Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c6a4916-7913-3983-83d3-ad037ce48854.roa
File: 2c6a4916-7913-3983-83d3-ad037ce48854.roa (raw, json)
Hash identifier: 2dMfMUKiMwl3NuXpu9ok5uKzd0Ddwv7RPMj5+kHDgmM=
Subject key identifier: 31:C6:19:6B:81:5C:FD:3F:63:BE:B8:1E:F0:33:8B:4E:54:07:52:51
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F5E5DE6925BF653667090
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c6a4916-7913-3983-83d3-ad037ce48854.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.61.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:5e:5d:e6:92:5b:f6:53:66:70:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=2b842af7-e73a-487c-b9d4-c7b690df3aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d1:7e:64:41:3a:17:cf:cb:75:b2:e7:76:61:
37:b9:34:4d:03:b0:4e:8e:8b:f8:dd:bd:4d:ca:a6:
72:fa:9d:b5:bb:8c:52:91:c5:8d:86:b8:b2:6d:a1:
bf:8f:9e:7c:27:98:86:d0:ad:1f:e3:11:82:f2:9b:
b0:bf:09:e5:f0:99:9f:e9:ad:2f:1d:01:34:5e:36:
ec:85:8b:6c:b6:d5:e6:81:2c:03:e6:02:c8:0c:a5:
f1:8c:d1:f1:c8:7d:ca:86:8a:a0:91:f1:6a:54:73:
2c:3c:7c:48:d9:0c:e4:d7:d5:29:41:f5:96:a7:7d:
81:eb:3c:69:64:e8:56:df:8e:ef:78:ad:97:bf:80:
76:cc:0d:c2:d8:c1:e1:6a:24:ce:db:73:3c:d3:e9:
cb:c4:cb:28:28:44:72:84:f3:57:4f:12:07:71:1d:
5a:83:12:2f:24:1e:69:c8:bf:7c:9b:bb:d6:53:2d:
ca:95:63:31:a0:5c:dc:1d:8d:f2:b3:f1:d8:ab:e3:
a7:56:bc:4c:fc:7a:1a:d6:72:e1:3c:ab:e4:6b:46:
2b:72:33:eb:72:28:6f:32:ee:01:13:33:a8:86:a4:
d3:32:6e:9a:8d:3c:50:0a:14:ed:68:b5:38:db:d3:
f7:28:0c:66:74:bd:ae:c3:81:20:61:17:b1:8c:82:
b2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C6:19:6B:81:5C:FD:3F:63:BE:B8:1E:F0:33:8B:4E:54:07:52:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c6a4916-7913-3983-83d3-ad037ce48854.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.61.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:df:c7:c3:85:8f:26:cc:b3:42:a7:58:8d:a0:82:ac:9c:17:
d4:b1:9a:94:32:da:04:06:17:4f:4d:f5:bb:96:aa:eb:a3:ac:
35:0c:84:5c:7f:94:48:26:e9:8c:e2:87:5c:de:e6:2e:a6:e7:
88:fe:a1:e3:50:02:f2:2b:35:6d:79:96:e3:f8:5d:52:40:fb:
1d:bc:13:b9:d4:68:64:be:6f:01:3c:d8:8f:52:c9:ff:b9:d3:
9f:b8:b8:54:4b:b9:ee:14:c5:8a:77:57:23:e0:2b:4e:ad:5c:
b6:da:16:9d:ca:f0:03:36:de:70:2f:b7:e4:20:30:12:ce:85:
e0:3f:b1:d4:65:59:6e:ac:3b:6f:d6:01:47:de:81:bb:d1:fd:
60:56:2b:9e:c2:13:da:ef:e4:ff:46:df:13:b1:92:70:c2:92:
74:92:b3:c7:9d:dc:7f:34:56:78:2f:23:4d:6d:0e:64:3c:15:
2b:dd:94:f0:8d:9e:d2:a9:ec:8f:36:8a:c7:53:a2:51:c3:3e:
19:e4:d9:80:b0:b7:ab:b3:a9:b0:5b:52:e9:f8:7f:53:16:51:
fa:1e:a9:d3:e8:b7:36:80:5c:6e:fd:6d:42:0e:e2:17:81:33:
2c:cc:0f:08:cd:8d:5a:0d:f5:2a:da:e6:88:c9:df:d0:a0:cb:
c2:f4:91:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:55:47 2025 by rpki-client