Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf9cf285-5450-315c-b58f-8a5a9e0a889b.roa
File: cf9cf285-5450-315c-b58f-8a5a9e0a889b.roa (raw, json)
Hash identifier: afpMCZwSrcN8wDLkCNzFnJnp8YLZB8eMSQDjNEZpNM4=
Subject key identifier: F9:D5:D6:6E:02:66:E0:D4:ED:AC:4C:E0:09:82:90:76:5F:56:EF:6E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1231622A6648BB97F9F880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf9cf285-5450-315c-b58f-8a5a9e0a889b.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33287
IP address blocks: 68.83.150.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:31:62:2a:66:48:bb:97:f9:f8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=cf403c1f-b7ce-4ffe-8bb9-31c35b6e2283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:57:06:88:f2:48:58:8d:08:5f:fe:83:7a:d4:
19:14:05:ca:0d:2f:59:d0:3f:90:bd:0f:32:57:6a:
ca:5f:99:c5:27:b4:e1:91:79:03:ce:db:fc:52:97:
07:f0:71:b1:7d:db:f0:bd:f9:0a:b1:c6:03:7d:b2:
b5:4c:3a:55:43:55:54:0b:cd:1d:92:8c:22:33:65:
63:7f:4a:b7:33:19:77:c9:58:08:ab:71:40:18:20:
3a:f3:a1:37:97:94:4e:53:a5:c3:a4:5d:94:29:bb:
ca:da:2a:3b:41:49:df:0b:9b:74:bb:c5:2a:dd:fd:
0d:dd:22:62:ad:fe:cc:6a:9e:01:d9:dc:90:2c:d3:
56:0b:02:0a:09:9f:c7:46:c8:3d:c5:27:4f:68:b8:
42:f1:21:f8:10:78:a9:bf:50:4d:e7:ea:d3:3f:4b:
7c:d4:a6:12:a6:cf:8c:6a:87:d1:85:05:cd:a3:80:
5d:8f:e1:56:c0:10:56:c2:8d:3a:04:0b:3b:de:04:
05:6e:8f:74:72:3b:ce:c4:b3:25:d0:8e:10:61:c4:
81:00:02:fd:5b:23:c3:38:fd:9c:6b:33:48:7b:c1:
8e:16:b4:7b:70:93:f4:2e:7e:d6:82:f3:d8:ad:ff:
bd:6f:fb:21:08:c3:9e:6c:99:84:8a:87:9f:b0:d3:
6e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D5:D6:6E:02:66:E0:D4:ED:AC:4C:E0:09:82:90:76:5F:56:EF:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf9cf285-5450-315c-b58f-8a5a9e0a889b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.83.150.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c6:e8:dc:1f:b1:10:80:cf:c9:03:5c:89:0e:49:24:6c:aa:7e:
ba:4d:55:13:62:c7:73:71:50:0c:92:48:b4:b0:13:dc:9d:47:
d7:57:b7:5a:9c:b3:43:ae:b1:74:a5:a4:5a:45:f9:d5:2a:00:
1e:2a:f3:34:c1:1d:14:0d:8f:c4:b4:75:5b:c4:9a:1f:e7:e9:
6b:47:a2:e2:ff:05:eb:96:2c:9a:d5:c9:fb:2a:77:0a:a2:86:
e0:e2:78:0a:d6:62:73:87:be:83:60:8f:21:cb:18:d1:8b:67:
43:0e:3a:68:0a:66:93:12:ed:36:fe:ec:a6:b0:cc:91:71:5a:
b2:eb:ed:48:d3:47:9e:69:d9:c0:43:ca:b1:d6:6b:e9:8b:6d:
02:e5:91:70:f4:45:f5:12:f1:68:0d:85:10:d6:e1:75:72:69:
03:58:4e:12:6a:2f:04:df:16:8a:fd:3a:b5:3a:65:e0:51:03:
2b:45:bd:f3:b8:8a:8f:49:5f:3f:25:df:cc:62:2a:11:48:e7:
19:34:fd:5d:c1:27:01:23:94:c2:95:7b:f5:df:ac:4d:19:53:
f2:97:50:b4:2c:0e:00:73:a4:f2:f0:f4:58:3e:ed:c2:c4:2c:
71:b5:80:ce:a0:c9:3b:71:fb:07:9e:b5:7e:b1:54:c4:d6:76:
01:4b:5d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:52:29 2025 by rpki-client