Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/757ba969-8a87-37ab-8ea0-5ef502f459d3.roa
File: 757ba969-8a87-37ab-8ea0-5ef502f459d3.roa (raw, json)
Hash identifier: iZSaGYIEzXblpnMXCOh8FveZDTqNH7sBkq1xttKq/+4=
Subject key identifier: 47:DF:98:87:57:22:CE:E1:3D:29:4F:9D:2B:6C:CE:B0:BD:C6:74:DD
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F28FB90337BCAFF281900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/757ba969-8a87-37ab-8ea0-5ef502f459d3.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.37.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:28:fb:90:33:7b:ca:ff:28:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=9b6e98f4-28f6-4062-abac-3208b58b4f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cd:80:e7:e9:72:fb:1e:3c:68:a8:6e:52:85:
14:5b:92:f4:e6:ab:66:a1:fc:e6:84:df:41:52:38:
b8:dd:f6:b6:fe:0e:ac:a3:c1:82:88:8e:a3:ad:bf:
7c:2b:38:5a:29:77:ac:26:49:1e:e0:23:f6:ae:0f:
27:9a:51:5e:39:36:87:21:7b:43:36:98:d7:b1:ea:
8d:c5:3f:bb:0c:fe:39:c7:16:10:bf:0d:0c:5e:32:
1c:6a:9a:2b:44:fa:bd:40:34:0d:2f:c9:81:f6:dc:
fd:5a:1b:88:76:12:02:da:8b:95:79:28:58:8c:50:
3f:47:b2:28:47:7e:ab:41:0d:91:41:86:9e:12:0a:
45:f0:a6:a7:62:1e:30:ba:f5:3a:bd:f4:b2:82:11:
77:9c:b8:62:ff:1a:6e:8e:bd:7b:75:f8:ea:c4:8f:
a0:fd:21:68:fa:77:12:82:b5:f1:82:4b:3b:f7:ab:
fa:18:2f:cb:1a:1c:56:f3:01:49:5d:66:63:b8:9d:
ae:18:75:ce:89:ed:2e:09:c9:28:48:c8:e5:bf:59:
10:87:24:22:15:2c:8f:11:c0:54:ff:c4:e7:97:68:
1e:b1:e8:45:8a:8a:8b:2e:ee:9a:a3:99:77:f6:c5:
c2:b3:d1:97:a9:69:07:f0:f6:4e:0c:83:82:52:5e:
a5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DF:98:87:57:22:CE:E1:3D:29:4F:9D:2B:6C:CE:B0:BD:C6:74:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/757ba969-8a87-37ab-8ea0-5ef502f459d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.37.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:ce:6b:11:c4:ed:33:52:27:c3:fe:eb:52:36:7e:a2:0a:d2:
bc:7d:aa:fb:b7:d5:1f:d7:a5:42:7a:ab:b7:f1:bf:88:a1:9a:
86:8d:03:4d:36:8b:ca:9b:74:d4:2d:e1:ab:a0:c6:25:85:79:
46:89:7a:6f:2d:2a:d9:b1:03:52:17:fd:98:78:ab:5b:f5:ff:
ba:dc:1c:5e:0e:d4:fc:3e:e7:dd:38:f3:f9:38:7a:62:ce:0d:
ae:99:11:40:0b:9b:52:a4:44:36:d0:21:68:bf:b0:c5:f3:00:
55:88:2b:fa:d4:32:61:d8:64:66:5f:b5:cd:4b:ef:c7:e7:15:
91:05:16:3b:5a:66:db:c0:cd:76:f0:99:8b:d0:d8:1b:9d:e6:
b6:3d:2f:4b:55:46:4d:b0:70:6d:c9:78:50:5e:cc:79:0f:d1:
bc:29:5f:50:b9:24:7f:1e:8b:d3:3e:0e:04:6d:71:a2:67:6d:
9f:34:90:08:30:f7:01:b1:f7:66:68:55:e6:0d:5e:b7:8c:bb:
80:e0:a4:d5:89:77:ad:91:43:f9:1c:ca:5d:cc:7a:b8:7c:e7:
e5:24:82:9b:4f:14:c0:f2:89:4c:fc:a2:88:04:73:f3:17:1c:
4d:f3:c6:e9:03:d1:0e:8f:d7:5d:7b:6b:c4:a0:9c:4e:71:55:
4f:61:39:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:41:18 2025 by rpki-client