Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e07d907-28ea-3977-981d-7548997acd42.roa
File: 2e07d907-28ea-3977-981d-7548997acd42.roa (raw, json)
Hash identifier: AfAtk4Bj5U+9Tt0T8jt2JOpVP2XJ9qpZpjxcyMQshgw=
Subject key identifier: C9:91:A6:BC:CB:80:43:00:18:79:6F:49:AE:C3:27:9F:FA:0E:1D:F0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B6ABC86384DA41B170400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e07d907-28ea-3977-981d-7548997acd42.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.62.86.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:6a:bc:86:38:4d:a4:1b:17:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=64246667-11d8-4354-940f-4343a36ae4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b1:e8:75:73:fb:4c:44:b7:d6:e2:24:d5:cd:
8b:42:84:31:4d:44:f9:56:9f:b7:bb:97:d6:d5:32:
d2:88:cc:e3:06:7c:3f:89:d2:7a:84:e1:4d:b8:0a:
c2:11:df:ca:01:97:74:a5:89:ac:9a:0c:a8:24:fb:
fa:4e:f4:2e:bc:02:8f:11:1d:57:50:19:75:57:54:
80:0e:b5:f1:63:af:f9:e2:16:e0:69:cc:d6:ec:c7:
b4:26:1a:26:85:95:46:54:db:04:d3:c6:4b:17:f8:
7c:b4:68:b8:43:d7:01:5f:64:8c:43:02:e8:7f:7b:
20:61:c7:6c:49:24:a5:cb:79:e5:83:e3:cc:fd:3f:
63:d8:48:0d:41:19:9d:e2:35:54:4e:d6:d5:ed:b4:
3f:ee:8c:f0:f4:c2:65:c1:f6:76:a3:8c:6d:bc:17:
35:88:50:80:00:a0:79:05:60:eb:f9:ff:5b:7a:e9:
10:63:61:4f:5a:4e:98:ac:73:8d:89:7d:82:92:83:
af:79:66:49:9d:14:43:41:f8:df:8e:18:30:c1:bf:
bf:9e:1f:d3:2f:6d:f5:62:22:c9:cb:82:18:40:92:
d2:db:0b:c2:39:cd:54:8e:92:da:b3:b5:bf:9b:ae:
28:28:4c:19:61:ce:33:97:a7:7b:87:22:2a:bb:09:
63:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:91:A6:BC:CB:80:43:00:18:79:6F:49:AE:C3:27:9F:FA:0E:1D:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e07d907-28ea-3977-981d-7548997acd42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.62.86.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:05:81:d8:4a:e0:48:60:d6:49:27:66:dc:ba:81:36:9f:7d:
39:cc:ed:6b:91:22:c7:0d:78:07:e8:d8:7a:bc:ff:06:77:de:
04:f3:b6:19:ab:f2:c7:36:8d:f9:3f:18:8c:0d:f9:d1:d5:f4:
76:da:9e:a9:e2:7e:af:ef:46:78:7e:9c:d7:56:56:bf:fc:b7:
3a:1d:c7:21:e7:f1:0b:0a:15:3b:b6:1d:6f:f0:cd:60:7d:07:
46:90:a2:25:0b:db:0f:7f:2f:10:c7:b2:72:40:f9:91:e3:b1:
19:35:52:50:b0:50:97:71:92:bf:41:81:76:24:68:04:c0:88:
76:76:52:78:f8:e5:d7:02:39:e5:bb:3d:b0:b0:80:4d:47:46:
98:59:50:06:b5:db:38:47:ff:04:1d:33:02:6e:ee:e1:2b:30:
99:ad:97:b3:0a:b5:5c:23:7e:23:2d:78:28:4e:d5:95:44:59:
60:57:c4:57:85:83:4b:5b:10:96:17:8c:2e:fe:bd:9a:53:9c:
db:d1:a1:f1:3d:90:c4:52:9f:c0:ee:be:1c:38:57:7d:82:83:
65:44:f0:82:6e:76:21:6e:bd:0f:a2:f2:af:87:5f:3e:cf:5f:
cc:9b:2d:76:9f:f6:bf:17:b8:f8:d5:3d:9f:2f:50:15:21:61:
60:d1:b8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:34:28 2025 by rpki-client