Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5168c06a-378a-3b4d-9c8d-5d7dac02755b.roa
File: 5168c06a-378a-3b4d-9c8d-5d7dac02755b.roa (raw, json)
Hash identifier: VyMcYmEFGKzfkONn2ZDqVOQGgQNGQRYt67LnRMfCCyE=
Subject key identifier: 73:F6:0E:DA:C9:62:0A:4D:19:C6:35:8B:AC:26:85:85:49:1C:25:46
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B537CCAFCBA6D62B4C280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5168c06a-378a-3b4d-9c8d-5d7dac02755b.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.40.12.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:53:7c:ca:fc:ba:6d:62:b4:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=80556ce1-7eee-428a-b11b-dc77c469d3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:30:01:58:85:6e:79:f3:c3:c1:fe:48:bd:57:
56:d7:75:42:ea:7d:8e:11:f2:42:9e:9e:2b:ef:9e:
26:12:0c:08:f5:52:51:9d:b3:bd:7f:3c:14:d1:08:
8d:11:32:09:64:a9:3a:99:85:9a:4a:b4:ba:fb:e8:
45:8b:e6:00:73:c9:db:58:ea:f8:56:3c:02:0d:9b:
22:79:d6:ec:4c:57:6b:a6:53:95:5f:5e:4f:35:29:
7a:4e:23:7b:52:20:dd:5e:a6:2c:c9:d8:7a:eb:e7:
df:f5:40:48:40:d5:06:78:33:73:f7:d4:8c:08:df:
d3:6e:fe:01:01:6e:40:1b:3d:bb:08:66:b0:a8:e9:
10:c2:65:4a:0f:04:30:e1:1e:44:64:ae:2f:e2:6e:
5b:8a:6c:33:5d:d7:a0:98:60:c9:a5:54:e9:05:6e:
16:71:09:a8:63:ec:1e:35:a3:83:be:60:34:83:07:
0b:b8:83:92:c1:14:a1:b7:79:66:3b:ec:83:93:d7:
b5:46:8a:bb:5e:f2:29:77:34:5d:87:d6:4b:f7:7c:
ab:26:27:b1:c9:b9:10:9d:00:f0:ff:07:1d:1e:18:
4c:96:52:18:1b:e2:11:d1:2d:a6:5f:52:59:7e:2d:
3f:9f:6b:6a:80:fd:cb:d3:f5:e9:5a:d1:0d:d2:15:
19:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F6:0E:DA:C9:62:0A:4D:19:C6:35:8B:AC:26:85:85:49:1C:25:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5168c06a-378a-3b4d-9c8d-5d7dac02755b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.40.12.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cf:3f:41:9f:48:53:0a:66:ab:e8:45:71:24:b3:ee:9f:18:84:
3b:ee:eb:81:0b:e4:86:36:54:a8:a4:87:b1:93:e7:48:50:02:
30:be:cd:e6:7f:88:22:71:be:7b:ad:46:ec:8c:fb:c8:2d:a9:
07:30:83:45:b7:35:ad:20:fd:0e:db:a8:f4:03:f5:60:b7:38:
42:55:46:1c:6b:a5:8d:a2:dc:3d:96:e7:3e:d1:90:c9:aa:5c:
4e:0d:bf:02:2b:90:fb:d8:1a:a9:1c:7f:2e:a8:25:a6:b6:6c:
3b:54:09:e1:bf:d0:69:ca:e6:d5:10:59:18:ec:de:99:b9:90:
77:6a:b6:4b:ad:7f:61:e1:30:cd:21:68:9e:56:48:e3:a2:2a:
cc:86:0c:b2:4e:bb:6c:b7:e5:26:cf:7a:37:cb:21:8d:b6:5f:
9b:45:bc:60:3f:9c:9a:76:2a:d5:88:8b:30:6f:66:43:fb:b3:
f3:d8:12:82:4e:3a:53:c7:02:18:4c:2f:cd:9e:0e:d7:10:bb:
69:90:74:d1:36:03:80:45:69:41:ec:e7:5e:2d:17:14:3c:56:
29:5f:93:6a:74:b0:08:52:62:d6:25:b1:37:1a:4d:32:2b:d3:
6e:b8:b9:6e:47:19:f1:e1:79:33:c9:91:f6:8d:ba:18:eb:8b:
06:ed:1c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:23:49 2025 by rpki-client