Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f884cf6-ef3a-3a48-af9c-fdf11e9e3198.roa
File: 0f884cf6-ef3a-3a48-af9c-fdf11e9e3198.roa (raw, json)
Hash identifier: 824HM892/Aibf/FZun02UKRS53CkI64vdYdYH9Uq4Zw=
Subject key identifier: 11:10:E9:FC:20:82:F5:5F:41:69:FA:1C:F2:64:19:F5:CF:FF:AD:F8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C127DC2262B23F1753D0680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f884cf6-ef3a-3a48-af9c-fdf11e9e3198.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 68.39.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:7d:c2:26:2b:23:f1:75:3d:06:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=6b9e1506-dd7d-46b6-98ba-1b1d384943d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:d4:85:a8:4b:d3:b9:9e:ce:7a:64:69:e1:
42:c9:d9:7f:a7:a0:5c:ca:33:a7:b8:12:b5:36:52:
f2:fa:8d:0c:9a:aa:fd:e7:6e:0c:cb:dc:7a:a9:8c:
8b:cc:0f:14:23:68:ad:6e:4e:0b:4d:1e:be:bb:ab:
82:f5:b4:de:01:58:42:65:58:c7:66:45:3e:c4:a6:
43:ba:22:51:04:b4:57:9e:7d:46:3f:03:59:13:86:
43:a2:cc:19:45:da:d4:d9:fa:98:45:89:9a:f0:d2:
3a:eb:03:e8:da:65:a1:44:ae:09:a0:ad:f9:d3:5e:
5f:ca:5f:27:35:15:88:4f:1e:58:78:c2:c4:e1:bf:
ad:17:8e:90:20:ef:7f:4f:18:9c:3c:32:6d:13:b4:
5e:e8:fd:a7:47:5a:5e:12:a3:c3:87:08:2b:96:02:
cf:12:86:32:dd:36:8f:db:dc:af:2d:e9:6b:4b:f9:
44:16:1f:2f:c1:8d:ec:ed:0b:3d:62:68:09:34:ac:
71:3d:35:c1:b7:64:61:85:99:ac:5c:7b:58:e2:c2:
87:2c:09:7c:f2:3c:6f:da:af:d3:6b:c1:aa:95:05:
50:9b:bf:37:f6:5f:7d:34:18:36:7e:05:61:ad:a2:
5c:dc:3d:a8:0a:6a:4b:cf:7d:21:af:d7:2a:70:5e:
98:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:10:E9:FC:20:82:F5:5F:41:69:FA:1C:F2:64:19:F5:CF:FF:AD:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f884cf6-ef3a-3a48-af9c-fdf11e9e3198.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.39.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:d9:af:03:f0:d0:1f:19:d9:2c:aa:f5:55:02:87:65:ea:1f:
9f:66:a8:90:b8:fb:d8:26:28:3c:33:2b:91:4c:14:5d:e3:7e:
1a:a7:a0:28:fa:c5:56:d2:23:55:cf:6b:6f:b2:15:17:f2:90:
23:ce:5b:0e:b1:80:27:9b:5b:a7:79:27:0c:4d:69:ae:a4:91:
db:71:1a:1a:e1:61:54:54:c2:0d:cb:0e:5c:ef:6b:8b:1e:a8:
ef:97:cf:b6:e9:b2:a1:b2:06:1a:a6:f7:5a:57:30:f7:5f:c3:
de:a9:4f:91:60:11:8e:67:a5:5f:62:e9:30:be:d2:9e:c2:d8:
58:e9:b7:3f:ff:55:3d:d0:c8:c4:4c:30:90:ed:7b:b9:4e:4e:
18:e8:df:ad:b8:4a:f4:f6:92:3a:6e:e5:1c:2b:e5:83:ad:33:
77:48:36:e2:2e:4a:02:cf:53:1c:ed:09:96:53:65:09:42:6b:
19:cb:20:a8:6d:4b:fa:9d:25:27:a2:6b:50:53:a3:39:83:d7:
24:28:be:fb:47:e3:f4:22:c6:ae:16:97:1d:6f:35:22:9e:03:
6a:a7:f2:f9:24:26:b5:f6:ba:8a:40:0a:c2:8f:a9:70:ea:bc:
4e:78:b6:57:bc:96:5c:25:22:fc:fa:58:f0:94:a0:20:93:3f:
af:c9:40:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:53:01 2025 by rpki-client