Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19ce7062-b312-3445-864c-6fc5ecedc107.roa
File: 19ce7062-b312-3445-864c-6fc5ecedc107.roa (raw, json)
Hash identifier: iRsQ87IZwM8K62fkGsjl/5N2g1meBzRSn+kWgnbNJak=
Subject key identifier: F0:CD:BD:23:91:FB:02:F4:05:B1:8F:24:03:D8:B3:52:70:D2:62:FC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C127FC15BB483348D323A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19ce7062-b312-3445-864c-6fc5ecedc107.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 68.44.232.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:7f:c1:5b:b4:83:34:8d:32:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=692b8665-cff4-4410-b222-1dcfa54e9708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f0:59:9c:68:d6:f4:8c:61:88:5a:81:24:7e:
61:71:0a:4f:d4:18:a8:4e:da:d4:7b:06:ef:23:f8:
5b:3a:f8:9f:3f:43:e0:9b:13:52:7f:9c:cf:f1:b1:
18:ae:ed:f9:b8:17:0d:2b:c5:35:d4:93:60:47:25:
39:2a:45:68:a2:c0:f0:5a:43:42:26:61:3d:1a:ab:
a2:21:39:37:51:f5:d9:0d:9b:3c:dd:9e:2a:84:30:
41:ab:e1:ae:94:d6:7e:b1:c3:53:f1:f7:47:bb:8f:
4c:8f:0a:9f:a9:ec:73:be:70:86:c5:9d:13:71:c1:
b5:6b:d4:ad:d1:f4:93:e4:09:8c:18:b7:c4:9f:ac:
2e:6c:ea:f4:91:af:e6:66:c1:c6:aa:bb:88:77:84:
94:36:0f:f0:82:47:18:a3:8a:8f:d5:78:a5:49:2a:
b8:b5:f4:41:2a:98:ee:40:4f:9c:6f:65:8e:41:cf:
80:6c:de:68:7f:2b:92:59:b0:af:80:9d:cc:a5:fb:
f5:dd:fa:91:ef:3f:a5:f9:85:f3:2a:f4:e1:09:3e:
c0:26:25:30:f6:ea:c8:e3:37:91:da:5d:a5:8d:11:
ce:7d:20:86:30:52:af:c1:e0:6a:6f:be:8b:6b:3e:
4f:5b:cc:c6:8e:f5:99:57:e8:44:e3:d5:77:17:d3:
52:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:CD:BD:23:91:FB:02:F4:05:B1:8F:24:03:D8:B3:52:70:D2:62:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19ce7062-b312-3445-864c-6fc5ecedc107.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.44.232.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:40:97:60:91:3a:a4:74:c7:c7:ad:ff:0c:d9:99:3a:48:79:
c7:ac:21:e3:38:f1:2a:a5:54:7f:db:34:ed:16:d9:5d:08:e4:
d5:da:a0:78:68:0a:c1:3f:88:1e:96:fc:a9:31:47:4d:9a:0b:
8f:18:c7:43:9e:b9:e2:0f:4f:d6:53:6b:61:b6:0b:eb:4b:db:
c3:37:fd:bd:14:d6:58:29:1d:78:38:0d:7a:0c:0a:93:46:9b:
98:08:e4:30:d0:93:3b:94:1f:2e:cc:36:87:27:26:1b:59:f0:
20:d7:97:e1:39:7f:33:f3:13:f0:a9:01:ea:b9:8e:45:7a:da:
2c:91:fe:be:53:be:14:db:19:b0:5b:1a:82:c9:15:98:54:0b:
ba:8e:8c:4b:c7:2f:9e:43:39:3c:cb:44:e2:8d:4b:59:05:dc:
df:eb:17:d9:5e:8d:28:0d:d7:dc:f3:62:7b:47:7c:03:42:f4:
b2:27:32:a5:62:f5:08:3d:44:2f:88:10:6f:28:7c:a2:82:2b:
28:cd:0e:8e:86:4d:cc:ec:d5:b7:49:2a:82:f7:66:d1:31:04:
81:dc:8a:bb:3b:1a:e6:31:f0:b9:ae:5f:ea:a3:23:66:24:21:
6a:3c:c0:ee:38:c0:d6:11:97:d5:8b:8f:c1:3c:f0:0c:d0:00:
d8:86:f2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:57:53 2025 by rpki-client