Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b141a390-cc7b-3b2d-988b-7b181724d7b3.roa
File: b141a390-cc7b-3b2d-988b-7b181724d7b3.roa (raw, json)
Hash identifier: KlbNNhT171ez7CAiZALrq+Hcm3JsLvXhApoZJorTwh0=
Subject key identifier: 49:3E:C7:BC:36:3D:B5:8F:50:2F:48:BD:48:CE:B2:45:7F:B1:FF:30
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B5324F8BDA835B48D7780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b141a390-cc7b-3b2d-988b-7b181724d7b3.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.40.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:53:24:f8:bd:a8:35:b4:8d:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=36e34876-b855-4ccc-8d74-1798d3e25ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f8:c7:a2:e2:96:7e:5f:5f:00:c5:99:0f:98:
9c:e7:f7:26:da:f2:b5:50:f6:94:d0:92:bd:bc:a1:
8d:da:b5:32:42:ce:4e:c3:be:74:6d:dd:f4:0f:fa:
ab:bd:66:81:96:21:c5:29:7a:fc:4d:59:08:8a:3a:
8e:23:c5:4e:b8:06:31:71:24:3a:19:be:e7:30:f9:
07:35:be:ba:ce:04:de:69:f4:e6:60:95:e2:3c:c9:
1d:0e:1e:6c:a0:88:17:af:8a:68:08:81:f2:2a:41:
3a:f8:b3:bb:33:c1:45:a8:64:2b:60:95:69:e1:21:
76:59:88:d6:5e:28:27:88:d1:8f:e5:61:c9:4e:27:
58:e6:e9:98:80:a5:6b:c8:dc:ca:82:12:91:4e:35:
4d:46:35:53:8c:c5:68:3a:21:99:4d:03:05:70:38:
ec:da:00:a6:ef:b3:c6:4e:ef:d5:a0:4d:24:a4:1f:
b5:52:74:87:ad:1d:64:4e:fe:31:77:86:f9:fa:0a:
db:db:16:7d:36:e2:7f:d4:78:5e:a3:12:16:23:ce:
c1:16:fc:af:be:51:ca:9c:46:45:bf:3f:c5:be:01:
cf:d6:da:90:02:2a:03:73:bb:06:5c:44:f2:05:a2:
a6:7b:7f:f3:19:57:e7:2f:4d:12:ca:d5:66:54:51:
49:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3E:C7:BC:36:3D:B5:8F:50:2F:48:BD:48:CE:B2:45:7F:B1:FF:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b141a390-cc7b-3b2d-988b-7b181724d7b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.40.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:f6:2d:ea:d9:00:1f:c5:55:ec:74:52:ed:33:8b:64:b7:10:
af:36:77:10:ee:a9:fd:c3:93:1c:e7:38:a9:ec:3f:3c:1c:5b:
60:5e:46:c2:5b:62:61:c1:45:19:25:0d:af:97:16:2f:11:9c:
85:cf:e7:d9:6e:2c:af:0a:91:b9:a6:87:d6:ab:bc:99:ad:02:
c9:35:44:d9:6b:ac:40:59:c1:7c:7a:48:af:fc:7c:bd:ed:2b:
87:e9:55:a4:24:b0:f5:74:7d:58:61:0c:c1:b6:9b:60:21:f4:
ad:03:66:ec:0d:4e:a4:64:87:5e:27:d2:f8:dc:8e:c8:9d:d9:
94:91:cf:26:54:f9:7a:42:48:b4:4f:11:f5:ca:1f:61:9e:68:
9e:67:24:e1:97:c8:41:9f:de:44:67:0c:b5:0a:e4:05:bc:ce:
74:7e:85:36:9e:cb:fd:e2:1c:6c:60:c3:60:8a:03:b3:9f:46:
d8:bc:9c:98:bf:51:cb:9a:3f:65:05:de:da:81:97:95:db:7a:
b7:f1:10:04:8f:8b:87:02:08:d3:58:00:03:66:67:aa:ef:fd:
2e:35:a4:0c:5d:70:61:64:93:05:b6:ba:4a:25:be:16:d7:8f:
6c:f8:80:92:06:43:13:53:c2:68:31:bb:75:61:f7:bb:7b:24:
0c:06:50:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:00:29 2025 by rpki-client