Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aabbcd36-659c-3e96-bb88-28a38dc81081.roa
File: aabbcd36-659c-3e96-bb88-28a38dc81081.roa (raw, json)
Hash identifier: SnW6J0RXCxpeoWIeGFgtSFxvpaiAW8D5cW0ZGHCBXfI=
Subject key identifier: B8:32:D7:FC:47:A4:11:0E:ED:49:5E:54:93:D7:51:0F:06:74:D3:40
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F21CF6F0ECEC3D8E43E38
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aabbcd36-659c-3e96-bb88-28a38dc81081.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.36.92.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:21:cf:6f:0e:ce:c3:d8:e4:3e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=e7a33b93-8d16-42ef-985c-03e94270b9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:52:20:b3:d5:ab:09:1c:ed:d9:28:bc:95:1a:
2b:af:0e:20:3b:35:99:01:df:1d:13:0b:88:ef:3d:
25:56:36:7e:cb:4c:cb:57:0a:9c:f3:45:67:9b:b9:
59:4b:04:f0:64:5b:f4:9f:56:c2:05:a4:0e:70:49:
a4:99:72:35:35:04:e7:cb:75:ec:87:7e:67:61:5a:
14:a4:f4:90:23:ba:99:be:fe:0b:46:5f:55:31:b8:
ee:bc:12:45:7e:6c:69:cc:75:85:e3:12:08:1f:3a:
ba:a1:84:93:bd:ac:63:f0:af:ca:a2:e4:bc:42:f5:
36:3d:16:57:02:e3:69:f4:c1:2c:d3:93:29:88:bf:
3e:ff:72:dd:fa:9a:8c:12:29:e7:4e:4a:c1:3f:43:
d1:97:70:fd:82:71:53:0f:02:ce:f1:8d:80:bf:74:
66:9c:51:01:fa:75:d3:b3:9e:f7:a7:e6:bb:e4:12:
7e:24:8b:ab:a7:b8:20:1a:d8:4b:50:c7:86:28:94:
6f:ec:2b:d8:27:5d:ad:a8:9b:05:96:21:7c:ce:c5:
b8:18:ee:0f:8c:7e:a6:fb:63:57:37:9d:cc:dd:f4:
7e:a6:9b:11:e5:96:06:d7:96:27:ee:d4:b7:ac:e0:
70:8f:84:17:07:6c:09:e6:41:ae:05:8c:c4:fa:35:
84:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:32:D7:FC:47:A4:11:0E:ED:49:5E:54:93:D7:51:0F:06:74:D3:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aabbcd36-659c-3e96-bb88-28a38dc81081.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.36.92.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:29:4f:05:4e:dc:ba:f3:2e:2f:75:b9:b1:e4:70:11:6b:53:
28:90:30:37:68:ea:1b:a8:1f:22:44:32:7a:7d:18:ca:3e:df:
eb:91:a5:f8:a8:fd:29:52:29:85:90:d5:42:1e:a0:1e:84:4d:
89:94:02:9e:2d:e8:ca:be:a7:53:5f:a7:97:bd:04:20:46:60:
92:e9:e7:76:b2:6d:3d:4d:4e:bc:f7:0b:2c:b7:02:5c:db:8d:
2a:e2:3d:0d:d3:55:f4:7b:e8:b3:64:9a:f2:a2:36:07:ff:db:
78:53:87:1f:d0:bc:9b:ef:78:4e:b0:d0:17:d0:e8:0d:43:da:
af:02:4a:86:6c:5b:7b:c1:59:d8:d1:63:02:01:37:17:de:a6:
52:c0:89:13:f4:84:8e:d2:e6:18:d1:dc:f3:2e:da:d7:ec:aa:
00:ad:bf:e8:a1:d9:3f:40:89:93:c5:10:b8:2d:b6:b5:50:76:
e3:1c:32:c1:95:02:b2:5e:77:d0:c1:f6:dd:d8:a2:cd:b9:6a:
51:f4:bc:17:4b:55:80:0c:3e:66:d8:cf:ff:55:47:29:ca:89:
18:7d:e5:de:d8:48:96:d1:e0:fd:62:7b:ea:3e:51:c6:1a:ab:
b6:cf:d8:b1:3b:6e:08:26:43:8e:71:44:24:2d:0b:5a:3a:9e:
76:92:60:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:03:01 2025 by rpki-client