Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d1f7826-3d31-3968-88e1-911730883791.roa
File: 5d1f7826-3d31-3968-88e1-911730883791.roa (raw, json)
Hash identifier: 0R04+l/eLthsQkF+RABP7WWnurBNMFp2rRxhQBX4chU=
Subject key identifier: 6C:BD:87:DD:C6:1A:2B:00:36:06:D6:6E:A7:BC:8A:B0:65:6A:2B:7E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B58540C7879310E6C8E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d1f7826-3d31-3968-88e1-911730883791.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.42.64.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:58:54:0c:78:79:31:0e:6c:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=395b54c7-b3f9-46ef-95cb-642f30d7f6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e4:b1:d1:7d:f1:8e:84:29:9d:b6:a1:4e:81:
1c:c9:c6:aa:ff:76:ba:cc:dd:80:9c:53:0f:48:8b:
2f:17:98:1f:cb:b0:ff:76:66:3a:6f:49:a3:49:7b:
e2:a5:4b:a4:c6:c2:53:ae:a7:b6:6a:78:a6:3b:84:
8a:30:ee:65:32:35:42:a5:52:9c:ee:75:f9:95:df:
e8:6c:02:69:ca:3c:b7:95:81:2e:11:c9:e2:d2:39:
e9:43:de:1d:c0:6f:a3:67:99:0d:fe:35:65:a2:73:
4e:9b:94:dd:0f:6d:90:75:64:25:6a:a9:00:6f:50:
70:29:96:4f:55:9f:8b:b5:c2:c0:40:56:bd:f1:13:
62:93:e0:4c:57:90:9f:d1:9b:06:d9:ed:b1:21:a3:
00:85:e3:5d:b7:54:c9:bb:e6:c2:6b:22:a3:7e:00:
14:e3:4e:88:d0:58:dd:25:88:ff:e2:d0:9a:43:b4:
54:4a:98:8c:79:05:a9:fd:5e:4c:80:91:e0:c1:b1:
ba:49:11:93:93:1a:d5:db:ce:6e:d4:cc:1f:3b:50:
c9:54:31:b9:03:95:8f:a4:45:44:53:75:f6:6c:4a:
3e:12:ca:19:ae:53:64:d3:84:91:95:db:d7:f5:7e:
ea:a7:bf:bc:4d:e0:72:d8:b8:11:f6:f3:e3:46:71:
55:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BD:87:DD:C6:1A:2B:00:36:06:D6:6E:A7:BC:8A:B0:65:6A:2B:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d1f7826-3d31-3968-88e1-911730883791.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.42.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:a0:c5:f7:b7:0b:60:df:9f:e8:f3:2a:92:2a:a7:16:b5:77:
f2:94:5f:70:4e:76:a9:b6:b1:8f:a4:d3:5b:2e:ab:5f:50:36:
98:5a:1c:db:ff:e3:dc:a1:fa:d0:9a:e5:83:1c:86:11:5a:d2:
36:4b:78:ab:76:5b:1a:13:f1:27:53:9b:69:69:e0:63:28:da:
17:64:a1:ba:5e:50:ec:24:e9:6a:6d:cb:05:b1:4b:fd:09:95:
67:f1:5d:0c:32:70:bb:11:94:bd:9b:21:ab:b7:81:1b:17:fb:
0d:a8:40:8e:d5:03:cf:4a:f7:4b:c3:6a:b2:d9:16:2d:07:20:
b2:06:40:f4:af:b3:53:68:80:a9:2d:6e:02:99:a9:83:f1:09:
49:56:31:81:05:2d:ee:5a:94:f4:fc:4e:32:43:aa:7f:f2:3a:
82:8a:10:28:61:bd:9b:22:95:59:90:63:85:12:93:49:4f:a2:
e2:b8:d9:ee:9d:ab:9e:ad:f2:a8:0b:e0:5c:c5:8f:40:f9:fb:
1b:c6:97:f0:de:3e:28:9d:21:d0:b0:1f:54:d1:e1:7f:8d:da:
bc:0a:4d:00:e0:ff:03:12:9c:b9:3c:41:55:27:c3:6a:0e:1a:
c2:6a:8f:2a:8c:fe:fe:ab:90:a3:19:5d:c8:33:82:58:68:1e:
53:5d:f4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:39:48 2025 by rpki-client