Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d85c790-ef3a-3bb8-a261-ada2c09fb2fc.roa
File: 4d85c790-ef3a-3bb8-a261-ada2c09fb2fc.roa (raw, json)
Hash identifier: t93fCVWSz0/mIEwMwfuEUNoaqkUX6beV5mrpayCGIkM=
Subject key identifier: 97:95:2A:98:5E:D1:7B:17:AE:91:E3:BF:F6:F6:08:B3:DB:35:9F:F5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C122E4B3B10B2D750A5F0E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d85c790-ef3a-3bb8-a261-ada2c09fb2fc.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 68.82.14.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:2e:4b:3b:10:b2:d7:50:a5:f0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=6be1d057-d54c-427f-8ed5-295adc6fc89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e8:15:a1:30:0d:50:e3:86:a1:3f:2c:27:53:
d3:c2:df:03:a4:8b:f8:e2:70:e1:2f:90:ba:ae:a3:
71:b1:64:71:51:73:e8:78:bf:64:34:45:1c:ae:01:
24:42:5b:b4:ce:71:e8:bd:d6:48:56:1c:0f:a5:5c:
21:d0:11:a8:b3:d3:76:5c:79:ff:cc:fd:16:9a:75:
67:30:e2:a5:8f:90:6f:94:67:b8:d8:44:af:15:38:
01:c3:a9:cd:72:c9:c3:a4:6b:c1:33:5d:06:d3:98:
31:e3:98:07:74:5b:be:82:6a:36:2e:49:76:8e:ab:
2a:ad:b4:f4:86:53:9b:55:b4:c3:05:8d:cc:0b:5e:
d5:ff:04:1b:81:94:c6:d8:c4:e9:09:65:52:22:72:
a6:56:84:82:87:74:4f:ae:8f:7b:5c:f4:04:39:86:
d6:5a:c1:d8:b0:da:c7:54:17:2b:8f:dd:2e:aa:d9:
60:a7:19:c4:1a:42:f1:e4:10:10:7c:b2:cd:6c:36:
04:a9:1f:b8:a3:ea:87:59:a2:d8:2c:53:eb:76:39:
65:12:af:cc:fc:c1:c5:66:f6:2a:28:61:37:59:09:
3b:b9:40:da:83:47:84:da:60:08:f1:23:47:54:78:
9d:af:eb:8f:8c:3e:b0:9b:8c:cd:28:bb:56:83:a6:
ab:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:95:2A:98:5E:D1:7B:17:AE:91:E3:BF:F6:F6:08:B3:DB:35:9F:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d85c790-ef3a-3bb8-a261-ada2c09fb2fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.82.14.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:b6:93:5c:4a:93:40:b2:e4:ef:77:3a:77:15:ec:b8:72:a5:
4c:b9:89:b7:30:30:ef:df:97:73:a0:ca:82:e3:e9:b2:0f:30:
50:a0:77:f5:a3:f9:08:ff:0f:5f:af:8f:28:09:4c:39:d4:c2:
7f:98:68:b9:25:ec:e4:ee:b2:75:e2:82:a6:aa:09:98:37:c3:
33:69:75:42:e9:32:d3:a4:b6:bc:9e:20:0c:ce:33:7c:4e:81:
80:72:ea:02:b2:83:84:50:c2:25:cc:6f:10:e3:23:47:d9:e7:
0c:2e:92:70:b6:21:d9:5e:cc:a9:72:4b:79:9e:f7:2a:85:bb:
4b:7c:46:d3:d7:ad:ee:8a:2a:46:41:30:cb:c9:e8:8c:b8:a4:
4c:98:1a:b3:5b:41:f3:94:0e:63:96:74:85:9b:de:2a:0d:82:
28:cc:a8:5e:fc:56:25:22:62:f1:1f:76:4c:5d:77:dc:5a:13:
ca:5f:db:99:56:f2:14:5d:13:42:c8:26:e6:c6:f8:7d:59:9f:
01:ab:a3:2a:72:1c:c0:0f:f5:3d:32:b6:33:9a:d5:ee:ec:63:
4e:a1:9c:b5:91:e0:85:e3:1b:eb:fd:1a:5b:5b:48:47:96:12:
69:7a:1c:34:93:64:59:09:16:55:32:a3:f5:0a:0f:48:b2:28:
27:2e:66:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:49:15 2025 by rpki-client