Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0a3e62d-1cdf-3f45-be2b-317ec82e1d6e.roa
File: c0a3e62d-1cdf-3f45-be2b-317ec82e1d6e.roa (raw, json)
Hash identifier: GNYIpWl7CzRUWzEL3bYE1yS+Y0m6ay4YzVPJueCt4EI=
Subject key identifier: 87:9B:12:0A:2A:CC:51:66:74:5B:7C:19:C0:60:98:DF:33:B8:E9:B7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F32EA8997F7BBCC6BD380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0a3e62d-1cdf-3f45-be2b-317ec82e1d6e.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.41.228.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:32:ea:89:97:f7:bb:cc:6b:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=41c98cb5-f283-492a-83fb-cb0d6d2f27a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:22:45:40:33:6e:10:50:0c:9c:e5:00:92:82:
55:a8:65:8d:3c:10:3c:81:06:4d:45:86:77:d1:d1:
03:30:c1:9c:6e:87:c4:84:b9:f5:0e:57:29:d2:d4:
6a:16:39:29:db:2c:84:e8:50:59:cd:26:61:f0:c2:
ed:87:30:e9:9b:6d:ec:fc:84:d1:32:33:0e:31:42:
fd:4b:e0:96:8a:9e:02:b1:36:24:56:c9:7a:92:c4:
0b:6a:69:cb:81:30:e3:ee:c0:15:f2:b9:dc:9d:b9:
a6:27:15:f5:51:b4:d9:80:f6:dd:33:5c:8a:c5:1b:
b0:ba:6a:65:49:b4:d4:86:53:5e:bb:1f:8b:ee:b5:
1d:5c:cc:bc:bb:e6:44:0a:b9:43:04:f4:ba:44:21:
25:99:5b:e8:99:59:c8:03:86:77:80:b9:89:db:fe:
35:1e:1f:22:13:35:0f:b8:bd:a0:88:1b:0a:9c:37:
fe:4e:67:99:01:96:1f:0f:b9:30:0a:77:34:ef:b4:
e6:53:4a:aa:36:99:70:de:89:c9:77:d2:ad:26:ee:
03:f7:1a:f9:b8:d0:d3:90:36:4e:01:48:7e:c0:58:
6b:c2:c1:6c:11:6b:82:2b:a1:24:8f:67:24:a9:f2:
78:e5:fb:f5:d4:d0:4d:48:25:0c:e5:e3:a0:f7:e6:
81:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9B:12:0A:2A:CC:51:66:74:5B:7C:19:C0:60:98:DF:33:B8:E9:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0a3e62d-1cdf-3f45-be2b-317ec82e1d6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.41.228.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:a4:1b:67:bc:05:da:a1:a5:9f:09:6b:2c:cf:0b:29:3f:e9:
f0:5c:3e:52:60:47:8f:47:17:01:95:f4:41:c5:17:2a:a0:25:
cf:3f:dc:9a:e0:a4:66:02:32:6a:0c:ba:4d:1b:9b:89:7c:1d:
0b:50:d9:6a:69:83:d5:66:f2:7c:08:00:86:14:4c:3b:45:4e:
16:f0:ac:d9:8b:40:a3:ae:ff:5d:79:8e:79:4f:75:50:03:5b:
4b:91:bc:bf:69:31:bd:8c:f3:cf:67:aa:55:72:c2:26:24:6d:
4f:c8:45:84:c2:dc:aa:95:21:f3:cb:e0:41:61:c8:77:af:10:
87:93:79:c1:22:f0:62:d2:cb:54:76:db:69:65:8a:f1:2b:38:
60:f3:9f:80:51:c3:b6:2f:fd:89:3f:fa:26:74:b4:d5:c7:54:
e7:e3:56:e7:0d:ed:11:91:7a:c4:4a:af:e5:21:b7:36:2b:98:
a8:4f:2a:29:9b:a1:fe:e4:15:b6:06:82:7b:53:47:a1:8b:36:
8b:93:70:9e:ff:8d:d2:0a:3f:55:7b:77:70:f3:35:27:e7:7f:
ce:49:65:4a:62:07:fb:88:71:d4:27:df:8f:1b:dd:10:76:7b:
0b:47:36:9a:4d:bb:dc:e7:80:5d:ef:00:22:2b:6f:d3:df:9d:
b4:49:a1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:27:07 2025 by rpki-client