Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32482780-d1c4-32a3-a457-6f1bf75c4584.roa
File: 32482780-d1c4-32a3-a457-6f1bf75c4584.roa (raw, json)
Hash identifier: w5nIx3dqK7SVewHMgagDVGvLDs66AaXUzpR1SCuknos=
Subject key identifier: D4:E3:CA:34:89:94:4A:FC:5A:00:9B:37:02:5F:8E:15:FE:FA:13:81
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B69B9EB1E9FCF9D0E6480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32482780-d1c4-32a3-a457-6f1bf75c4584.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.61.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:69:b9:eb:1e:9f:cf:9d:0e:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=c3ef558b-b5ac-42de-8759-654cedbc4eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:76:85:b2:b7:4e:64:d7:4d:cb:a0:8e:68:d9:
90:b4:21:2f:ec:3a:cf:2e:84:4f:d3:aa:26:81:03:
b5:a7:4f:b4:99:b6:4c:5c:05:a9:f2:8d:3b:22:0e:
45:33:7a:0e:68:ca:b7:a0:b1:af:47:7c:00:87:38:
66:ac:e1:a7:78:15:85:03:06:4a:57:11:7d:de:cb:
7d:e1:35:47:a1:3f:43:6f:12:d5:d1:37:ae:92:72:
e5:75:00:f9:7e:1d:b3:80:53:59:07:6c:90:96:7a:
74:70:62:b5:0d:38:ad:4f:9c:b8:b2:61:4c:3c:a4:
97:6e:98:11:95:30:e8:75:d3:bf:c9:76:3e:1f:38:
c5:13:06:e4:85:fc:93:a3:b5:e9:24:a8:1a:c9:2c:
7d:97:03:44:71:9c:2e:28:5c:1d:ea:1c:5c:7b:b8:
7d:81:59:7f:29:77:51:8a:5f:ad:da:16:bf:e4:e8:
7d:fb:e9:c7:57:85:53:dc:3c:7b:d1:71:28:25:3d:
cb:04:66:2a:bb:e7:92:76:50:33:20:5d:93:93:6b:
e6:1e:85:a5:f2:de:bc:f3:de:b9:16:da:30:2a:62:
73:d0:b4:0f:7c:a7:47:ac:4e:74:a6:37:c4:a9:34:
2a:db:b6:08:5c:cb:ea:96:4e:79:2e:03:45:97:df:
f2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E3:CA:34:89:94:4A:FC:5A:00:9B:37:02:5F:8E:15:FE:FA:13:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32482780-d1c4-32a3-a457-6f1bf75c4584.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.61.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:08:49:df:20:9a:c5:9d:09:13:cf:8a:ad:ec:34:fe:a2:f0:
d7:8e:a9:52:75:1a:f9:bc:f0:33:a7:18:39:35:e0:c6:9c:43:
31:a5:1e:32:d3:47:0c:eb:7e:72:cf:0e:06:ac:b3:9a:36:80:
f3:a1:dc:9b:75:73:ea:c0:12:ab:53:ba:a1:77:5a:dc:68:41:
59:d7:d1:95:f6:a1:44:71:3d:3e:ca:f0:ca:df:0e:38:65:12:
9b:b3:ea:49:69:c2:fc:73:6e:89:89:af:34:21:90:ee:7a:27:
ee:23:c1:44:be:28:f8:93:7f:ea:56:b8:5a:f9:b6:8d:f4:35:
1c:cb:45:ad:5a:a4:c1:3b:88:d9:ef:77:75:1f:3f:5c:9f:e2:
f0:0a:df:2c:2b:b9:29:ee:a3:da:66:f9:4d:02:62:f3:e2:8d:
fe:17:62:ef:21:17:74:40:40:cb:8c:76:8c:60:04:a6:12:67:
29:c6:a6:86:f3:95:08:fe:7d:c3:c6:b5:69:6f:6f:bd:88:57:
f0:a5:21:f5:a2:f8:80:3f:8f:55:f3:d3:1b:fa:44:90:d0:c3:
dc:c5:c6:08:cc:f5:91:f6:88:7e:fd:2b:92:a0:bf:24:61:95:
db:72:91:a1:25:e9:02:ef:a8:63:8e:74:7a:a8:a9:07:b9:c9:
af:1e:1b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:00:46 2025 by rpki-client