Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/135947e6-0aae-31fd-a40f-5df12f276e30.roa
File: 135947e6-0aae-31fd-a40f-5df12f276e30.roa (raw, json)
Hash identifier: jaUXP6SQ6Xdf0qSE2cR+ifTUuPpRAtwVR8f0zEHUOlg=
Subject key identifier: 90:42:04:18:9A:64:CB:6D:F1:B6:D6:45:5A:F0:03:C8:AC:8E:31:C2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10DE894EF81B441F6BBEE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/135947e6-0aae-31fd-a40f-5df12f276e30.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 68.39.64.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:de:89:4e:f8:1b:44:1f:6b:be:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=32450488-f471-4ab7-bfd2-9e05b6017889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2d:98:38:37:5b:6c:74:38:3c:8b:fa:90:99:
7d:d1:97:66:d3:22:01:14:49:9f:1a:fd:d8:59:bf:
40:6f:60:fa:df:f6:10:d6:df:90:c7:be:26:d8:c4:
c1:1f:01:ad:90:58:4c:3d:10:82:b4:db:38:db:bd:
bf:96:5a:5f:85:ca:f6:84:34:78:90:bd:75:4a:34:
a3:b2:26:ac:fc:70:08:12:a5:39:13:52:ef:0a:aa:
1a:31:7c:60:a7:aa:c7:cf:4c:3e:fa:14:d3:3c:f8:
72:b3:39:02:ed:ca:8f:91:16:f8:82:86:1a:7b:65:
1d:8d:96:24:67:50:a0:f2:91:b1:72:0d:99:3a:37:
91:c4:01:df:c1:51:ed:6b:d8:55:e1:6e:ca:a2:5f:
b2:a2:5a:de:b1:2d:09:b6:2e:c9:f8:25:b7:1d:c2:
e9:23:e6:96:d0:a0:ff:7a:15:7b:17:73:c0:4a:16:
06:8d:bd:bf:20:17:08:4f:52:c3:7d:3b:06:95:39:
07:0d:24:68:c0:5b:8c:53:c0:37:1f:de:bc:60:f4:
60:10:22:8d:4c:19:df:21:ef:8f:13:8d:35:6c:f7:
29:bd:82:81:8c:bc:cd:18:a6:89:2f:02:54:b7:66:
9d:5b:fa:31:1c:32:a4:c4:f7:cf:6f:64:62:c4:4d:
fa:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:42:04:18:9A:64:CB:6D:F1:B6:D6:45:5A:F0:03:C8:AC:8E:31:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/135947e6-0aae-31fd-a40f-5df12f276e30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.39.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:8c:5d:b6:f6:58:71:de:ff:ba:92:2d:38:1f:53:8a:dd:36:
1d:ea:79:44:78:e3:03:dc:7d:e4:48:e4:e4:19:64:b7:af:85:
f4:93:3e:dc:70:0c:3d:a8:1c:f9:d6:21:7f:b1:c4:c0:37:0f:
78:71:c4:42:03:b9:39:8b:77:e3:e3:d6:03:e9:8d:2c:db:e9:
f3:cf:68:48:6c:b4:d8:ac:87:e3:81:d5:d5:9c:71:a9:f6:96:
23:56:b6:79:09:bb:80:f2:62:ca:b7:ed:9c:c4:ca:be:2f:8d:
53:91:3d:e2:7e:dd:c1:e5:de:00:8f:0f:20:8b:82:78:f9:19:
f2:5c:96:2d:5f:9a:a8:90:ab:7f:a1:12:b9:bc:1c:74:7d:ae:
6c:57:65:51:88:91:2b:a0:37:77:84:2c:51:b0:30:15:03:e5:
75:20:bd:d5:01:a3:c4:20:3c:72:63:2b:9e:2a:99:06:75:ff:
09:5f:a5:bb:2a:d7:40:93:86:b3:84:1e:a1:0b:d6:c3:8a:f5:
89:7a:c0:e4:b6:0c:9e:46:4f:9e:1f:bd:49:12:7d:8e:39:95:
88:54:73:01:d4:ed:7a:d2:f4:60:b0:33:23:03:9b:0a:6f:eb:
6b:ae:64:65:44:d8:10:67:c0:7a:a2:1a:c1:f1:19:f7:4e:8d:
12:39:72:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:07:57 2025 by rpki-client