f:12:64:d5:90:31:2b:63:
06:ca:d5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:56:13 2025 by rpki-client