Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e976a3f2-b853-3ad9-8517-6bf7dc9fafad.roa
File: e976a3f2-b853-3ad9-8517-6bf7dc9fafad.roa (raw, json)
Hash identifier: dJoVisGq3C74GrybbzpxWeG+n7OyymTRgjYwpzmJ+fU=
Subject key identifier: 21:01:4F:40:D1:C6:BA:7E:0F:81:41:5F:FE:18:32:AF:E4:02:7E:DC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C10EBAF368141A03C336820
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e976a3f2-b853-3ad9-8517-6bf7dc9fafad.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 68.58.68.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:eb:af:36:81:41:a0:3c:33:68:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=8aa34c85-5bfc-46e3-a64b-6382456a2e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6b:b3:c2:4f:ea:25:ad:bf:b2:dd:3e:7b:7d:
0e:db:41:34:16:cd:79:0f:84:08:66:2d:16:5c:a7:
06:b8:a4:1e:81:19:90:22:0d:0a:d4:05:83:34:67:
04:89:3c:f6:8a:86:34:e3:07:8e:c1:57:f3:ec:73:
25:67:bb:c0:28:da:19:06:d4:57:ab:cc:fd:37:27:
05:e2:49:bc:92:c9:2c:8a:c9:26:e2:ad:22:11:a3:
c0:d7:0c:a1:c9:89:e4:97:4b:67:95:ed:8c:54:42:
9a:bd:18:c5:b1:48:f8:1f:22:78:4b:95:0d:0a:f7:
be:f7:21:c5:a0:96:37:cd:f9:f8:e0:ee:87:52:f1:
6e:7d:e0:40:8b:bc:65:7a:fd:01:50:4b:cd:4b:42:
a6:ca:4c:65:06:55:c4:05:41:44:66:fd:5a:c7:23:
58:d3:79:fc:38:aa:82:44:8d:f9:5b:c1:8a:fd:f0:
41:ac:a2:20:f7:47:3a:71:d0:6b:19:8e:38:c0:04:
72:de:8f:01:8c:16:d2:3f:47:f3:17:01:2c:6b:82:
93:68:fc:77:27:9e:63:3f:81:7a:65:eb:d1:62:58:
34:0a:51:8c:d8:c6:10:f5:15:42:84:6a:31:bc:4e:
fb:ca:bf:20:2d:50:bb:db:8f:3e:c7:fd:86:ee:02:
ec:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:01:4F:40:D1:C6:BA:7E:0F:81:41:5F:FE:18:32:AF:E4:02:7E:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e976a3f2-b853-3ad9-8517-6bf7dc9fafad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.58.68.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:28:f3:fe:2e:68:6b:cf:68:d0:2b:9e:4c:40:d1:32:6e:64:
dd:ff:d1:18:aa:12:fc:50:47:ac:81:43:1b:9e:d0:61:67:db:
51:94:a5:8e:45:85:be:ec:3e:e9:81:30:d6:dd:08:7c:4a:ae:
04:67:26:f1:5f:46:b9:46:45:12:ea:8f:3b:b5:a4:e1:f5:46:
52:a5:08:d4:d4:45:fd:bf:77:79:4f:9d:7c:c8:5c:08:45:0f:
d8:47:f2:08:cd:50:6b:0b:b6:c7:e6:bf:cf:d3:ff:92:70:70:
e6:49:e7:c7:a3:56:e3:93:09:23:eb:ba:29:e4:e7:1d:1a:52:
21:29:45:2f:ad:fb:c5:5e:dc:f5:8f:02:da:c2:5c:5b:08:0e:
9f:b4:a5:a0:b3:0e:d8:58:cb:86:48:d5:80:1c:b2:b8:5e:31:
eb:75:bb:7e:17:f8:78:fe:11:47:50:30:a5:d2:89:e1:7b:20:
92:86:bf:3c:9b:0a:51:58:4f:23:9c:a2:bd:64:b3:02:c1:ea:
e2:3c:f4:ef:a8:2b:92:5e:a7:5d:39:9d:c3:b8:ac:93:6a:43:
e1:85:e6:bb:23:4d:72:1a:4e:1a:5f:3a:d0:38:34:22:dc:b7:
f1:47:6f:41:eb:ad:bb:99:e2:81:14:72:fe:1f:31:fe:31:ba:
47:36:04:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:38:24 2025 by rpki-client