Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43e59865-7510-3e42-b4e0-c3ed6d841015.roa
File: 43e59865-7510-3e42-b4e0-c3ed6d841015.roa (raw, json)
Hash identifier: tZzFaHIoQVx5q0hvvhkSK9UxqKlR25uT9HFeLVo4Yg0=
Subject key identifier: D9:74:D6:A3:8F:C9:0E:0B:D5:1C:AF:82:C4:0C:5D:36:B0:E4:1F:2D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11F07E93C19B6C17230080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43e59865-7510-3e42-b4e0-c3ed6d841015.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33659
IP address blocks: 68.83.28.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:f0:7e:93:c1:9b:6c:17:23:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=bd09202c-bb38-47ae-8edf-c1b9253c79cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f3:78:50:7e:96:13:87:ac:df:81:a7:f6:ae:
e1:57:f1:d8:02:bc:a7:77:67:06:83:00:a6:92:49:
58:19:2c:b7:ae:b4:f1:97:ca:69:fd:7d:3c:46:aa:
07:9e:5d:3a:26:3d:9b:5d:d8:31:d4:da:32:29:d6:
65:14:83:f5:20:b1:46:89:f3:91:4c:f4:fd:d8:da:
be:55:b5:16:a4:a8:e8:72:32:10:22:f3:ec:d9:b8:
b7:b2:f7:96:9a:20:8b:b7:ee:f3:4c:18:4a:98:a3:
36:ea:78:46:a1:1a:36:77:db:fe:f7:f8:eb:c2:17:
cd:7c:e7:a2:de:16:90:ae:22:d3:7b:3b:38:29:9f:
67:f0:c5:40:f6:a4:3d:d6:25:73:90:24:bf:79:96:
c9:c3:95:7a:a2:07:ae:cf:33:2c:ea:b7:d8:ec:e6:
85:bd:54:37:b6:a7:0d:48:e0:d2:56:29:2d:5b:20:
3f:af:5a:fb:a5:c6:4c:9e:f7:d6:b2:78:a8:62:20:
2f:99:ee:c9:e2:55:e5:87:8d:5f:ac:55:37:9e:44:
b2:fb:b8:eb:b4:7b:16:54:44:e1:d8:da:61:d3:70:
57:01:d1:29:c2:1f:23:ba:51:6d:66:39:c6:3f:41:
56:75:6f:47:aa:57:30:05:0c:0e:46:c0:42:01:21:
46:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:74:D6:A3:8F:C9:0E:0B:D5:1C:AF:82:C4:0C:5D:36:B0:E4:1F:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43e59865-7510-3e42-b4e0-c3ed6d841015.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.83.28.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:d2:c7:f2:95:48:5c:a5:eb:42:24:06:8d:82:cb:00:35:1f:
45:c9:13:5b:f2:ab:f8:35:14:f1:6b:08:98:09:b7:59:c8:5d:
fa:e2:ee:95:fa:c7:f3:47:13:50:f8:36:4d:84:b3:0c:df:70:
e2:a4:8d:3c:5d:80:22:5a:b3:23:2c:2a:b9:ec:8b:10:03:d2:
53:2f:fd:4d:f0:3c:a5:99:fa:a2:e9:12:2b:f0:c5:7d:8c:27:
7a:4d:4a:6d:f3:9f:12:1d:99:86:4b:51:81:fe:5b:e0:14:ae:
ac:ee:62:4f:dc:06:04:e9:dc:db:b3:1f:31:5c:0a:c9:76:e5:
d1:5e:5a:4f:76:8a:66:32:f6:00:51:de:72:c8:f4:5d:77:4d:
e0:d1:66:a9:2a:5e:28:be:88:bd:5b:fe:08:c9:b6:90:49:d8:
39:a5:da:55:b2:5a:44:9d:5f:95:3c:75:bb:76:fa:b2:6d:33:
97:19:e6:c7:a6:ca:7c:9d:40:74:38:0c:12:e1:35:d0:39:8a:
4d:c7:0c:ba:76:c5:fd:18:eb:0e:4f:6f:f0:b6:76:26:c1:f6:
1c:0c:17:aa:29:32:9a:63:ad:5b:27:26:40:ed:20:f6:2c:b7:
01:fe:56:5c:cb:3c:de:a1:7e:fb:4d:be:34:d8:3f:d4:45:44:
ae:cd:3a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:26:20 2025 by rpki-client