Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/960f9386-c80b-341b-afda-3a94541ef4ae.roa
File: 960f9386-c80b-341b-afda-3a94541ef4ae.roa (raw, json)
Hash identifier: agX3jxmQPz6d277h/7dX495ORLKcG/vDvnZ7qpfvel8=
Subject key identifier: 2A:D5:A6:24:14:EC:D9:C1:07:62:38:C4:67:D8:5C:69:54:97:54:E0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C128947B99AE96161E2F700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/960f9386-c80b-341b-afda-3a94541ef4ae.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 68.58.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:89:47:b9:9a:e9:61:61:e2:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=09b63525-d29d-40d3-a5d3-7d9a96df23f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:08:04:1f:0f:fd:0a:8f:ce:d7:17:4a:92:da:
b1:50:4c:06:24:9a:e6:a2:36:3c:9f:5b:6c:74:2e:
08:66:32:7c:86:0d:de:d1:9e:c4:04:d7:86:e6:f2:
16:13:27:0f:63:62:10:1c:10:d1:74:b2:f8:68:57:
b1:c0:2e:b5:9a:0e:2e:ea:2b:d2:b1:f9:7f:3b:07:
f1:0a:4d:36:94:20:42:62:40:fe:b4:05:6b:b2:10:
96:3c:32:82:65:53:be:b0:32:69:8d:e5:1c:d0:21:
e5:04:24:57:69:5c:aa:32:b3:b0:ec:69:e8:38:fa:
bf:37:08:8f:c2:e2:1c:5f:eb:23:15:e9:68:7e:2b:
41:ea:52:9c:e5:7d:0a:98:20:96:9f:5c:89:09:0b:
29:09:2e:a5:1d:4d:53:75:bb:ff:9d:cb:85:be:ed:
9e:a7:f2:2d:57:72:fa:c1:c2:d2:6f:bb:22:49:bb:
15:41:2c:4b:af:25:66:eb:25:91:62:9a:59:ff:21:
58:a5:66:96:7d:61:3c:4e:64:b6:89:d5:fb:01:f2:
7d:dc:72:87:05:e3:ac:ef:2c:8f:06:e4:08:6e:df:
bb:3f:83:1a:1d:b0:45:cb:71:dc:db:c2:d1:13:ae:
cb:a2:85:06:6b:ad:95:72:08:66:e1:fa:89:34:0f:
ce:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D5:A6:24:14:EC:D9:C1:07:62:38:C4:67:D8:5C:69:54:97:54:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/960f9386-c80b-341b-afda-3a94541ef4ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.58.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:7b:7f:15:a0:2a:29:d9:04:d3:af:11:20:a2:16:ea:9f:92:
63:94:0c:b3:07:f3:d5:13:42:0d:80:8a:d7:a5:c6:f9:a2:f6:
7a:21:e9:fd:28:9c:62:c5:cc:11:cd:09:ed:0e:60:5a:ee:d7:
ff:b8:b5:60:f6:5d:0d:1a:fc:57:04:68:1e:54:e0:b0:6b:fe:
8f:37:b4:2d:6a:82:33:dd:be:26:a9:dd:f4:2a:2b:90:1e:e3:
1a:e8:3b:d0:51:1f:b9:0f:04:67:b9:13:ec:56:87:97:35:72:
27:b7:dc:b8:c7:d6:c9:45:92:d3:bb:1b:f4:4f:a7:fb:7f:4d:
d4:99:51:30:e6:d7:36:30:57:ed:f6:d8:7f:8b:24:d3:29:fd:
ab:e8:e3:85:76:18:4a:08:38:eb:01:85:4b:0b:2a:0c:90:eb:
16:0a:39:48:9f:04:bf:0e:1c:ca:4f:98:bd:54:eb:12:88:f1:
95:6e:92:2a:8c:6b:ad:69:a1:de:ca:01:d7:e1:d2:e8:fa:9d:
e1:39:e9:92:62:35:fe:22:0a:18:34:79:60:d9:de:e2:04:6c:
26:4d:80:ca:55:f4:ef:e1:f0:1c:ed:d9:63:74:01:94:33:99:
42:bd:f9:dd:ac:2c:8b:e3:f9:80:d4:d2:95:4d:8d:c9:3b:ad:
3b:e4:b0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:00:17 2025 by rpki-client