Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3016c970-524c-3bd3-adb6-001fe3e57859.roa
File: 3016c970-524c-3bd3-adb6-001fe3e57859.roa (raw, json)
Hash identifier: 6tiouOfpq0+f0CmxhA4LZOLIRqlPmF1EYN3Eib/VlLs=
Subject key identifier: 87:AE:4B:BB:E2:25:63:BE:83:64:62:FE:9E:2A:F4:32:AB:11:DA:06
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B56603672BD4B11115080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3016c970-524c-3bd3-adb6-001fe3e57859.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.42.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:56:60:36:72:bd:4b:11:11:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=18002f4c-5636-483d-af41-9b4d3b10728f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8a:2b:2e:b0:3d:e1:84:b8:db:8a:9c:de:81:
f7:9b:77:db:f9:5f:96:b8:13:e0:6c:3d:88:62:53:
6e:88:3b:e0:9d:41:33:0b:2e:5a:4f:c3:64:28:52:
6d:7f:ad:4d:ac:96:35:4b:74:07:96:1d:10:64:72:
2d:a5:dc:a8:2a:ff:52:4f:67:a3:74:a0:c4:47:ff:
df:44:46:24:73:d7:58:3b:96:ee:87:db:29:1a:a6:
f5:58:d5:9f:97:4a:98:3c:b1:5d:1a:c2:f7:33:14:
b0:86:49:bf:fd:6f:cd:72:02:d0:81:a8:ae:77:b4:
1c:09:7d:32:30:e4:05:0f:b5:fc:b0:dc:79:c1:df:
84:9f:d4:83:dc:aa:58:8b:41:5a:3e:dc:6a:8a:b9:
ab:5c:81:50:8a:c0:1e:6b:eb:7e:6e:00:b4:ac:26:
6f:58:31:15:e4:73:d3:f7:4b:72:41:7e:ca:7f:c4:
f4:ee:aa:22:42:c3:a8:e8:bb:42:11:38:0c:ad:e3:
26:10:90:90:df:d6:2f:df:4b:fa:3e:cc:9f:ea:aa:
9c:74:41:64:2f:91:df:6b:d3:d2:4f:83:64:eb:ff:
0f:c2:73:f3:6f:15:e1:37:d0:5c:39:0b:5e:96:ec:
e7:39:01:43:fe:86:ea:71:f5:1b:87:6d:30:c1:90:
28:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AE:4B:BB:E2:25:63:BE:83:64:62:FE:9E:2A:F4:32:AB:11:DA:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3016c970-524c-3bd3-adb6-001fe3e57859.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.42.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:60:ab:2d:9e:df:29:75:f7:87:a2:1f:00:a0:94:38:67:f0:
c1:67:eb:22:43:16:4d:d3:59:87:f5:2c:f4:a0:32:0a:98:6f:
82:46:6a:b2:47:91:0f:2d:d4:91:c6:d6:36:b4:2a:48:85:20:
99:eb:e9:6a:4b:6e:5d:b0:7c:b4:cd:17:8c:b1:ab:e5:3d:04:
16:ed:54:b5:5f:61:76:2b:1c:1b:5d:d3:0c:9a:2a:88:39:e3:
fb:97:0d:35:a7:20:64:8d:18:c1:17:83:54:8f:69:6b:a5:0a:
aa:f8:ca:e4:79:fc:8c:f3:88:91:0f:15:66:b2:74:16:2c:d5:
7f:33:ea:a9:f7:f4:0a:d5:ee:39:1d:e8:cf:c4:42:ba:1f:38:
32:9b:a5:b3:92:f0:81:20:1f:86:44:9a:83:b4:49:aa:0e:9d:
47:c4:04:d8:70:c9:f7:9e:fa:b2:61:e7:de:cf:8d:40:04:dc:
e3:26:2e:47:c3:3f:54:85:22:8a:bf:9b:9c:26:cb:64:8f:e3:
19:8e:5f:f1:4a:66:fc:4a:b3:11:a1:09:cd:4b:ed:93:09:78:
ad:9c:4a:01:2b:f1:70:10:a6:92:46:f1:d0:75:be:f0:9c:b6:
51:07:d5:7b:43:14:ea:b1:6b:aa:ea:2e:eb:75:29:1a:f2:af:
2c:75:9f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:32:51 2025 by rpki-client