Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34b64f5c-8ce5-3b42-84f3-0483be25ce9f.roa
File: 34b64f5c-8ce5-3b42-84f3-0483be25ce9f.roa (raw, json)
Hash identifier: GiWIOiafQ1cn5UAbqGT0WNEpdJR2fyMXxWL9kuUTpCI=
Subject key identifier: 10:94:EC:B0:3A:E4:D4:E5:DD:73:9F:80:62:73:B8:D7:F6:DF:52:96
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F22C6A77F14A9E0797580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34b64f5c-8ce5-3b42-84f3-0483be25ce9f.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.37.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:22:c6:a7:7f:14:a9:e0:79:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=b09d54cf-ef6c-4e22-871f-8eaa71e58fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a0:07:af:24:d1:13:38:92:2d:aa:9e:f9:ca:
60:68:f8:47:f2:0e:e0:1a:ad:e3:57:ee:6e:d4:c1:
0f:f3:04:74:44:9e:02:04:7c:c8:b9:8d:d9:13:c0:
75:b8:0e:55:ef:2f:e1:da:2c:91:94:a8:de:37:dd:
44:3a:0c:ad:9c:02:34:eb:86:6d:f4:8b:20:4b:ba:
fb:33:35:ab:2f:47:76:54:fa:8c:aa:80:a5:73:7a:
52:b6:86:d3:8a:cd:6c:ec:99:63:ee:ae:84:aa:97:
0a:a1:df:85:b7:c3:2b:76:d5:c6:df:77:53:d1:98:
ec:f1:f3:24:00:fc:28:40:72:44:2b:ac:9c:9d:5f:
dc:c6:d2:f2:cd:a3:08:1f:b9:e1:3b:c7:8f:76:e6:
43:1d:0a:60:ee:6a:1b:3a:84:c1:e5:15:99:e2:3c:
e7:0c:42:7d:4c:a9:94:33:21:5b:4e:b8:81:a6:16:
3d:c3:0e:5a:db:07:2e:53:f8:a3:98:a1:60:c1:b0:
81:83:20:f0:cb:9d:f5:ce:31:7b:0c:7e:45:d9:cc:
67:38:36:c4:94:1c:a1:c9:8b:39:a5:f3:66:6c:73:
f1:db:d7:c5:ad:00:f9:8b:51:9c:04:df:98:77:9d:
e5:b0:27:f8:2c:7b:b5:ee:13:99:ff:7c:46:b7:b4:
0a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:94:EC:B0:3A:E4:D4:E5:DD:73:9F:80:62:73:B8:D7:F6:DF:52:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34b64f5c-8ce5-3b42-84f3-0483be25ce9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.37.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
db:b6:1d:4b:3c:2b:d2:1d:c5:9f:d3:85:d5:ae:d4:de:0a:cb:
79:23:08:45:59:5a:14:50:fd:44:ec:41:68:29:8b:79:4b:d7:
21:12:07:23:1a:ba:d8:ae:3f:37:1a:24:dd:21:cf:32:4d:c7:
47:68:b0:bf:f6:0f:ec:4e:19:ba:49:fa:ad:da:bd:3a:d6:c1:
bf:28:56:99:9e:ed:74:7c:ee:5a:a8:3d:ab:25:cd:a9:da:44:
f2:a4:7c:aa:e6:b9:e7:77:54:05:3d:4c:c1:46:db:5d:b2:ed:
24:d0:05:b9:68:cc:e0:26:2a:88:54:2b:93:f2:f3:fa:db:37:
95:13:49:63:09:98:4f:da:f5:13:7e:b9:58:32:f8:95:24:f9:
c0:36:cb:2e:84:39:d6:24:f3:bd:ea:e6:3a:28:20:e8:77:e6:
34:33:13:ec:1f:1b:8e:ae:05:64:04:44:87:11:91:b3:ad:ae:
b4:cf:c2:b0:53:10:73:50:8e:44:31:96:a4:63:3f:04:25:38:
91:86:97:33:d8:52:96:26:fa:49:b2:2a:7b:41:cf:71:04:f2:
c2:e5:b0:3d:2c:cb:f9:b2:50:7a:54:df:a5:16:c9:2c:3b:56:
07:97:0a:ff:18:2e:23:eb:93:24:a1:a7:cf:9d:d4:5f:09:b7:
c2:a5:d2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:53:33 2025 by rpki-client