Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4840d0f9-be0c-39a5-9df1-303e50ae7d63.roa
File: 4840d0f9-be0c-39a5-9df1-303e50ae7d63.roa (raw, json)
Hash identifier: zZjMIevZdWDRdRo8oQQ2vBMeVTf0n9iWt2rzVoiNp1k=
Subject key identifier: 5A:90:E4:FE:62:EF:9C:43:01:FD:44:12:14:84:A2:D6:5C:BE:EA:76
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F2E3C85986159430F1B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4840d0f9-be0c-39a5-9df1-303e50ae7d63.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.40.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:2e:3c:85:98:61:59:43:0f:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=40f9c092-b5ed-4fe3-9575-b850b71ab4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a2:6a:46:c7:67:07:f7:9f:99:fb:98:f7:d0:
86:45:ab:65:fb:e2:e9:56:8b:01:37:1c:4b:69:4e:
ab:52:41:16:d1:64:73:fb:c9:f8:e6:4c:a3:5f:ff:
e8:4a:1f:ae:58:5c:0f:89:ab:f7:11:b1:6f:dc:02:
2b:a0:fb:ae:9f:3c:ee:4b:81:a1:71:18:f9:93:c4:
0e:7d:95:2d:e6:ea:c9:0f:49:2f:f9:46:b1:66:5e:
6d:bf:73:e7:06:f7:9e:21:fb:54:48:e3:5d:3c:2f:
65:91:e3:51:d7:b7:2d:d9:16:77:55:a0:b7:0a:ef:
0c:19:2d:92:ea:2a:ef:6d:15:8a:ea:49:fe:32:78:
8a:4d:f2:8e:da:c3:37:15:31:01:2c:20:4f:60:9d:
49:a6:68:e0:1f:a5:08:2f:a7:60:9a:06:2f:5d:f2:
79:cb:72:b7:7a:85:39:29:75:7a:2f:e8:38:6f:1b:
52:71:eb:89:ef:0b:73:f7:c0:b8:95:35:8a:eb:5b:
99:6b:cc:34:eb:98:f9:6e:ff:9e:ff:f9:0d:c8:aa:
c7:94:08:b0:f8:c2:4f:e3:b8:18:57:4f:a9:a3:a3:
e6:cd:f1:e9:88:ac:3a:77:50:b8:f4:eb:e0:da:32:
3f:3a:f9:78:d4:e2:34:77:38:5d:44:88:09:d0:1f:
57:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:90:E4:FE:62:EF:9C:43:01:FD:44:12:14:84:A2:D6:5C:BE:EA:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4840d0f9-be0c-39a5-9df1-303e50ae7d63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.40.254.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:8b:aa:17:73:1c:96:4a:a3:4f:aa:6c:74:36:00:13:47:1a:
37:75:73:d0:2f:0e:36:a7:0c:ed:17:3b:1d:8a:9b:b6:61:17:
f9:d0:4d:ee:09:cd:37:f4:a4:15:03:7f:0f:72:f2:cf:51:c5:
0f:7e:06:8e:e1:47:ed:73:e6:a5:38:dc:df:54:18:c8:50:da:
71:3a:fa:ba:47:da:b2:58:a3:8e:9d:60:b9:d8:33:e3:45:a4:
54:2c:89:2f:60:92:94:f8:1f:e5:00:50:11:4a:2b:6e:d7:74:
3e:0f:64:55:d0:bb:6b:a2:6e:8f:6a:51:9c:c2:2b:07:62:d4:
f7:5c:87:6c:28:37:41:0e:f3:ff:cb:8b:34:54:13:ad:e9:15:
44:85:ef:3e:8a:21:d1:b1:91:11:6b:35:c6:73:4a:dd:5d:6c:
cb:00:e7:e6:4f:d2:54:f6:ed:9a:74:96:f7:03:f3:85:43:da:
02:a9:1f:24:58:a6:55:6b:44:6b:d1:3f:e6:6d:66:80:a3:6d:
40:8f:6e:68:e7:8f:d1:0f:db:9d:d4:a7:a9:51:b9:a6:c2:d6:
a1:ed:47:11:1d:3e:6f:29:ec:9b:be:c5:17:bc:7d:f9:7e:ed:
8b:02:7a:8b:ed:84:31:dc:1b:32:05:8e:01:5f:af:98:91:e1:
a4:3f:8d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:32:32 2025 by rpki-client