Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa01d3f1-0bca-3657-ae42-b40c799fe5bb.roa
File: aa01d3f1-0bca-3657-ae42-b40c799fe5bb.roa (raw, json)
Hash identifier: AzuGHgEnzVBxnESBWhmKe5cjdRHQV16aFIvlou21cqk=
Subject key identifier: 1D:18:4F:AD:64:90:A2:E2:19:74:75:65:CF:3E:3A:5A:7B:90:E5:45
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B68D8EEDCA57B0CEEF288
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa01d3f1-0bca-3657-ae42-b40c799fe5bb.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.61.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:68:d8:ee:dc:a5:7b:0c:ee:f2:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=f4a45209-e806-4a1d-85a5-d0727e779ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fa:6e:87:50:d0:e7:45:8b:15:02:84:47:39:
67:24:01:a6:90:fe:77:f7:47:9e:48:59:70:cb:76:
be:2d:00:74:d4:b9:1a:3d:e8:89:cc:f6:ea:60:cc:
06:10:da:2d:63:7c:91:b9:de:f5:e6:af:f5:df:af:
7e:87:6f:d7:38:37:20:dd:fd:3d:ff:a5:18:4d:70:
99:a7:7f:fc:44:d6:1d:82:12:a9:6a:ca:be:fb:9b:
1b:1c:c4:1d:75:65:c8:fe:6d:7c:27:b2:50:61:10:
82:96:c5:ba:67:21:3c:4c:df:c7:90:96:d9:67:20:
7b:0a:fb:09:b4:6e:17:54:9c:e9:ab:12:09:06:02:
ac:5c:b2:6d:d9:72:1b:3a:c3:52:f2:80:81:0f:1b:
9f:21:31:36:a9:56:6d:64:59:93:8f:18:cb:35:00:
fb:90:ac:ca:18:4e:f7:11:34:c6:f2:71:2e:01:9a:
a2:46:90:a8:5f:9f:39:cb:43:aa:c7:d0:dc:5b:12:
9c:8c:1e:a5:01:d6:41:07:5e:f8:ab:96:31:54:13:
43:61:31:4a:67:be:32:15:e2:5f:34:52:1a:0b:5e:
6e:82:da:24:b5:f3:db:c3:25:ab:b7:7f:be:f7:7f:
ca:70:b4:3f:3d:2c:9e:23:0a:a9:41:0b:d9:55:70:
e6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:18:4F:AD:64:90:A2:E2:19:74:75:65:CF:3E:3A:5A:7B:90:E5:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa01d3f1-0bca-3657-ae42-b40c799fe5bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.61.24.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:ea:7d:95:55:e0:0d:44:c6:35:6a:6f:a3:8e:10:be:64:f4:
7e:76:65:e6:20:1b:78:73:42:24:fe:13:b4:bc:e1:cb:0b:6c:
61:33:15:0f:b1:68:4f:00:de:56:0f:c1:a5:c2:27:2f:05:29:
c7:8d:43:83:1f:a2:15:ad:47:8c:35:72:dc:d2:a0:1b:c6:a1:
d1:bf:1d:fb:4e:43:5b:21:04:5c:07:19:94:ac:71:76:9e:6c:
97:d1:bf:aa:30:00:d2:c3:ff:24:a2:6e:d0:2a:a9:2b:98:1a:
c8:45:ca:13:ff:3d:fa:7c:b1:bb:3f:45:0b:eb:f8:98:9c:59:
2b:e8:8b:22:53:0f:47:b4:d1:4a:4d:95:65:f9:42:b5:15:d6:
89:9e:15:ac:46:df:c0:ac:50:61:60:2c:da:0e:93:f0:c7:19:
d4:46:f2:25:e5:a0:67:35:bc:01:91:f3:88:ed:b2:f3:40:d0:
1c:0b:03:cc:b1:ce:37:ac:02:54:dc:98:f3:c3:48:6f:d1:79:
a9:05:c3:ed:db:85:88:09:96:35:36:39:32:e9:5a:56:39:50:
7a:64:39:96:89:43:e4:b6:bf:59:4f:ad:0a:02:c1:23:5f:a1:
80:c9:68:a3:d7:83:63:ad:ff:06:5d:11:23:ba:fd:75:72:22:
a1:38:c0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:57:50 2025 by rpki-client