Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b259ec9-229a-31f2-89c6-5cc05dbd2e40.roa
File: 9b259ec9-229a-31f2-89c6-5cc05dbd2e40.roa (raw, json)
Hash identifier: ACtk2Lt5JY+15LP/rjsrxyjKDYn89mLfUaPG5Us00lg=
Subject key identifier: 35:F8:95:CD:C3:9C:9D:87:A1:EF:32:A9:E2:10:98:07:5B:05:35:8C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B581BAD1A7CDC22A65880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b259ec9-229a-31f2-89c6-5cc05dbd2e40.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.42.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:58:1b:ad:1a:7c:dc:22:a6:58:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=e8d9cc31-92a6-448e-85c3-e2c0a4a596e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:69:0d:ea:b3:c9:04:66:0f:85:15:2d:89:7b:
90:d7:22:72:a1:fc:4d:63:9f:b9:e7:c2:3b:db:8a:
d9:df:36:bf:cd:a7:71:b0:03:d1:d6:08:4a:40:5e:
e3:fc:2c:c9:0c:ab:74:9c:e8:c3:19:fd:39:60:eb:
48:8d:53:2c:ee:57:0b:bc:5c:23:1e:e5:5c:8a:59:
38:b8:43:c9:d2:f0:a2:31:6f:62:91:e3:9c:55:1f:
0e:46:64:10:9a:ec:c6:ed:e1:c7:e7:d4:23:ab:77:
56:c4:d8:bb:31:c3:94:49:a0:e0:b8:50:69:8b:13:
4c:77:e0:64:7e:15:5d:9a:8a:54:39:1f:15:62:9d:
2c:56:3f:df:33:c6:78:35:b2:58:84:df:ca:82:7d:
2c:28:4b:45:6d:ed:a4:ce:2c:08:ff:9b:dd:2d:c4:
2b:3b:c4:00:57:d9:82:6d:62:89:ec:e5:57:7f:18:
5e:eb:ef:b5:8c:45:16:3a:f9:3e:4c:ec:04:32:cb:
de:7a:c2:96:b1:b1:f0:64:ca:82:f0:20:67:8e:0d:
7b:3a:ba:c4:48:17:78:01:0b:45:d3:c2:aa:7e:9c:
0d:ec:de:9a:ab:32:26:b6:e3:ef:a3:08:c2:95:84:
57:f9:a1:49:92:73:c5:be:17:c5:d4:f1:3a:81:e2:
b6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F8:95:CD:C3:9C:9D:87:A1:EF:32:A9:E2:10:98:07:5B:05:35:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b259ec9-229a-31f2-89c6-5cc05dbd2e40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.42.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:96:6f:ee:d3:0e:c9:44:c2:80:85:b1:f6:c6:28:fb:7e:e2:
4f:b3:2e:6e:42:f9:b1:c7:3f:13:c8:d8:72:70:79:6a:e5:62:
2f:8d:ee:4b:ce:0b:90:38:41:5b:20:35:4e:2d:20:d0:38:9e:
d6:c4:c2:10:30:41:34:b3:09:79:18:c3:76:4c:9c:fb:50:7f:
bb:45:30:64:c4:6f:74:a1:be:fa:f0:cf:af:2c:43:a1:d4:8f:
f3:a0:81:cd:21:8f:15:99:9d:d7:d3:10:02:48:0f:62:79:4b:
4e:6a:91:61:05:92:aa:1e:e7:19:48:b3:44:ba:80:e5:5d:58:
d6:b4:50:6c:30:78:1e:9c:a4:7d:6f:b0:e1:2f:e5:cc:09:da:
ef:d1:9c:a9:5d:66:5c:66:97:2f:bd:e3:c6:62:a1:29:5f:a5:
03:68:a5:a6:dc:1c:e7:c5:c5:d1:73:5e:39:41:99:9e:b7:c9:
b9:a4:de:c6:45:c0:14:e3:ad:12:fd:9e:8c:96:84:ba:92:80:
9e:99:4c:b2:6a:e3:d5:89:e7:22:cd:59:b9:1e:c2:d2:97:fa:
bf:35:4a:77:05:57:5e:4d:14:3f:8d:19:f5:7f:80:50:bc:37:
24:06:2d:44:05:26:3f:ae:eb:6f:2f:76:b2:b0:c4:a1:fa:7d:
da:6b:92:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:57:43 2025 by rpki-client