Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/556c0978-cb85-32c7-8926-4b4c8aa4139e.roa
File: 556c0978-cb85-32c7-8926-4b4c8aa4139e.roa (raw, json)
Hash identifier: a3YSr/qxH9ki0/L2FkGwwWHJXiRMLZpOov6b4tCY3kc=
Subject key identifier: C1:21:94:11:D7:72:56:92:77:64:2A:A6:2C:EA:35:CB:C0:A9:71:3B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B4CC6E1F061F33B6EFD00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/556c0978-cb85-32c7-8926-4b4c8aa4139e.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.34.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:4c:c6:e1:f0:61:f3:3b:6e:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=930d893b-e6e4-406b-9c06-7c219e9acf8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:84:c8:41:39:3d:77:81:26:7f:35:a6:49:55:
77:13:9d:e7:7c:c1:f2:cf:3f:a7:96:8d:49:7c:37:
f5:c1:20:18:9f:23:0f:6c:3b:d8:0a:19:af:16:f8:
82:93:1e:e0:2a:af:99:f6:27:9d:9c:69:9e:79:19:
3d:3a:7d:67:2f:af:68:50:09:3e:f9:ad:88:ba:4a:
79:7b:3c:cc:3e:0b:69:bc:de:8d:29:01:1b:b8:00:
66:e0:1e:23:96:ae:47:36:8d:ee:0e:3e:79:d6:a0:
1c:46:f5:48:f1:d0:86:0c:8a:c0:d4:49:0e:b0:fd:
3e:b7:22:24:63:7b:d0:5e:1c:5c:41:a3:51:a2:96:
a7:62:89:39:75:b5:c4:11:79:db:a2:f4:64:ad:dd:
84:93:ae:4e:eb:06:1a:b6:30:11:b7:ad:84:be:8a:
41:d8:3c:87:0e:4d:61:b9:b0:a8:84:e0:0f:47:bf:
df:23:cc:63:ae:32:c2:e4:e0:02:de:16:8f:6e:f8:
05:7a:48:21:7e:db:d0:61:e3:45:78:a2:21:85:e2:
fd:37:06:1b:06:8e:0d:02:0e:cd:97:50:b7:ff:4d:
0e:78:57:ae:98:dd:08:92:18:94:24:cd:f5:dc:d8:
4c:54:bb:70:5a:5e:e8:93:c5:13:6c:df:58:49:3e:
3d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:21:94:11:D7:72:56:92:77:64:2A:A6:2C:EA:35:CB:C0:A9:71:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/556c0978-cb85-32c7-8926-4b4c8aa4139e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.34.61.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:33:c9:a9:9a:a8:b8:d6:c9:c0:a7:48:b5:bc:b1:55:75:5b:
42:2b:ea:a0:5d:6f:c8:6b:0f:02:b4:3e:da:42:c1:19:c4:89:
26:67:8a:7c:80:a7:56:ab:25:82:6a:27:cd:fa:7a:0d:d4:c0:
1e:ec:8e:f4:dd:63:d6:c7:35:0e:55:20:43:c4:81:9a:9e:f5:
fe:ff:a6:84:83:9a:5c:ea:f7:29:4e:fe:40:a3:24:a4:e6:c2:
be:c9:06:ea:a7:7b:49:bd:a8:19:91:5f:ac:f1:72:52:36:a0:
cf:2c:e7:3a:20:1f:94:cb:3f:f5:5b:4f:ae:07:e3:2e:3a:08:
94:5b:3f:96:6a:c0:70:94:66:b8:c4:6e:64:c7:ef:59:55:ae:
ac:dc:14:4d:d1:59:38:5a:5f:68:b2:1b:e5:dc:98:7e:6b:a5:
c1:81:45:8a:e8:1d:e7:9d:51:06:92:0f:14:7e:1c:97:ce:42:
03:44:47:89:80:fb:53:2f:fe:84:e6:ef:cd:97:2e:e2:96:27:
61:59:a7:eb:4b:e4:39:66:86:e1:94:6a:1b:3b:6f:1e:fb:bf:
4d:91:52:a1:ca:33:0f:16:52:bf:c6:a8:b5:67:b5:85:b2:34:
cb:32:32:30:c3:34:2d:09:8c:a8:a2:20:d0:94:2a:41:41:cc:
58:4a:de:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:07:58 2025 by rpki-client