Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/337b6e12-e2c4-3104-ad43-fe7feec51cde.roa
File: 337b6e12-e2c4-3104-ad43-fe7feec51cde.roa (raw, json)
Hash identifier: DWvmVyb2AUTNO/JwkCustrh1aEYJcSxxN6AapA2uD9w=
Subject key identifier: 2F:25:CC:C8:FD:E8:C9:B4:EB:48:E4:70:17:3B:5B:64:62:B4:03:EC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B4D05C66F251EC58FF800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/337b6e12-e2c4-3104-ad43-fe7feec51cde.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.34.84.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:4d:05:c6:6f:25:1e:c5:8f:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=0043ae6c-7110-4805-9c9e-1000d46d16a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1a:69:6e:e8:4a:09:6f:e0:d8:b1:41:81:b2:
f7:a8:e4:42:41:59:9b:62:12:0d:79:3b:1e:dc:d9:
f7:11:0d:84:cd:1e:30:f5:e2:af:e4:b8:5c:de:33:
96:6f:f4:60:9d:4e:50:56:87:36:2d:e4:3a:40:d0:
3d:8d:c5:56:4f:cb:bd:c3:52:78:cc:e6:6e:ef:4a:
ba:22:81:61:50:3c:aa:f8:50:29:15:51:91:53:8d:
0c:af:a4:cf:3b:04:21:ae:e8:11:76:df:6f:41:a0:
b8:db:4c:d1:93:18:7e:dc:d6:f4:76:0f:61:5e:25:
94:c2:e3:62:c5:0d:f6:93:f4:4d:92:7b:ec:f2:5c:
d4:60:20:d0:db:5e:41:ca:ac:7a:62:c8:01:81:76:
88:eb:80:68:00:d2:d4:ff:9a:45:23:ff:69:ab:10:
da:c5:65:2c:d1:15:5e:60:33:9c:05:42:cf:18:8d:
5f:ed:03:df:2d:96:44:d3:c2:14:1c:c0:a8:c2:4c:
6f:30:13:aa:7e:a9:e0:68:5f:83:4e:bb:59:e4:f1:
68:99:a8:d1:95:6b:e0:e4:71:87:7e:b1:7e:a1:b8:
49:d3:1b:04:40:28:75:a6:c0:e7:50:3e:51:38:45:
f1:01:ab:47:7b:34:85:38:77:5a:f8:26:a0:95:40:
57:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:25:CC:C8:FD:E8:C9:B4:EB:48:E4:70:17:3B:5B:64:62:B4:03:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/337b6e12-e2c4-3104-ad43-fe7feec51cde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.34.84.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:7d:e8:44:05:df:71:4e:90:47:96:22:68:71:0e:22:e3:20:
a7:5b:0f:ea:3b:13:0d:32:64:1c:bf:20:e1:77:c7:aa:75:d8:
4e:f1:47:51:65:fe:14:6b:84:2e:52:99:9b:a4:12:e3:19:25:
c1:60:a1:79:69:91:bb:2a:ea:26:37:68:19:30:8e:22:bb:ff:
7e:3e:2e:ec:bf:c1:6a:51:1d:f8:57:d1:38:cb:92:0f:a3:e7:
41:c9:96:bf:54:02:cf:aa:cc:23:55:50:5b:1d:d2:00:8f:c8:
d6:3c:bf:42:49:59:9c:59:28:58:45:23:b6:c1:18:5c:dd:dc:
13:db:27:14:d4:8d:6a:9c:6f:5b:85:11:c6:1c:42:38:7f:17:
e8:3f:29:ec:3d:2e:ed:a9:a6:99:32:a9:2a:84:e7:9c:64:75:
d6:1f:ff:8f:5f:d3:d3:3a:24:f4:4b:e1:e2:86:73:ff:38:de:
eb:d3:b5:97:d4:63:b1:57:ed:8f:37:33:2e:71:eb:fb:6d:0c:
06:2e:b6:e6:1c:4e:66:25:ec:be:01:f7:db:14:6f:29:56:be:
78:c0:4a:cd:dd:af:b7:c2:77:07:fd:b1:72:16:4d:bc:d3:88:
b4:91:af:20:ad:c1:de:29:96:7a:bc:0e:74:3f:da:cb:ab:cd:
6d:bf:40:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:47:46 2025 by rpki-client