Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f22dc5cf-07ec-3a4e-8e07-da298ead65d4.roa
File: f22dc5cf-07ec-3a4e-8e07-da298ead65d4.roa (raw, json)
Hash identifier: 7fljOKRqS/1m9eJom2z5K++nS5DbGz82FMKXpUH3l/E=
Subject key identifier: 76:F6:2E:C5:D4:3E:1B:91:32:38:A8:4B:E5:B2:7C:2A:5C:93:52:45
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C127DF144B2D5B043455A5C
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f22dc5cf-07ec-3a4e-8e07-da298ead65d4.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 68.39.226.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:7d:f1:44:b2:d5:b0:43:45:5a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=40a028bb-f09c-4116-be08-7a3f89fc9c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fe:de:3a:39:3e:02:b9:a8:26:b3:4a:77:cb:
52:07:f4:8c:ca:20:30:e5:f2:0b:fe:eb:28:d8:38:
48:b0:3e:36:1b:fa:c2:2f:36:bb:6d:fc:ca:2f:0b:
42:5c:50:ac:32:b6:d8:bf:b4:a9:89:c1:bb:37:bc:
08:20:db:f2:67:0c:d6:f3:01:e5:15:58:0c:74:9e:
fe:00:89:6e:67:4f:f3:db:5f:29:4f:b4:08:d9:8f:
9a:ef:b1:83:ac:6a:3f:6a:de:34:6e:ea:3f:00:e9:
01:ea:69:60:e4:3f:d4:8a:7f:b9:92:05:ad:2d:92:
47:51:a7:fd:6d:6c:6d:18:e3:95:9f:fc:6a:30:a8:
a5:bb:4c:a9:54:79:67:67:69:47:a7:f3:63:13:fb:
2b:b4:a4:46:0f:92:9f:ba:3f:6d:6a:59:82:cd:49:
7c:3e:68:81:d9:d2:f3:93:10:63:32:f0:dd:a2:06:
db:a3:7b:41:8b:bc:85:ff:df:c4:e4:fc:57:2e:39:
cc:30:ec:bf:fd:7b:d2:c5:5a:b3:9d:ec:d3:22:91:
77:1b:27:0d:87:2d:5d:65:80:8b:80:8a:1c:f5:0a:
60:1c:1a:9a:9e:ac:19:1d:c7:5b:8a:75:ce:17:8c:
9d:7b:09:f4:ba:81:1c:c6:8e:3a:e5:ef:18:be:76:
06:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F6:2E:C5:D4:3E:1B:91:32:38:A8:4B:E5:B2:7C:2A:5C:93:52:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f22dc5cf-07ec-3a4e-8e07-da298ead65d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.39.226.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:8c:03:dc:92:91:89:c4:a1:2b:8b:90:17:15:f6:5f:61:15:
7b:b3:a0:3b:d0:31:ed:b5:8f:46:7a:94:54:e4:2e:82:63:54:
3a:ae:85:fa:a2:4b:bc:dd:8d:69:b5:fc:a8:91:a2:0d:fe:fd:
32:95:d8:64:8b:fa:85:f9:75:c7:b7:07:55:f6:26:54:d8:2b:
d0:b2:25:09:1f:6b:8d:94:24:b3:fb:7e:10:1c:b5:bc:1b:99:
f8:c5:5f:24:b0:cd:95:91:9d:92:3e:f1:f3:5c:88:98:0b:7a:
fd:2e:c3:f0:3e:18:21:3c:e2:f1:7a:6a:2f:4a:66:f5:8a:e9:
9d:4d:ea:87:b3:0b:08:4b:0f:a7:fc:7e:83:44:72:4d:93:8e:
19:0b:a0:59:48:b0:f2:96:69:28:3e:95:43:2f:c3:77:da:9d:
95:6a:93:06:60:f8:51:9d:61:63:83:dd:78:45:0b:3f:51:63:
55:10:fd:bf:43:a5:f8:e3:14:0a:1b:79:f1:a2:57:f7:52:eb:
cd:bf:7e:58:e1:62:7a:10:ec:d2:a8:51:f5:3d:71:8d:55:bd:
b4:d7:d4:26:61:d3:11:e5:e4:38:4c:37:a3:3a:37:0a:66:1e:
2f:cb:c3:76:d4:d1:a8:27:79:8f:be:ce:51:30:69:86:f3:5c:
ea:d5:2a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:55:12 2025 by rpki-client