Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8bf400e-6b3d-37d9-a043-540c678b159a.roa
File: a8bf400e-6b3d-37d9-a043-540c678b159a.roa (raw, json)
Hash identifier: irYVqxeaK5DphYzJJMnFYYQxczR0rD+TFDrgH7kh9lI=
Subject key identifier: 92:95:21:B0:29:FA:B3:07:38:5E:EC:D6:F9:E0:85:BC:B0:82:41:9D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B691EE45E76F83AD45800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8bf400e-6b3d-37d9-a043-540c678b159a.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.61.40.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:69:1e:e4:5e:76:f8:3a:d4:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=2c0f4b5a-555d-41e8-b435-024f87f6f17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:65:14:41:24:43:d9:30:e8:2c:e9:69:8f:b9:
29:a8:bb:e7:61:24:71:fc:cf:f7:e2:2e:f7:02:d7:
b9:d4:ca:0c:68:1d:68:6e:31:9b:04:71:c1:63:89:
d0:b0:55:3b:43:7d:34:a9:04:50:b5:4b:74:df:e1:
e4:f9:56:d8:95:4f:fc:42:79:a5:2c:90:cc:19:12:
0a:a0:0e:6a:53:d6:d6:36:95:61:3c:7a:6d:5c:a0:
cc:44:e6:e3:2e:07:88:e9:0b:3e:96:02:10:83:b6:
5b:2e:8a:d3:3d:37:3a:6a:2a:6a:4f:75:18:1b:46:
3b:3a:f5:15:1a:94:50:7c:d5:31:6a:8a:cf:b9:b8:
d9:cf:e7:d7:c9:0f:f8:c3:a3:31:59:a4:c4:6f:ae:
c5:bf:2e:d1:1a:cf:29:2f:9b:55:4a:00:b7:5a:7d:
a6:e7:06:13:16:10:4d:85:7e:69:42:e1:4d:d6:72:
b0:fc:09:f6:d2:3e:fc:44:9a:12:32:40:c9:68:a1:
58:69:ab:72:32:9f:4c:4a:d1:93:2f:2f:17:0c:16:
36:4f:1e:75:d2:8b:ab:78:78:a7:33:ce:e0:1e:74:
47:7b:ec:c3:c7:46:58:f5:79:25:cc:b5:cd:07:ad:
6d:64:59:1c:2e:8b:86:a1:f7:ec:25:d9:7c:5f:7b:
60:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:95:21:B0:29:FA:B3:07:38:5E:EC:D6:F9:E0:85:BC:B0:82:41:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8bf400e-6b3d-37d9-a043-540c678b159a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.61.40.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c0:ee:3b:9c:31:08:9f:d6:2a:3a:9c:7e:63:91:5c:74:b6:3d:
a7:72:f7:b0:67:43:2a:18:09:4d:37:69:e1:be:b9:78:ac:90:
73:98:c2:83:b8:4a:7d:f0:30:75:8b:41:b8:f8:8f:85:e2:66:
1b:ed:a2:c9:a5:19:88:8a:37:44:93:00:9a:f0:5f:5c:17:67:
f8:04:a7:af:0f:b9:70:d3:06:a9:81:f7:73:9d:38:c2:6a:ac:
29:d3:d3:92:ac:09:3d:31:41:c6:15:45:a0:03:1a:e0:63:7a:
4d:eb:4c:f0:dc:ba:c4:42:f8:a5:d9:21:63:2f:33:a7:fe:9e:
81:88:55:2d:63:be:e6:4f:ac:00:57:9d:48:16:18:96:db:b9:
8e:e2:b9:08:43:53:4d:4f:b0:65:ae:26:a3:eb:40:f2:11:81:
8a:1a:c4:92:3d:51:19:45:38:8f:93:c4:81:44:d0:bb:9c:16:
4d:9b:68:7c:e2:91:9d:48:3c:d3:7f:9a:91:47:3f:2b:36:ca:
9d:52:b9:f8:64:8f:e2:3c:57:14:f2:48:72:16:f2:96:2d:22:
ae:6c:c1:b4:3e:23:dc:c8:c7:68:2f:64:0f:fa:d6:e8:19:e7:
fc:7c:04:e4:bd:65:05:0f:90:98:e3:57:8e:e0:b1:74:9d:8e:
ef:33:8f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:08:26 2025 by rpki-client