Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4c0b1e6-8245-3471-9d46-1640a3b6f7c1.roa
File: b4c0b1e6-8245-3471-9d46-1640a3b6f7c1.roa (raw, json)
Hash identifier: e3oamtLFcgtm+k/GwgRlSVzYP/AhbrUuKdcPKLqikAg=
Subject key identifier: 0E:F1:60:2A:DA:10:31:C6:CB:85:41:18:72:4F:8D:01:6A:BB:61:55
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C128872A985E8EAAABD3B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4c0b1e6-8245-3471-9d46-1640a3b6f7c1.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 68.58.152.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:88:72:a9:85:e8:ea:aa:bd:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=f55444df-c917-41ba-adaa-c7a49896d7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:43:c5:8f:83:db:77:ce:38:bd:15:b0:4f:d2:
74:2f:3f:bb:6b:25:a5:d3:95:4f:4b:e9:c9:2f:3d:
64:c0:e8:92:c9:60:82:5d:b3:7b:5f:58:b1:cc:f8:
6b:a8:80:29:5b:68:22:63:51:66:20:e7:06:7d:92:
23:76:4a:5c:bb:1d:e7:ee:d9:6b:e6:b5:9b:06:be:
17:0c:bd:af:8b:f4:76:80:39:6f:cd:0d:f3:44:fb:
07:76:bc:76:58:5a:03:83:a6:27:a9:09:4a:27:2e:
95:a2:13:41:55:29:c9:27:eb:21:05:72:4d:ca:65:
c4:9d:bc:8c:ee:63:3d:71:26:63:98:94:ed:b2:22:
b6:f5:00:78:f7:07:f6:d4:8a:8e:28:5e:af:cc:09:
dd:9d:8e:a7:52:22:69:26:be:66:88:25:39:48:62:
3a:e9:f1:1e:89:42:45:82:d3:49:73:8d:f0:49:68:
cf:12:07:2d:08:98:24:c8:fe:4f:be:b6:fb:23:ca:
1d:ff:7e:61:19:9a:44:09:eb:18:c8:72:ff:48:13:
5e:9f:eb:2e:ae:be:7a:1d:b2:6e:36:79:d3:d7:7d:
5a:7e:f9:5b:83:ea:41:32:f3:c0:e4:50:09:e7:a6:
29:11:52:d0:51:d7:0a:97:f1:9c:2a:7a:de:ee:81:
ce:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F1:60:2A:DA:10:31:C6:CB:85:41:18:72:4F:8D:01:6A:BB:61:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4c0b1e6-8245-3471-9d46-1640a3b6f7c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.58.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:6b:79:7a:a7:15:ca:b1:0d:fa:44:cb:d5:45:2e:59:13:55:
8e:f1:30:e9:86:c4:6c:86:63:44:20:38:c1:b9:1b:3e:d1:3a:
03:fc:4c:1f:c2:08:84:6f:ba:f1:aa:2e:14:00:07:e0:e1:8f:
1e:bc:3a:f3:6f:f7:9d:49:81:4a:74:40:ae:31:ec:0d:80:3e:
c8:58:d0:42:b2:61:58:25:9a:8c:bb:ef:e9:3c:f7:9c:43:b0:
d0:f6:83:f8:7a:25:f3:b0:3f:0b:31:b3:dc:fb:52:b3:53:9e:
0d:ad:63:a3:33:26:1c:8a:ae:c8:ad:de:8e:64:c1:40:4b:2a:
fa:2a:be:06:1f:5e:d5:37:87:97:9d:9b:8a:78:90:de:c4:ba:
a4:3b:bd:fc:c7:6e:49:fc:a9:3c:4f:9b:b6:db:05:7c:d7:0c:
27:80:4b:db:f7:39:85:90:de:63:14:93:bf:68:ff:11:31:5b:
a4:6d:55:7d:44:0d:1d:b2:2b:ab:3b:e7:bf:8d:01:22:c9:66:
37:16:78:d5:93:89:da:1a:de:d4:7d:cb:ce:e7:c4:35:10:48:
38:97:e4:d6:b1:3f:82:40:c9:79:c2:1e:6b:bc:93:03:9e:c0:
bc:d5:0a:86:2c:a1:eb:10:60:df:67:bb:6d:7a:75:05:85:88:
c5:9a:84:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:46:18 2025 by rpki-client