Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da704679-67ad-3740-b237-44aecb14b5f0.roa
File: da704679-67ad-3740-b237-44aecb14b5f0.roa (raw, json)
Hash identifier: ciUodlzwe32qj5YVMklk9JqrQucrJarp04wbMKIpqSM=
Subject key identifier: 42:ED:E3:2C:53:E2:B0:23:2E:86:9A:82:1E:12:D0:B5:4C:CD:9B:B4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D2CE86BE9E9DFD4B95780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da704679-67ad-3740-b237-44aecb14b5f0.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 7725
IP address blocks: 68.34.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:2c:e8:6b:e9:e9:df:d4:b9:57:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=437e1c71-754f-44de-ba10-4e9e91ca5dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:d1:e3:85:98:40:4b:00:df:b7:e7:6f:2c:
c4:31:5b:a5:3a:24:e0:e6:7a:54:f5:33:c3:3c:b6:
78:c9:7b:fb:b3:9a:47:3a:35:24:5b:db:04:e1:10:
84:00:56:79:48:30:1f:5f:1c:a3:7e:e7:ce:c8:51:
b0:9c:e1:bc:ac:06:1e:78:4d:aa:73:60:73:a9:7e:
3f:3e:53:55:37:d2:8d:7b:95:5f:cc:23:60:cf:3d:
41:73:60:51:10:3f:db:da:6c:26:b9:78:d0:36:a0:
f8:38:14:0d:05:a6:c1:61:e2:81:7d:df:dc:98:ad:
81:a5:be:62:dc:26:8f:90:c5:48:36:ee:01:66:63:
c9:a2:d8:26:bc:ad:86:8d:00:41:dc:26:a3:bd:b5:
2a:df:03:00:f3:e8:48:dc:b5:55:db:ad:03:bf:e9:
22:36:e1:a5:ea:bd:69:c1:c8:5d:6d:2f:97:8b:df:
60:9f:8b:7a:c9:3f:ec:c2:39:07:75:e7:aa:9b:38:
4e:db:54:a6:fa:e7:42:f0:c7:d1:41:77:fb:28:59:
5f:1c:0e:48:9a:b7:5c:be:2c:d6:8b:f4:48:18:ad:
d6:12:66:ca:c2:29:61:ae:1d:18:9b:08:02:ae:4c:
d8:ac:8e:a3:8c:37:11:24:4d:41:02:40:aa:90:fe:
b5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:ED:E3:2C:53:E2:B0:23:2E:86:9A:82:1E:12:D0:B5:4C:CD:9B:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da704679-67ad-3740-b237-44aecb14b5f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.34.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:fe:f3:06:56:11:96:a6:17:f9:f7:47:87:31:85:76:ae:e2:
ec:db:51:6d:57:44:58:4a:43:e3:55:e0:7b:cf:a0:a3:1e:92:
2d:eb:4c:19:e2:50:ac:af:7a:26:7e:c7:34:7e:d7:e7:58:a1:
9c:75:77:4d:38:e0:c7:92:77:5a:3a:eb:47:4c:99:91:6e:13:
cd:c8:42:be:25:a9:3e:90:8e:a0:93:03:96:4c:65:d4:6e:9d:
3c:77:82:c3:41:44:41:68:3b:06:95:2a:a9:91:f1:d9:67:7f:
61:ac:3f:7e:86:4f:f6:fa:1e:14:54:f3:d7:7a:2a:a8:6d:b9:
1a:90:6a:f0:54:42:e5:c3:3d:8a:45:5c:64:fa:76:3f:4c:99:
bd:8a:4b:e9:29:e3:b2:d6:d5:8d:c0:f8:30:2a:e9:61:03:25:
03:14:f2:da:9e:c6:89:bc:cf:5a:30:ef:7c:d3:df:b1:05:22:
12:0f:3a:68:b5:65:1f:61:d8:70:a6:f9:5b:b8:54:31:da:f7:
ee:0f:15:83:5f:6a:4f:09:ba:69:16:ef:51:26:35:81:da:56:
70:29:b2:27:cb:2f:e6:ce:e1:0e:80:4c:98:ea:21:4d:4b:60:
0d:f5:26:83:24:c1:2d:fe:91:58:d2:3a:e2:eb:47:57:5a:e5:
4f:f7:12:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:37:17 2025 by rpki-client