Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae17a50b-f7bc-3eec-83cd-cb5830d93dbb.roa
File: ae17a50b-f7bc-3eec-83cd-cb5830d93dbb.roa (raw, json)
Hash identifier: r4O7fmZiZjE7b2ExnzhUe6RCfnkGlLb3lWBP8BYo5Ls=
Subject key identifier: C1:F4:D5:65:3F:0D:FA:EB:6A:88:38:BA:54:6D:D3:94:EC:A7:D3:A7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F22051F905F2487979000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae17a50b-f7bc-3eec-83cd-cb5830d93dbb.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.37.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:22:05:1f:90:5f:24:87:97:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=c461571b-3ced-401b-9966-faf778ce2d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7f:83:89:d8:9c:40:95:c8:3b:fb:ed:94:6c:
91:91:a3:36:35:95:3b:a5:a8:f6:fa:f1:2c:b4:63:
ce:a0:91:9d:2f:62:a3:ff:54:cb:fe:8f:c4:8b:f9:
9d:ef:d4:e2:81:7e:ae:dc:60:7b:01:6d:44:71:0c:
d0:8e:7d:0c:3d:0f:32:9d:3c:9b:59:3c:9a:c7:2b:
82:a4:a3:fa:6a:20:5e:a2:d0:a6:bb:a3:d4:9f:f6:
37:80:96:76:50:08:12:74:61:d8:8d:9c:c2:bf:21:
15:7c:86:d0:a7:2c:0e:4b:fd:bc:57:59:b3:6c:e0:
a4:07:bb:17:3e:00:8a:53:55:d7:ec:ac:86:36:24:
44:cb:fa:4a:94:b3:b4:d7:c2:bb:c4:ce:6a:b0:b7:
8e:0d:32:66:42:d2:c3:49:17:09:df:40:15:33:d3:
08:67:ce:b2:b6:81:31:5e:c3:19:66:c0:81:22:14:
f2:e6:fd:97:44:40:8e:40:c5:a4:1a:79:c2:e8:fc:
62:0f:8f:b0:50:79:52:28:c7:0d:66:8d:cb:37:cd:
13:20:5e:7a:02:f1:55:3e:23:d0:80:f7:e4:29:c7:
40:d7:8e:57:c0:b1:71:fd:fb:19:ab:07:e3:f7:83:
78:a0:b5:55:6e:b7:3f:f0:4b:b9:a4:71:aa:87:46:
8c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F4:D5:65:3F:0D:FA:EB:6A:88:38:BA:54:6D:D3:94:EC:A7:D3:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae17a50b-f7bc-3eec-83cd-cb5830d93dbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.37.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:0d:f1:bc:6a:a9:32:52:af:de:f8:9b:58:5c:13:7f:6c:e1:
79:65:8b:0a:42:4e:77:b7:e5:08:24:9c:32:e4:b2:87:99:0b:
8d:45:19:57:e6:53:42:dc:c0:f6:86:d7:d3:7a:52:8b:e0:fa:
1c:ae:c9:9f:22:6e:88:1f:bc:d5:73:c3:55:3f:b5:2d:fc:46:
10:83:51:81:8c:b3:f3:df:cb:c8:d1:38:83:7e:81:ff:bd:dd:
ad:c9:65:d6:56:79:4f:72:64:82:d3:ae:1c:41:58:1c:7d:01:
8a:af:6e:5b:b0:0e:18:79:57:97:be:7b:e3:0f:31:f1:82:c8:
ca:2d:4b:40:98:2c:55:17:35:3e:e1:0e:2d:fc:56:d4:23:4b:
be:3d:b1:09:41:01:75:01:1a:eb:00:78:18:6e:5f:89:04:b4:
68:1d:b5:d8:d1:ab:44:5e:cd:3b:51:6d:97:f2:f4:d4:cc:07:
23:16:50:de:ee:78:75:94:7b:40:a9:b2:92:7d:4e:9f:1c:f1:
83:55:8b:0d:9a:77:7a:88:04:e9:43:af:29:bc:b5:21:57:3d:
20:0c:f3:85:b3:cb:98:6d:ed:04:ed:c8:55:b3:db:05:94:d2:
b8:c6:04:b6:a8:d2:59:43:c4:82:5a:b5:0b:b8:fd:3b:3d:cf:
d9:cc:ae:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:33:21 2025 by rpki-client