Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43d1f5fa-9213-3a26-acc3-d07d30bf742d.roa
File: 43d1f5fa-9213-3a26-acc3-d07d30bf742d.roa (raw, json)
Hash identifier: mAfJc2cfib2G4jLWqzYQMOdncpB/Lv1zp8M/zbaIpQI=
Subject key identifier: 0D:40:FB:61:5B:0B:0F:A6:71:E9:1E:77:F7:4A:F0:84:58:9A:E8:03
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C127BF6FC3091DB1FAD5280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43d1f5fa-9213-3a26-acc3-d07d30bf742d.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 68.38.232.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:7b:f6:fc:30:91:db:1f:ad:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=e96a9172-42cc-41c5-9c36-d4e7715677e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2e:98:1f:35:43:c8:54:21:68:29:51:34:f9:
f3:39:52:d7:d0:23:d5:94:14:3d:32:15:6c:8e:90:
11:ef:2a:b0:82:fc:31:42:c6:db:c4:c2:71:6b:dd:
9c:b7:59:54:f1:87:e0:2f:9b:db:42:62:48:b5:22:
45:25:b8:c6:f4:44:bb:ec:a0:8a:91:53:bf:af:f0:
1c:00:20:02:2d:d8:8b:6f:b5:15:c0:dd:02:ec:b8:
e6:4c:89:4e:21:ae:28:16:f8:7e:27:d1:5b:ae:65:
1b:e1:22:15:cf:71:ce:7b:7a:dc:aa:f9:3d:13:a4:
cc:b7:3b:c8:97:86:47:2e:44:56:2e:8b:ce:0c:bb:
62:0a:b7:25:c0:c9:b8:2b:8d:fe:e5:bf:a9:3c:48:
74:5e:53:9a:f7:34:5f:b7:62:55:7d:ac:40:52:84:
f0:7f:85:f1:80:1d:83:b1:60:0e:ad:92:08:53:35:
9b:33:3e:49:4d:54:2c:41:85:92:a7:04:8a:3a:17:
f3:ae:35:a6:01:8d:66:22:85:fd:49:bf:85:a6:f0:
4f:8d:a3:87:54:e4:7f:aa:a1:c7:1c:4f:a3:b9:49:
aa:3b:6c:57:be:98:8c:05:78:81:55:36:ce:16:17:
d9:a2:14:f2:85:88:25:cd:e2:20:30:df:83:2f:32:
0a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:40:FB:61:5B:0B:0F:A6:71:E9:1E:77:F7:4A:F0:84:58:9A:E8:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43d1f5fa-9213-3a26-acc3-d07d30bf742d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.38.232.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:0e:80:ec:c2:45:1b:9f:53:62:86:cf:e6:26:5d:8a:28:34:
87:0c:5e:78:bb:50:cb:f8:12:e9:d7:5f:05:a5:20:d8:81:70:
fb:5f:36:97:47:57:ea:d1:07:82:05:05:c4:ea:d8:97:0a:af:
35:82:08:fd:b0:ac:04:9b:fb:93:d3:7b:47:62:bf:44:9b:12:
16:fb:f7:78:bc:23:b0:08:7d:3b:e2:bd:b8:b1:95:5f:1e:9c:
05:07:49:9e:eb:5d:90:e5:02:f7:8b:88:b3:5d:55:7e:f0:9e:
72:4a:1e:c7:3d:a2:28:9a:10:b5:c3:2a:18:68:89:fa:64:7c:
dc:a5:3c:dd:4c:8c:30:dd:87:a8:ef:56:fd:ab:4f:2d:50:45:
1d:64:46:f2:12:c3:d4:68:d4:f0:89:54:bf:a5:f7:0c:5b:9e:
ab:59:eb:5b:36:c7:97:18:6b:ce:aa:26:5d:bf:21:65:00:00:
2d:67:f6:a6:83:56:1d:bd:af:06:37:5d:bf:b0:48:28:39:1f:
28:61:8c:25:31:b4:67:25:f0:5b:19:6c:ff:40:c8:c7:82:2b:
13:c8:19:4a:d2:df:5e:9e:6b:a2:6f:72:af:80:88:ad:3d:d3:
bc:b8:61:09:08:4e:43:9c:77:ab:07:94:c6:6d:80:73:ac:ae:
5c:27:00:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:27:04 2025 by rpki-client