Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c43f1a8-f39e-34a7-9284-a6b37bdace78.roa
File: 3c43f1a8-f39e-34a7-9284-a6b37bdace78.roa (raw, json)
Hash identifier: mXjOhNuOTFXRvNfhCoQHUv5FU+X2YIBysjIe9K+brIU=
Subject key identifier: 6D:C0:62:97:AA:7B:D6:0B:87:73:D9:BF:31:DA:4E:31:DC:12:D1:7B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B5016328AE2F771831D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c43f1a8-f39e-34a7-9284-a6b37bdace78.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.36.74.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:50:16:32:8a:e2:f7:71:83:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=8834320c-db91-425e-b4d4-4ce38d3634b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0c:46:fd:50:b3:11:54:cf:75:8a:53:fc:38:
c7:59:56:eb:43:c6:9b:bd:12:5a:45:b9:d0:be:40:
67:06:2d:05:6e:df:5d:3c:be:9e:a8:15:cc:73:69:
19:06:bf:38:ee:81:5c:90:26:ff:0f:1b:e5:d4:10:
e3:28:08:2a:cc:81:9e:0e:18:4c:4c:b4:8c:1b:85:
4d:db:a6:a3:7d:82:2c:57:31:5c:b7:5d:1b:3c:93:
0b:e3:0c:da:58:87:3a:ff:92:6b:b8:cb:1b:2c:0b:
35:dc:41:df:3b:93:3b:14:03:bc:3c:6d:f3:67:3f:
a1:ae:74:26:84:94:b3:35:17:fd:7e:a4:36:ae:b0:
b1:6b:e6:af:2b:fc:20:7b:cb:ab:b0:bf:24:17:47:
88:90:f2:06:41:d4:fd:45:1c:60:de:6e:7b:24:a2:
39:ce:fa:13:ee:ad:37:d6:85:08:2b:71:0a:e8:08:
0d:c8:b2:50:95:55:16:71:02:d3:c5:32:ec:7b:9e:
1a:cd:42:4d:b1:46:b4:03:ba:bd:1f:8e:53:d7:9b:
3f:6e:38:7a:2c:78:99:15:8e:a3:99:98:8c:05:b0:
db:51:05:49:72:56:a1:a4:32:b1:f0:67:dd:66:5c:
19:24:b5:81:15:06:48:fc:0b:4e:37:04:13:4b:a9:
d8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C0:62:97:AA:7B:D6:0B:87:73:D9:BF:31:DA:4E:31:DC:12:D1:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c43f1a8-f39e-34a7-9284-a6b37bdace78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.36.74.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:f0:d6:f6:89:f2:23:d7:a7:c7:20:76:19:af:3a:50:5f:e6:
6f:d5:e6:f3:d8:60:41:05:29:27:e8:27:bb:a8:1c:d1:5b:98:
6d:3f:e1:ab:c5:0c:16:15:6e:7d:82:26:49:28:f5:6d:f6:50:
23:e4:75:50:34:4a:8d:a4:c9:5d:b8:fe:71:e5:5c:e0:43:a9:
c1:16:29:ea:95:63:34:0c:c3:cc:3e:14:c8:76:50:53:b0:e7:
b2:7b:8e:28:5d:d7:75:b4:ef:f6:47:c2:93:8d:06:2a:f4:4c:
1a:1c:39:19:4c:ec:f0:d4:0f:6d:4e:5d:59:64:eb:82:fd:5a:
54:1c:c6:1a:62:45:dc:f7:11:21:4b:48:8d:d1:1f:36:ad:52:
98:08:05:cf:96:84:44:40:d1:ad:a8:03:79:c8:16:a5:31:72:
85:93:49:95:52:24:06:24:3e:b3:af:42:d3:fc:29:fa:1a:3c:
f4:eb:c2:20:f6:f2:c9:36:e4:9a:65:ac:cc:e0:11:03:ac:87:
68:19:fb:91:de:ef:a5:40:74:ac:34:00:fc:e3:d6:15:ab:ae:
14:85:a4:db:ca:b2:e5:e1:f7:d7:13:b2:70:8c:41:78:70:bb:
d3:9b:88:c8:3c:97:ad:2b:e4:5c:c0:d0:c9:e2:0f:be:84:66:
c8:9a:a0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:26:51 2025 by rpki-client