Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/143abf01-312c-3f4b-950e-de7460161c4e.roa
File: 143abf01-312c-3f4b-950e-de7460161c4e.roa (raw, json)
Hash identifier: 7VVN4iYDol7bCaKb7Y1HGodqY4oHCUjQm5u789NPHx0=
Subject key identifier: B6:12:E0:57:6B:F2:3F:4F:2E:C5:2A:4B:58:E3:4F:84:FD:B5:D9:6B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F15BBE08745C675C1A980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/143abf01-312c-3f4b-950e-de7460161c4e.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.32.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:15:bb:e0:87:45:c6:75:c1:a9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=cbb37ab2-e8d1-48ea-b851-4ac0186d9f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cf:ed:d7:2a:3d:55:c5:11:98:86:d3:52:03:
08:74:3c:26:8c:97:b0:71:0b:66:cf:c6:81:72:35:
cf:f4:a5:91:48:20:ae:2e:d4:13:81:3d:fe:eb:f5:
f3:11:89:1a:fa:7d:f2:d2:81:00:8c:43:84:b7:19:
a7:63:d3:26:cd:11:7a:53:5c:77:78:9a:66:49:a5:
90:5e:c5:fc:82:0c:cf:f9:4a:c6:61:6e:ae:18:2d:
b7:c2:96:35:42:2b:e4:f2:02:04:53:7d:74:af:01:
c1:b7:9d:cc:49:ac:95:03:d5:cd:af:cc:ed:18:4d:
70:19:70:3e:6f:81:e0:d9:15:a7:be:b3:73:80:9f:
5e:6a:2a:4f:f3:d4:43:bf:31:73:dc:04:79:74:f6:
7b:b8:96:f7:9a:6b:b9:61:0b:dd:11:73:a2:2e:bf:
6c:e4:d0:b9:2e:b0:e9:3a:f4:73:8b:24:8e:84:ea:
81:43:28:7e:87:cf:3f:f4:5b:63:54:88:6d:06:48:
fe:ec:c0:aa:86:72:5d:42:4b:12:82:79:43:3e:95:
2d:b1:29:9c:c5:b0:3d:d0:95:a2:a9:f1:9e:c1:ff:
d8:c0:c4:53:2f:a9:92:f8:7d:66:8f:df:ab:e1:38:
80:1c:25:c8:ed:c8:85:ab:d8:7e:86:40:a2:8a:63:
5a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:12:E0:57:6B:F2:3F:4F:2E:C5:2A:4B:58:E3:4F:84:FD:B5:D9:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/143abf01-312c-3f4b-950e-de7460161c4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.32.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:7d:43:d3:bd:d2:ae:23:b1:17:a9:3a:78:ad:53:42:be:dd:
c3:2b:69:a7:6d:71:9a:67:d8:7d:46:c6:88:b3:f7:4d:a6:cb:
44:48:35:82:81:62:65:3d:74:af:46:06:c2:66:ad:0e:de:ec:
05:83:2b:b0:ac:e0:8a:b9:dc:5e:96:b7:c8:07:03:15:35:2c:
bf:63:df:c8:a5:c1:1d:54:83:11:a2:1a:d8:7e:58:5d:cf:f4:
70:7d:b2:fc:ff:34:9e:ce:db:74:de:36:22:76:b0:69:9d:8c:
23:b8:89:38:d2:32:d6:e4:bd:e8:a0:b0:d9:78:f8:de:1d:f1:
5f:0f:31:26:09:d9:ad:61:8e:33:5f:f3:76:6c:77:b7:f1:e8:
aa:24:ae:77:42:ba:8c:14:62:44:2c:e5:ae:5e:4b:6f:bb:13:
b7:c7:da:5a:a3:72:11:f2:7a:76:37:88:c8:99:be:b6:48:76:
f6:ac:0e:40:11:12:20:ca:9e:83:68:40:26:15:67:d2:ff:1d:
fd:2c:98:1c:64:4e:e6:a8:ee:68:eb:33:aa:56:9e:b2:df:78:
73:2d:b2:30:4e:c1:1a:a8:ab:bf:e1:35:23:7d:74:91:6b:c3:
36:6b:53:bc:c1:7a:b3:a6:83:76:2e:9e:82:67:b9:fa:b7:a1:
61:17:9b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:53:21 2025 by rpki-client