Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3aaab5c2-a6b8-3e8a-ab2c-6a551cec5234.roa
File: 3aaab5c2-a6b8-3e8a-ab2c-6a551cec5234.roa (raw, json)
Hash identifier: jUIsfxdkFlhIZQnoTqeu3U6vxgwVgRs7pI9v0CIjbtg=
Subject key identifier: 44:A8:03:92:39:D9:17:D8:E6:90:5E:F8:4C:92:ED:16:29:17:79:C7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F629880E4F878DC363780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3aaab5c2-a6b8-3e8a-ab2c-6a551cec5234.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.62.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:62:98:80:e4:f8:78:dc:36:37:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=a628fd79-53e7-4444-a44b-8dc74bda2899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3f:4f:b4:a6:c7:4c:70:7b:8d:fa:49:9b:1c:
8f:f9:f3:04:39:67:22:4c:87:e9:44:48:eb:4c:b5:
92:64:56:62:18:0f:3c:34:b5:70:ae:bd:85:b0:27:
4a:6e:3a:ce:56:e7:48:86:22:8c:fe:09:a1:80:31:
bd:cb:dd:f9:e8:d7:79:4b:83:d1:a5:46:ae:ad:f5:
5e:b6:c9:ff:4a:aa:44:5d:11:36:dc:ce:9d:7f:32:
d6:a3:68:b3:51:18:28:2e:1a:9b:53:0c:ad:59:1e:
a9:17:15:2a:08:00:22:a9:c6:b9:00:19:69:e4:d5:
c3:71:95:45:31:76:0a:6b:8d:e1:59:6e:b6:aa:c8:
51:32:d6:82:53:3b:fb:ea:ef:1f:c8:2a:55:fb:4a:
7c:4a:8f:bb:63:08:af:ab:e5:ea:cb:79:26:50:ef:
b2:47:fc:db:a1:4a:75:4d:b4:29:f5:2a:48:ff:44:
2e:c7:11:eb:df:b1:73:28:24:f7:cf:c8:38:fb:85:
20:91:3f:4a:3e:2c:c1:f7:7f:0f:45:e2:d5:69:71:
91:9f:7f:33:83:e8:0b:42:18:19:08:1c:e6:58:c1:
69:4d:d3:58:fe:73:61:ec:5b:69:83:6a:a6:e9:f6:
f2:56:af:43:e8:a0:f1:b8:cf:5d:da:15:1e:f1:8e:
39:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A8:03:92:39:D9:17:D8:E6:90:5E:F8:4C:92:ED:16:29:17:79:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3aaab5c2-a6b8-3e8a-ab2c-6a551cec5234.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.62.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:13:55:7d:74:68:90:1c:64:7c:7f:56:33:d6:83:84:0b:a8:
b8:f4:39:22:7e:c4:f0:c6:e8:3b:f0:22:85:62:bc:a3:9e:64:
1e:26:1a:dd:76:39:da:d1:50:33:0e:dd:9c:63:ea:3e:d2:e5:
c6:cd:82:9f:26:11:4a:42:c1:2f:42:d8:27:ab:a2:b6:5c:4c:
a4:8c:40:c6:ba:fa:76:89:be:d9:cd:b9:f5:c3:3d:d9:e1:75:
a7:c0:a5:f7:96:14:64:2c:a8:3c:04:d3:13:10:a7:ba:bd:9a:
be:8b:92:8d:94:35:71:bb:20:49:42:25:fe:95:ab:55:dc:2f:
f7:46:04:3d:97:3e:b1:32:6d:b1:a1:46:ec:fc:45:4e:84:0d:
f6:b5:90:a4:ef:17:a8:f0:d3:53:24:ab:aa:ef:7c:ee:f1:82:
f1:ba:e1:dd:fa:99:5c:5a:f9:2e:7d:84:9c:83:08:94:2e:b8:
62:66:fe:bd:ae:00:af:26:7f:68:2c:f4:a3:82:6f:e9:c8:e0:
f0:f2:f8:69:02:7c:85:22:37:62:cc:83:41:e3:9f:ec:1b:07:
43:cd:64:17:86:a3:29:96:96:41:2b:86:5d:fa:e4:99:fa:48:
dd:ce:3c:b0:a8:56:50:8c:aa:89:48:0f:5a:a3:e3:66:8d:d7:
8e:d3:a1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:46:35 2025 by rpki-client