Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/345dfe2a-fcdb-3984-a8ee-777a2d4fdd9c.roa
File: 345dfe2a-fcdb-3984-a8ee-777a2d4fdd9c.roa (raw, json)
Hash identifier: 4CH817YLV86eDjtfn5zYDbBK3x70sR4X3qJ57T8k6ac=
Subject key identifier: 75:80:37:AE:26:0E:E7:EB:5A:94:75:04:BF:59:5A:09:31:39:92:1A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B51FF2A0714ED15FEA380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/345dfe2a-fcdb-3984-a8ee-777a2d4fdd9c.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.37.234.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:51:ff:2a:07:14:ed:15:fe:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=b59a07ce-506a-4c6e-bdfd-451501b643d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:11:6b:ed:79:e0:2f:e1:0f:c3:77:b2:44:c2:
dd:82:18:b3:f1:bc:48:c7:84:be:fd:fb:46:fe:cf:
69:b4:ac:68:3b:71:7d:34:5c:ae:6a:6c:a6:30:35:
07:b7:0c:f1:59:44:90:c3:09:d4:4a:e3:cd:9f:e4:
f4:16:d0:dc:bc:89:df:a9:ee:bf:80:dc:3b:55:e7:
21:a8:35:2f:ea:d5:6f:92:79:84:8f:be:6d:44:7c:
fa:37:22:10:57:0d:fa:12:c1:86:96:b3:a0:1c:82:
97:12:6d:e1:14:5b:a6:b5:10:97:29:6b:4c:fd:b0:
77:65:21:f7:d6:8f:12:87:d9:6d:7c:1c:67:f2:45:
bc:3b:1e:32:9c:9a:89:79:71:6c:2d:2f:3c:48:3a:
a2:c8:87:2f:d2:1a:97:22:cd:76:e7:b6:3e:82:19:
2f:9d:34:4e:31:cf:6b:17:6c:a8:00:36:94:b2:bd:
72:6e:c3:86:85:56:6a:6a:27:a1:8b:98:69:6e:c5:
46:02:cc:ce:56:6a:ef:4a:19:f1:58:d4:58:6c:1f:
76:83:54:43:56:72:f7:ed:3a:76:45:b0:67:ae:73:
a4:a9:03:e6:ec:bb:5d:a3:e9:88:76:ee:50:46:18:
a2:14:4b:99:92:60:6a:00:76:44:e5:60:26:d0:8c:
5d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:80:37:AE:26:0E:E7:EB:5A:94:75:04:BF:59:5A:09:31:39:92:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/345dfe2a-fcdb-3984-a8ee-777a2d4fdd9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.37.234.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:8f:c1:4b:b8:55:2c:c0:33:9e:fc:82:fc:e1:38:02:0d:00:
c1:76:07:52:f3:f1:2c:d7:38:a8:a4:d8:89:fe:ce:17:b4:cb:
6d:e4:40:89:e4:7b:65:c5:9f:de:85:1f:9c:54:3a:69:d1:03:
37:a3:ff:6b:10:ba:4d:c5:0c:6b:be:55:f3:fc:a6:c4:2a:97:
44:08:a4:e3:1b:bf:84:7e:2c:7b:d8:cf:2d:9e:81:fa:22:2b:
f9:cb:e9:1d:2a:07:ac:8a:a1:64:b0:f9:48:1a:07:cb:06:87:
bb:82:18:20:1a:51:82:c4:ac:5e:0d:a9:51:ea:67:65:ce:55:
57:a1:98:ed:98:21:2e:1b:61:10:8e:03:28:fa:d5:ec:18:b8:
8d:24:27:31:3c:ba:17:93:2d:8a:cf:cf:d2:13:6f:c0:9f:3a:
77:91:f1:0b:46:b1:f2:a9:60:9a:88:a3:23:7c:4b:b4:64:93:
45:4b:9a:bc:c4:59:bc:6c:af:a8:c1:23:13:cb:3d:ab:29:c3:
bf:3d:f1:d7:06:82:a1:80:98:f1:78:01:14:e3:67:8f:52:92:
b9:3f:d4:8f:9a:66:be:e1:1a:33:aa:5c:9e:50:c9:9c:5a:ea:
c6:dd:36:e2:59:65:4a:46:77:0f:3e:32:5e:ac:bb:3c:d0:1f:
42:31:32:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:46:45 2025 by rpki-client