Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0856be5-7bb1-3b04-a243-5b340ef25d29.roa
File: f0856be5-7bb1-3b04-a243-5b340ef25d29.roa (raw, json)
Hash identifier: ntjLGBESm1bvA8ji9u4meh6fIyT+N46c3FcyOu0OtnM=
Subject key identifier: 76:D8:57:C3:B9:43:ED:75:51:6F:97:C7:4D:AB:86:91:CF:93:89:E8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C127A98C0E5AB4B2439A960
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0856be5-7bb1-3b04-a243-5b340ef25d29.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 67.186.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:7a:98:c0:e5:ab:4b:24:39:a9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=527b617c-e1f2-4950-a003-d36cb6e515f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:50:c6:ff:12:60:b4:8e:94:ce:a7:17:8a:70:
97:e2:16:6d:15:6d:b6:6d:2d:c8:a5:d7:87:97:36:
65:0e:3e:93:96:1d:ab:8f:37:0e:d5:a7:f1:e6:81:
95:cc:6d:c9:41:6f:c3:95:20:c4:b3:7e:99:06:df:
38:69:89:e4:15:cc:02:46:b2:c2:44:2f:ac:30:18:
93:94:1e:64:03:ed:51:17:21:06:1d:8d:ed:60:bb:
2b:59:67:5c:67:23:93:60:d3:eb:20:54:8b:c6:75:
36:c3:a0:9e:6f:57:7a:69:95:b7:22:f9:55:a6:e2:
37:8a:d9:c6:a3:bc:3e:25:d8:2d:6e:5c:4b:44:78:
7c:d2:65:ed:17:fb:b5:e0:22:5b:af:b4:5c:75:3f:
e5:12:00:2c:6f:65:51:c5:05:32:f0:a2:f8:3d:1b:
cb:ac:81:76:ab:e5:65:53:f4:c5:2b:fa:43:cd:1b:
fa:7d:ce:18:34:e7:ac:db:7c:6a:14:2f:48:10:a3:
f6:fc:11:1d:d8:c8:5b:05:58:90:47:4c:c0:80:2a:
8e:1e:03:d9:fe:8f:3c:54:0d:14:64:39:6a:08:cc:
4b:8c:c4:cb:61:ef:0d:c9:71:ba:e6:58:b5:1a:e5:
a4:af:75:c6:38:fe:47:91:d9:8a:99:8c:9c:7d:7a:
03:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D8:57:C3:B9:43:ED:75:51:6F:97:C7:4D:AB:86:91:CF:93:89:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f0856be5-7bb1-3b04-a243-5b340ef25d29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.186.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:5e:44:37:d2:de:6b:5a:55:0c:32:43:0c:48:fc:c6:5a:da:
6e:02:13:0a:6f:3f:01:87:31:75:e4:dd:ff:41:7e:87:48:50:
49:f4:58:7d:df:67:2b:69:c7:50:93:3f:76:8e:c5:51:4f:ed:
d9:42:73:da:d8:27:75:b1:71:bc:8d:8d:5a:90:4f:7e:6c:57:
89:0a:7a:83:58:92:66:cd:75:11:12:ad:3b:f7:82:db:6c:03:
fa:98:77:ef:22:80:c1:64:d7:8c:50:d1:e5:fd:ee:8f:db:14:
df:9f:be:72:17:87:6c:24:29:ae:a1:28:bb:55:8a:3b:ff:1f:
ba:c3:5e:e7:35:b7:73:1d:05:3c:02:b5:bc:0e:00:18:29:a7:
01:61:49:fe:7c:bc:ec:a9:1c:dc:40:44:d2:b1:a1:46:30:b1:
71:56:6f:c2:80:3a:4a:c9:55:29:59:c0:b9:d1:2a:a7:cf:45:
89:1d:17:ec:47:62:5c:f0:aa:53:ee:25:c6:10:f8:8b:54:cc:
57:bc:49:51:b3:a7:39:56:f4:ae:cb:96:f4:5e:e6:51:c5:7b:
c8:00:60:2d:8c:40:4e:33:86:b9:b5:c9:c3:a2:06:2b:59:05:
c3:f3:9f:bc:61:a0:1d:0c:cf:fe:56:aa:2b:5b:31:13:6d:00:
0a:88:c0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:32:38 2025 by rpki-client