Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b8bb9f4-967f-3d58-8336-475e7c3d4fae.roa
File: 5b8bb9f4-967f-3d58-8336-475e7c3d4fae.roa (raw, json)
Hash identifier: AT+SPPoaFRRaXZ+rYQ3dAnY5nnuxWqaJaUPDn7D6vlY=
Subject key identifier: 43:C2:F8:A6:83:CE:92:F2:36:73:F3:FA:5E:1C:A1:57:A2:EE:4B:71
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B6339289E7E2912DF2580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b8bb9f4-967f-3d58-8336-475e7c3d4fae.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.56.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:63:39:28:9e:7e:29:12:df:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=0c31cc4b-c285-47ce-89e0-0a93c943a840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:26:2d:3a:2a:10:95:9a:92:a3:e4:aa:c1:b5:
47:99:f1:10:51:6f:5c:bd:9e:b7:ba:52:ce:22:74:
b1:5d:27:21:00:d5:34:e6:a8:b2:3b:71:12:26:a0:
38:a8:f5:c7:95:61:61:3b:0d:f7:a8:b6:94:8e:b2:
aa:6c:bb:02:f8:33:94:8c:a9:e1:62:bb:5a:9e:2b:
d1:c6:95:4c:e9:43:e3:b7:4b:00:24:00:c0:5c:aa:
4c:a6:27:89:ff:81:4b:2c:bb:53:c4:ba:9c:92:e1:
08:78:05:9a:d3:0c:fb:23:34:61:8a:8f:b3:cd:ca:
9c:41:0f:a5:5d:a8:81:35:46:71:30:de:f5:58:ab:
9d:ed:a2:4b:67:0f:a6:3c:8a:6e:68:4b:6f:ee:26:
cd:f7:0a:3f:27:3f:63:5d:c1:69:ca:99:8d:ee:6d:
22:37:5c:49:81:17:69:b8:8c:04:92:7d:1f:91:15:
97:25:88:8f:61:1b:3e:ad:06:c8:73:ae:88:c6:1c:
02:df:86:23:9f:99:25:d5:34:51:2f:ca:35:16:a4:
f1:02:13:f5:6a:71:90:0c:3d:1a:70:cd:95:1b:b8:
34:49:37:10:5d:67:86:b3:7d:67:f8:1d:f9:ad:95:
94:af:07:2a:58:25:5c:e0:e7:59:82:33:df:6c:6a:
a5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C2:F8:A6:83:CE:92:F2:36:73:F3:FA:5E:1C:A1:57:A2:EE:4B:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b8bb9f4-967f-3d58-8336-475e7c3d4fae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.56.165.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:85:a8:23:2e:cc:1b:06:b7:b4:e8:93:0c:e0:a7:41:f3:d3:
33:9a:e8:0b:32:93:69:06:0e:1a:70:32:93:a9:c2:20:8f:e2:
dc:37:0e:9b:da:c9:68:28:25:a1:46:c1:c7:ca:9c:f8:8e:38:
4a:47:07:7d:6d:59:0e:25:7c:fa:2b:de:30:27:56:7a:88:c4:
19:93:d1:05:6d:f5:d7:14:11:0b:eb:0b:7c:53:9b:bc:0d:15:
87:6a:a9:f2:e6:d8:00:29:2e:af:7a:16:e9:72:d3:03:ab:f8:
1b:51:86:5c:57:ff:5a:51:aa:76:fc:75:53:63:d1:b8:3d:72:
51:15:fd:6a:b2:e0:c2:3d:a1:a4:8e:d5:d3:35:a3:68:6c:ac:
06:65:70:aa:7c:8a:03:9c:5a:78:77:be:dd:53:12:7f:23:73:
1c:ae:41:5e:5d:89:26:7a:2e:2a:8e:a9:1f:ad:8e:04:a5:18:
dd:1d:6c:5e:f4:79:ee:7d:a8:2f:39:92:60:20:c4:17:29:4a:
7d:b8:1d:77:88:c0:a4:79:82:41:92:a6:ac:73:da:68:02:d9:
6a:43:f6:e3:4e:1f:f9:64:a8:91:5a:da:6c:79:78:1e:87:61:
da:d9:e6:39:98:92:9c:4e:12:2d:86:32:07:27:fe:fc:08:ba:
72:95:29:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:57:46 2025 by rpki-client