Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/756c0b22-40b4-3bfb-92d3-fb015ea9acd2.roa
File: 756c0b22-40b4-3bfb-92d3-fb015ea9acd2.roa (raw, json)
Hash identifier: ssnLi9mL4Jm0uDJ2vqWEHQOh8IbM5vlZqWQA0PK2enY=
Subject key identifier: 74:E9:AB:28:98:63:23:C7:C4:7F:18:CA:FF:32:D3:36:C3:28:09:08
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B5316525B441705AB6540
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/756c0b22-40b4-3bfb-92d3-fb015ea9acd2.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.37.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:53:16:52:5b:44:17:05:ab:65:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=62b2e81b-709f-45c2-9c13-c8fee15c837d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:94:ac:ee:06:10:a6:6b:b2:29:f1:23:79:14:
33:f8:69:af:30:87:d0:d5:a6:e6:cc:53:3d:27:dd:
a8:7c:27:fd:25:cf:83:68:33:a2:9a:fb:fb:11:2a:
a6:b9:15:5a:21:ff:20:52:18:3a:f5:da:07:66:b2:
9d:11:f9:99:34:83:2c:43:21:19:cc:be:81:63:1d:
c4:81:e0:97:e2:cc:85:d5:eb:15:96:56:fc:98:d2:
d9:80:05:61:14:84:69:39:39:c6:8d:87:32:eb:cc:
52:66:99:79:e4:89:14:99:c5:bb:08:88:a1:16:cc:
ea:c6:55:fc:90:ce:62:82:83:76:da:5a:6b:7b:5a:
9f:53:18:fb:6d:a5:78:38:ac:6e:10:f3:f2:80:85:
60:bf:bd:f9:7e:9b:da:08:3b:92:c3:89:7d:ea:56:
ad:12:55:26:e5:a1:d7:76:06:d2:8d:43:77:e7:ce:
71:a8:2b:ad:a6:a1:e6:f4:49:20:4c:e7:b9:e9:f1:
fd:dd:4b:54:53:ab:c3:63:7f:d9:c7:30:93:16:9a:
ab:38:24:a6:78:05:74:6d:a6:4e:f9:1d:a8:95:f3:
80:7a:8c:df:82:73:f3:20:f4:f8:07:38:bc:e6:f1:
ed:cf:d9:5f:39:3b:b1:fb:1c:e5:28:e8:28:0b:e9:
87:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E9:AB:28:98:63:23:C7:C4:7F:18:CA:FF:32:D3:36:C3:28:09:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/756c0b22-40b4-3bfb-92d3-fb015ea9acd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.37.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:ce:50:23:92:06:d9:c5:c0:b3:f0:be:3a:c0:72:a5:f5:75:
e6:6a:d8:cf:e6:2e:12:e4:e7:b2:30:22:03:eb:27:64:c7:ec:
38:c4:8d:3c:a0:6d:d2:3d:58:52:63:97:5b:9a:46:7f:d9:d8:
8c:14:4b:8d:0c:10:0a:64:8e:65:e0:86:ba:ab:57:50:a4:84:
8d:b9:c9:64:14:a2:19:8d:6f:9d:15:68:42:38:42:8b:05:76:
6e:69:51:33:df:9a:65:cd:64:e8:89:7f:b2:87:9f:c3:5f:bd:
20:0f:29:dd:13:c4:f4:9f:89:47:0a:ff:a9:c6:93:39:70:f1:
cf:3f:f6:4d:5d:c4:7c:75:f5:a6:d3:a0:55:1a:e2:26:05:0a:
59:43:87:8f:64:3d:7c:03:0c:fd:67:23:8d:99:7d:6f:e3:f8:
cb:ac:ab:a9:73:76:a8:66:8b:d9:80:5e:bb:16:9e:54:e5:b4:
19:65:40:43:34:67:cb:40:c2:0c:1b:f7:f2:60:50:cf:5a:7b:
15:cb:df:fa:41:75:d1:b5:e5:f3:99:b7:52:a8:5f:9d:be:a1:
4d:3d:13:65:1c:5f:67:1b:2b:80:be:1c:73:7c:c5:4e:33:23:
ff:f9:a1:ab:26:71:f2:85:15:e8:4d:f8:10:44:3b:60:df:f7:
aa:3f:d5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:05:24 2025 by rpki-client