Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2948afc9-423e-3da8-9e6e-fdeb2169027d.roa
File: 2948afc9-423e-3da8-9e6e-fdeb2169027d.roa (raw, json)
Hash identifier: 5owwbYAc8LvtgRk2x1C+f0xp56MFaIvS9vlhggYcgA0=
Subject key identifier: 35:34:72:42:D4:F5:31:1C:43:43:8B:53:65:73:D4:6E:3A:CC:2E:8E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B577B2C7260E143E40BE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2948afc9-423e-3da8-9e6e-fdeb2169027d.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.42.194.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:57:7b:2c:72:60:e1:43:e4:0b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=436e4cf7-166f-4c02-88dd-b59c52a7d26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1a:be:fa:e1:25:7d:27:df:28:94:2d:2b:6c:
84:60:51:d1:75:e7:89:63:d1:c5:fd:1e:8d:77:d1:
4a:be:59:e4:c1:30:9c:ed:d2:1d:0c:b3:9d:cf:cb:
b2:1d:c2:f2:b7:49:66:85:a2:14:01:86:bd:ba:5c:
a5:26:42:e0:25:d7:f7:bd:b8:5e:e5:95:6f:72:69:
18:ee:ef:64:fd:53:63:07:9d:3a:27:68:ce:0f:32:
32:27:5f:91:7c:19:60:89:fe:be:0a:30:bb:0a:a7:
87:b5:60:65:3c:9b:bb:8b:1f:2e:7d:59:d6:bf:e9:
f1:34:ea:5e:c2:9f:9c:c4:24:60:e9:00:3e:65:09:
7a:3c:b5:a4:f1:cf:94:20:08:06:8d:24:af:a1:1a:
47:2b:7e:19:2f:be:7c:f6:3d:35:3b:02:83:49:09:
3a:15:66:f8:41:70:de:da:9f:fa:cd:45:e0:ce:d5:
df:ef:bb:23:cf:1c:c9:e5:58:34:9b:75:11:13:be:
e7:73:39:b6:d1:ee:ef:c0:0a:2f:ab:2f:a8:17:34:
d8:f5:d3:08:35:5d:bd:1b:b3:1a:53:12:87:d5:52:
a9:cc:0e:45:4d:9b:96:7d:2d:dd:2b:c9:09:14:42:
14:01:3c:0d:8c:4d:ea:5e:a2:9f:78:f2:18:5e:e6:
82:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:34:72:42:D4:F5:31:1C:43:43:8B:53:65:73:D4:6E:3A:CC:2E:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2948afc9-423e-3da8-9e6e-fdeb2169027d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.42.194.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:da:98:a2:c4:f1:5f:c2:64:9a:c2:3a:0c:1a:7b:ba:eb:a6:
33:e2:8d:27:55:41:b9:96:1c:ba:ef:c5:5e:fc:ed:7c:67:54:
69:74:06:af:7a:51:38:74:83:b8:5d:b6:b7:ed:ad:68:fc:c8:
3c:c8:02:b4:ea:79:d8:5f:5b:a2:0e:1d:8e:dd:e2:95:ca:a2:
3b:f4:13:fd:6a:8a:42:aa:1c:cf:b8:aa:b5:90:91:66:3e:58:
9c:b8:95:1d:f3:18:8f:af:48:99:4d:a5:f7:53:5f:d7:b0:5c:
16:99:9c:9b:85:4c:91:99:1c:39:90:40:d5:93:82:04:6e:11:
8c:6c:8e:d3:4f:22:a4:b7:eb:1b:26:af:60:a9:ce:63:33:cb:
41:7d:64:57:c2:f6:4f:09:6b:9c:bc:2d:22:55:7a:42:e1:41:
60:6b:10:d8:26:5b:5a:aa:9f:25:da:64:8a:f3:2d:16:b5:ce:
cc:e7:00:ae:a4:18:33:a1:78:88:4e:6b:bf:ca:8f:90:07:55:
f5:1a:3e:a0:8b:06:61:33:36:76:6f:02:25:d6:08:2f:d5:72:
f0:b4:b3:37:eb:be:e5:f8:ff:66:2c:b5:aa:fe:8f:49:30:41:
c0:5d:23:2c:31:1c:3d:b6:81:2d:96:f1:fb:8d:a8:6e:48:bf:
3d:80:2b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:57:40 2025 by rpki-client