Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b821de4-0165-31c4-850c-71c00657c909.roa
File: 3b821de4-0165-31c4-850c-71c00657c909.roa (raw, json)
Hash identifier: Qy4/0u6SKJz65xATbtqyy60obIHviTXMcfdeFCaXU9M=
Subject key identifier: 26:1E:E8:08:3D:1B:56:BB:BA:F4:96:9F:92:EB:AE:8E:25:91:34:E7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F2D50B7526789B8429980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b821de4-0165-31c4-850c-71c00657c909.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.40.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:2d:50:b7:52:67:89:b8:42:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=e3d267bc-6f90-4504-a713-c5972107a2b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4b:db:73:78:be:3e:78:33:75:58:da:77:d7:
88:0d:d8:c8:e5:bc:ed:e4:40:14:78:89:79:0f:e9:
b7:05:bd:3f:88:6e:78:67:9d:2d:80:99:e9:ae:ef:
d6:ea:76:2c:49:53:2d:02:ed:0c:8d:29:3a:0c:ee:
7d:30:2a:ad:cc:6d:99:13:b6:c0:e8:ee:0c:e6:e7:
6f:b2:47:4f:3e:1e:ea:7a:dd:81:58:ea:76:b7:2f:
e2:f2:11:0d:81:2a:b5:27:61:dc:c7:c0:bc:c9:1f:
44:f6:1f:c1:da:2a:52:ea:ca:a2:4d:74:b9:df:01:
3c:dc:c3:a5:25:f4:2c:eb:18:30:fc:d1:c0:f3:b7:
1d:7d:5f:d4:d6:61:2c:5a:50:ad:44:03:4e:57:97:
d9:eb:85:ac:0c:71:8d:54:16:d7:37:14:18:f1:c3:
41:c7:7b:27:47:8d:c5:14:fc:18:76:a8:15:a2:3e:
af:22:c0:84:63:64:b5:c8:c5:1d:4c:42:d7:c8:cb:
b8:18:7f:d4:be:f7:e6:7d:0b:34:21:85:7a:c1:dc:
22:df:1a:d3:bf:ac:93:42:36:b9:80:03:f2:86:1e:
aa:b4:30:e7:3f:f4:df:5b:67:9a:40:56:5d:64:c3:
c9:cf:ec:9a:aa:3c:ea:98:97:f9:de:29:db:31:b7:
d2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1E:E8:08:3D:1B:56:BB:BA:F4:96:9F:92:EB:AE:8E:25:91:34:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b821de4-0165-31c4-850c-71c00657c909.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.40.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:e2:04:52:38:dc:76:38:b9:0a:41:92:3f:cb:98:9a:6d:cb:
e9:fb:94:a3:49:0b:48:81:68:0c:91:09:ea:74:12:0f:6b:77:
9c:37:8b:ab:22:fd:25:40:50:2c:09:8c:b9:58:bc:9f:ae:8d:
8c:97:ec:70:eb:38:c7:6e:b2:0e:2f:53:8c:43:65:ef:75:cd:
8b:e5:c6:2a:e5:c5:de:96:ba:71:16:5d:01:b0:a8:b9:73:b7:
39:c5:c2:96:87:e1:be:49:33:e1:d7:0c:ec:cf:fc:0e:73:b1:
3c:f1:fd:65:ef:0e:7a:1b:0f:6e:59:94:0c:06:93:63:80:e0:
d0:ec:0f:43:2f:fa:27:b0:39:00:be:c8:20:87:ee:fb:54:dd:
7d:63:2a:5f:95:4d:fd:df:d5:b7:6d:0f:11:b9:88:a6:41:f9:
d7:fa:cc:1d:ed:e9:e2:7f:df:2c:b6:b0:63:2d:6e:f6:10:35:
52:c0:e0:01:6c:a0:1f:cd:f4:de:9f:e8:82:10:41:dc:c7:49:
74:48:23:15:4b:0b:5c:d1:5c:90:4c:ac:b9:54:2a:c2:d7:2b:
54:20:9f:c7:b5:f9:32:ca:c4:de:75:07:bc:85:34:78:4c:2b:
d6:f6:f2:9b:56:b2:41:67:1b:0b:7a:69:1b:ea:b2:b5:ec:2e:
95:ec:58:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:58:14 2025 by rpki-client