Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aeaea987-c13c-3dca-b6c6-6f74cf01b8b2.roa
File: aeaea987-c13c-3dca-b6c6-6f74cf01b8b2.roa (raw, json)
Hash identifier: lzJcSju1Fc0Ky+en285U1LCje3L/YKqIE8erV9HlA7o=
Subject key identifier: E0:35:1A:F2:83:DA:D4:30:FD:E8:FC:D2:A9:2C:37:1B:5E:F1:7E:C6
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B505D31914443BC310A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aeaea987-c13c-3dca-b6c6-6f74cf01b8b2.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.36.90.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:50:5d:31:91:44:43:bc:31:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=8752939d-b2fc-4b0c-8945-62d4281d6c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d1:8c:55:24:fa:09:09:86:66:d6:35:08:99:
8e:5e:a8:69:9a:2f:ca:c9:a7:9b:33:33:80:81:36:
75:df:67:ce:87:2d:d6:17:78:f4:b8:26:d1:5e:c1:
b2:01:28:fc:cc:00:54:ca:17:11:5f:cb:d8:a9:b6:
03:eb:e8:f3:32:ed:48:9d:22:2a:e2:f1:1b:36:a7:
e1:40:85:47:4a:eb:b9:61:bb:5e:82:9c:8c:fc:50:
12:c2:72:88:55:bf:9b:15:a0:ec:9e:01:49:a7:77:
e8:0a:6b:98:c1:c9:f5:e3:27:57:2e:14:27:0d:13:
a2:ec:4c:d0:e6:46:c9:d3:39:29:8a:ed:05:ef:68:
72:ca:5f:a8:c4:8a:b0:0e:cb:94:f3:62:72:51:f0:
9c:5d:e7:6b:1a:74:e5:33:71:7d:13:2b:ec:e0:bd:
3d:c6:be:79:44:a0:fd:15:5d:af:34:b1:02:dd:71:
76:1c:50:03:af:f7:e1:d1:84:d5:16:9b:eb:26:9c:
f3:f0:a5:63:70:4d:03:39:6b:80:df:f6:0e:5a:21:
2b:17:88:05:1a:90:44:01:5c:23:f6:70:a0:53:73:
15:8a:cf:29:43:ef:c6:7d:9c:09:17:0d:52:27:95:
b8:b8:e2:79:70:64:4e:fd:1f:6d:a7:66:a8:a8:f9:
1e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:35:1A:F2:83:DA:D4:30:FD:E8:FC:D2:A9:2C:37:1B:5E:F1:7E:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aeaea987-c13c-3dca-b6c6-6f74cf01b8b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.36.90.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:2a:cc:17:b0:b6:4e:f4:5e:c7:94:f0:45:ea:cf:ae:32:ec:
49:f3:b7:ff:0b:6d:6f:d4:ec:15:ad:48:88:3a:a9:47:a8:f3:
10:da:c3:e6:b5:ba:7e:d8:4b:0c:e2:6e:9b:91:8c:f0:46:09:
67:f7:8f:e2:fb:47:56:4a:52:e4:9c:32:5f:37:a9:2b:30:ec:
26:b6:fa:cf:41:ce:4d:15:bc:d9:b2:21:40:a7:e0:88:8d:27:
ab:01:e1:55:5e:a9:e7:28:90:20:9f:0c:66:cd:0e:8a:4a:14:
72:72:0f:7a:df:43:61:ea:d3:8e:88:6e:23:42:e9:5c:18:f8:
5c:10:5e:f4:76:76:90:a6:ce:7a:78:6c:56:db:de:d4:d5:39:
14:5e:2a:d4:cd:bd:f2:21:b6:a3:71:31:e2:62:2d:94:cb:ec:
d7:ca:3d:04:73:82:e2:48:3d:69:fb:cd:2a:b7:74:49:be:3b:
e8:d8:92:9c:1d:68:d6:8f:21:9e:fb:0a:9c:50:fe:58:c9:4d:
4f:b5:a8:30:82:a5:d4:45:b6:20:a5:de:bc:07:aa:0c:93:fb:
ec:e1:97:29:26:1d:27:a8:f5:14:0c:e1:90:ef:64:d0:ba:25:
90:31:d4:2d:f6:0d:6a:69:e2:97:4a:c4:a7:de:f1:a0:35:37:
df:60:7b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:24:23 2025 by rpki-client