Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/960a9c15-7b1b-3c45-ba06-a9297d4b5193.roa
File: 960a9c15-7b1b-3c45-ba06-a9297d4b5193.roa (raw, json)
Hash identifier: ZKx7Zqx2Lui+pwKGtbDzgf6JsWQZnUSX9Rqw32dnlw0=
Subject key identifier: 03:32:CE:C5:64:3D:C0:8A:5A:C5:2A:A4:97:E3:8D:61:77:3A:D9:63
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C127BC8E709DE4D03091F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/960a9c15-7b1b-3c45-ba06-a9297d4b5193.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 68.38.210.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:7b:c8:e7:09:de:4d:03:09:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=245e42d9-5d61-425b-a7d9-dde61a35aa23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:90:9c:9a:b2:61:f8:d6:ed:8d:bc:50:d1:07:
8d:d3:fe:f5:dc:73:90:15:da:f0:4a:9e:78:d7:6f:
8a:6b:74:97:26:27:1a:92:b1:74:54:7c:b7:61:14:
0a:a2:d9:e6:c6:97:85:f3:a1:56:19:a8:f8:7f:2d:
e2:0a:c2:fa:c4:e0:18:5d:ef:2a:89:a9:ae:49:bf:
bd:95:4d:09:b6:7f:97:a2:bf:2a:36:36:86:08:c7:
4e:81:d5:ff:da:f8:47:c0:4b:45:90:00:1d:50:05:
80:29:c5:49:b1:cf:6f:a8:f0:60:45:07:89:bb:fc:
bb:cf:20:bd:98:76:ab:24:e0:a4:5d:55:3b:dd:25:
f0:04:f8:1b:31:26:62:65:33:dd:25:a0:b4:d4:64:
fa:b6:83:5e:d6:03:35:c9:e9:2e:dd:bb:b2:ac:76:
80:5f:ee:e1:57:ba:ca:05:f7:7f:0a:52:96:ea:55:
65:b9:6c:4e:4b:87:a6:7d:24:2b:44:ad:63:d1:33:
8f:4c:12:1b:5f:93:23:22:f0:3c:b3:44:51:2e:0b:
07:49:b9:8e:f5:93:5e:8a:50:a5:c7:70:27:a6:4c:
37:2c:e0:ca:1f:4a:b4:3a:9a:cf:1f:e0:60:64:a9:
65:34:33:13:f0:ac:00:ac:d2:d9:5c:8a:2a:37:1c:
66:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:32:CE:C5:64:3D:C0:8A:5A:C5:2A:A4:97:E3:8D:61:77:3A:D9:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/960a9c15-7b1b-3c45-ba06-a9297d4b5193.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.38.210.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:2d:30:40:7a:62:29:ff:aa:30:5a:a3:c9:5f:a4:6a:c1:b4:
e3:3e:3a:61:b9:83:a3:2e:dd:1c:cf:d8:24:3b:d3:1c:dd:0a:
fc:4f:78:03:c5:3f:9c:ec:a5:77:57:8a:4b:fa:f4:ac:ef:e5:
15:f6:50:c8:4b:1c:42:af:f8:d4:0b:be:b4:9e:43:a9:b2:69:
05:37:b2:c6:50:f7:98:02:bf:23:68:c3:40:33:59:f8:d2:aa:
26:fc:5f:51:88:1d:f9:b5:c9:ee:b3:ba:b5:51:1f:9b:cc:68:
fb:9f:77:de:b3:28:bb:47:08:8c:38:d6:d9:73:ab:bf:6d:96:
28:1e:40:87:d0:0a:dc:69:ed:09:13:ba:63:19:fe:2a:9d:f6:
d0:44:6d:be:9f:38:93:2b:11:81:f6:6d:70:bd:f6:56:97:b1:
71:61:5f:b3:2f:ef:ed:d7:a8:c8:07:4a:c3:b0:96:a8:c9:5e:
b6:7c:7f:17:24:61:b2:85:dc:c3:ac:5e:e5:f2:b2:d8:ec:1a:
c0:a1:d6:82:76:f4:d9:0f:80:ad:17:09:f8:1d:a6:c2:72:55:
2e:73:f1:9e:dc:ab:8a:47:08:9a:c3:c3:a8:96:13:c8:66:2a:
bf:53:b8:a8:fe:87:b7:26:c1:99:f3:9e:6d:d1:37:28:9d:fc:
ce:08:4b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:00:33 2025 by rpki-client