Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f028fed-c8c2-3315-9521-cbd759730581.roa
File: 8f028fed-c8c2-3315-9521-cbd759730581.roa (raw, json)
Hash identifier: Q0eTuj08HIBaHwxfGiw9Ktkc0KA4YfenHiH4gBMKvbA=
Subject key identifier: EA:1D:5B:82:11:6D:7B:04:A3:9F:C2:1F:60:48:80:E3:3D:CC:D0:F7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10DD5BE5C0F676ECFB9BE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f028fed-c8c2-3315-9521-cbd759730581.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 68.39.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:dd:5b:e5:c0:f6:76:ec:fb:9b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=0b772168-3565-46f7-adcb-0e4a191f9326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:c9:e5:d5:bd:b3:c7:ee:4e:e5:3c:ac:84:
b7:e4:cb:35:cf:16:1e:bf:95:dc:f7:d8:e1:b5:9a:
a3:55:a6:49:dc:99:f5:a5:d5:72:25:5e:d4:8d:42:
2a:b9:da:64:af:41:64:40:0d:41:8d:3e:e8:d9:40:
89:85:7d:c3:06:87:25:22:66:68:a7:56:2c:99:ca:
3c:7f:bd:d9:a1:dd:21:c0:d5:aa:ab:c5:0e:d3:6c:
c4:0d:6e:82:e1:fb:4c:75:3c:16:ce:f4:69:c3:eb:
96:d7:cc:cf:3a:08:22:3f:27:17:bb:05:ea:c5:08:
09:2c:be:c5:3d:dc:1e:7b:38:36:a7:c9:67:54:49:
1d:4b:37:63:4f:53:71:27:1d:78:af:b0:68:e7:1b:
37:a6:f6:11:22:d3:9b:85:e7:f7:04:dd:9b:9b:71:
a3:ab:de:72:fd:20:88:92:2d:2b:c3:0e:57:13:54:
a7:c7:48:31:84:20:56:73:f6:76:fe:83:a8:0d:1f:
a6:e0:6a:51:75:59:a7:64:a9:6b:05:9f:cc:6f:f8:
cb:ed:9f:42:d5:05:1f:86:74:88:65:56:50:f4:0c:
da:f2:bd:8b:f2:a6:6c:71:a8:2d:6d:88:d8:a5:b7:
c8:a2:42:ba:63:56:69:e2:b9:1b:4f:c8:af:e3:e0:
c3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1D:5B:82:11:6D:7B:04:A3:9F:C2:1F:60:48:80:E3:3D:CC:D0:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f028fed-c8c2-3315-9521-cbd759730581.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.39.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:19:51:17:f2:ad:00:0b:2d:8e:4a:de:3c:d3:25:1d:63:15:
b5:f5:0d:10:b5:73:ed:11:f8:77:1f:8f:0b:61:dd:f9:da:a0:
cf:8e:d4:f5:ef:a4:88:35:f0:c2:da:07:6a:14:33:d9:b8:ab:
54:9a:3b:1a:4d:a7:66:7f:ee:d8:38:ab:74:be:32:56:ef:7e:
44:cc:78:be:7c:47:d4:76:d8:eb:db:5f:64:7b:6d:33:f3:f9:
0b:6b:43:76:1f:67:de:52:91:e7:a3:4b:e7:7c:37:ca:25:f5:
82:4e:ce:bc:f9:0c:1b:da:1e:69:73:37:f5:db:6b:13:54:84:
73:4a:d0:42:5e:86:3d:2a:5f:1e:b4:df:5b:34:a1:c5:da:1f:
4a:c4:a5:e7:4a:02:b4:75:09:fd:59:4d:04:84:00:7c:a6:81:
b4:14:fb:b5:7d:6f:4c:f8:d7:92:10:e4:af:9a:c9:63:b2:dc:
3b:20:4e:6b:e6:14:e2:22:e3:9a:16:31:b0:f3:4e:99:58:a0:
45:51:e2:cd:9e:ee:ec:fa:65:d2:21:10:d8:14:72:76:3e:a7:
39:cc:d5:9e:d7:aa:42:76:69:d4:c8:93:63:ee:6c:8f:24:d3:
d2:23:ac:fa:71:11:65:f6:59:fb:60:e8:ef:bf:b8:98:dc:8f:
6a:c0:84:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:16:38 2025 by rpki-client