Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8aba4da5-d74e-3f32-95bd-5eada832d181.roa
File: 8aba4da5-d74e-3f32-95bd-5eada832d181.roa (raw, json)
Hash identifier: 92pO+RGOPb2w6RYPLS0Bm/9Ur210s5paTYmO0V0e4iY=
Subject key identifier: CE:67:DA:BC:80:F6:1C:F0:61:F4:A5:C0:8D:31:CD:A5:A2:73:5C:5B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B657512E4AE9471337A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8aba4da5-d74e-3f32-95bd-5eada832d181.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.58.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:65:75:12:e4:ae:94:71:33:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=c737b989-986b-47e1-bc46-c0b53cf3ae90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:88:28:cd:77:8f:bc:d7:b2:da:6a:14:11:cc:
57:47:b2:c7:8b:79:d6:69:6a:8b:4b:ff:4a:12:76:
43:03:13:8d:60:46:66:fe:09:62:5d:a0:85:9b:2d:
2e:b5:11:93:18:fd:95:b7:d7:6b:8b:7a:5f:6f:8d:
a1:f3:92:12:b8:26:00:30:34:16:6d:c0:5d:b6:81:
c9:38:d3:f6:00:17:79:96:f8:71:b8:27:52:db:d4:
fb:38:b2:36:ee:30:b8:1d:ea:9c:be:f4:bc:5f:bc:
24:8a:08:57:60:99:19:49:a3:53:c2:ab:a9:d8:e9:
95:9a:5d:35:88:6c:84:aa:ad:ae:4f:35:48:72:ca:
6b:00:72:78:f2:71:98:91:b8:bf:b2:cb:8a:49:ba:
5f:00:e5:d1:12:57:3e:4f:c9:56:a7:a4:c5:be:c5:
6c:fa:55:3c:c7:fd:5e:ce:f6:99:de:0e:f4:cf:5a:
7c:8e:dd:30:41:9f:bb:23:05:db:9f:c0:3d:7b:f6:
07:f9:ca:43:5f:95:01:1a:bf:36:e6:8d:16:0f:d2:
91:10:2c:2f:9c:17:dd:83:62:1b:36:8a:e7:da:b8:
12:c2:38:68:d0:c9:98:5f:54:57:1e:fb:40:4b:99:
19:07:9a:26:eb:b4:54:eb:a6:ea:c5:7a:c5:81:d9:
6b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:67:DA:BC:80:F6:1C:F0:61:F4:A5:C0:8D:31:CD:A5:A2:73:5C:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8aba4da5-d74e-3f32-95bd-5eada832d181.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.58.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:38:5e:d2:66:4d:93:00:70:fc:30:23:43:8a:31:9c:fd:2d:
92:1d:6b:19:dd:9f:06:58:e9:74:ac:a3:d1:f6:60:79:34:f8:
09:60:e2:c2:81:0d:68:73:26:fc:45:99:aa:91:bc:8c:50:72:
df:ae:44:78:72:97:c9:fa:a3:de:ca:2f:bb:87:35:8a:c8:56:
d7:9c:65:7f:ed:96:9f:cb:c2:a6:b1:64:b7:0a:f4:4d:f6:23:
30:4f:36:35:0c:a5:fa:6a:8d:fe:99:19:17:57:a3:7e:ab:81:
99:a3:ae:ec:44:2e:ed:de:cf:bc:e3:91:f1:0d:48:ea:e9:6e:
a9:a0:3e:62:13:d9:39:74:bd:e8:76:a1:3d:10:23:0f:0c:d1:
7a:0b:e8:cf:43:01:13:81:3d:c3:0e:87:e6:78:96:b4:f1:75:
5c:bd:e1:59:a3:45:37:f5:fc:0d:ff:c2:e6:43:c1:b9:83:0b:
12:31:53:ab:e3:6e:e7:73:e7:d8:3d:66:be:8f:44:56:f0:f5:
a9:ac:bf:a6:6e:42:84:3d:e7:12:d9:c0:1c:4e:ca:9f:d5:cd:
bc:e7:8a:97:54:40:1e:3e:8f:4b:37:0d:68:80:a7:3c:0d:1e:
ac:c5:8b:b1:ac:12:5f:d3:98:e9:23:98:30:dd:83:92:6f:50:
e2:d7:47:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:15:02 2025 by rpki-client