Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f79d73d4-a87e-34f8-8a5e-f59bbefb26ea.roa
File: f79d73d4-a87e-34f8-8a5e-f59bbefb26ea.roa (raw, json)
Hash identifier: Ne1x54fBhAjHKZTrMGglLQTx45LToYEdaqCIZV2CI+A=
Subject key identifier: 7D:11:C5:00:E0:97:50:73:B2:12:77:1A:D5:9E:3C:0B:3C:3D:C6:8F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B4C6F945F046D1D332300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f79d73d4-a87e-34f8-8a5e-f59bbefb26ea.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 68.34.244.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:4c:6f:94:5f:04:6d:1d:33:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=ecc901c4-ac8f-419d-9b51-b91d4c525d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:00:76:90:8b:17:c6:9e:23:20:28:63:7d:30:
25:a3:aa:ce:c3:0b:33:97:50:b5:07:ad:c3:59:0c:
85:30:e4:f5:5d:11:12:2a:25:86:7d:a4:6c:de:2b:
9c:8d:2c:55:38:81:13:52:a8:65:76:9d:68:cb:ed:
7e:62:f5:09:1f:f8:71:5d:30:dc:df:f0:08:9b:ae:
42:1a:d5:bf:5b:fc:89:c6:8b:97:f3:2d:a9:be:9d:
12:a8:a7:06:34:07:e0:f5:bb:1d:c8:70:8f:80:36:
16:15:c4:e3:64:97:2a:30:57:92:3a:a8:24:0f:b1:
10:7b:f0:f3:cf:bd:3d:b8:ff:a7:13:42:16:61:21:
64:81:4d:e1:f0:29:2a:0b:ae:5b:8b:60:f3:de:96:
eb:aa:0a:61:89:5a:49:ea:c7:ef:ef:b8:98:38:09:
40:07:03:57:a9:b9:f1:47:18:91:e4:64:42:75:5e:
c7:3d:98:fe:7b:79:b0:5a:b9:1d:9d:5e:3d:f2:a6:
2c:54:db:0c:ea:22:cd:fc:2d:9d:b7:0d:b7:92:7c:
93:5f:34:ec:fb:25:e0:f2:ed:d9:75:20:07:92:b0:
ff:50:56:c9:1b:0a:9a:ce:ed:a5:ac:c6:11:f6:2d:
60:ae:93:45:2d:ae:8a:68:9d:21:35:62:00:6c:00:
ed:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:11:C5:00:E0:97:50:73:B2:12:77:1A:D5:9E:3C:0B:3C:3D:C6:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f79d73d4-a87e-34f8-8a5e-f59bbefb26ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.34.244.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:52:98:4a:a2:3c:ae:1f:81:ad:e9:93:bd:e7:2e:cf:ad:3b:
cc:a8:ad:6f:ce:bf:22:46:6f:75:f4:aa:7f:c3:18:09:23:40:
47:9c:17:b8:dd:5a:23:e3:5b:d3:63:74:7a:ca:c9:6b:ac:e9:
8e:46:91:4d:71:54:9d:f8:40:46:e8:95:12:6e:ac:c4:2c:5b:
9b:6a:ea:88:5b:a1:c8:1b:43:16:b7:ab:04:a8:18:7f:43:df:
95:ff:49:d4:e8:a1:95:02:e0:aa:ba:bb:74:1f:3f:6f:dd:71:
c5:14:bd:71:b9:9d:2f:4b:5c:d7:cb:bd:a4:5e:a6:d5:bb:ff:
6c:35:27:68:17:ac:79:a0:0a:ba:f4:48:3c:37:2c:02:3a:6d:
b3:e8:89:3f:79:c3:c7:00:50:b6:23:ba:8e:ac:b8:dc:80:d8:
61:b4:b3:65:e0:a4:bf:8f:fe:b0:4b:3c:b9:f4:50:f3:32:eb:
cc:76:4d:c3:1f:cd:c5:5c:55:2c:7d:58:e7:77:ed:13:37:29:
27:3b:a9:03:51:ec:39:35:6f:5e:46:d4:25:d0:27:9c:bf:c8:
16:3f:3b:2c:99:a7:17:1a:2e:a0:6e:31:c8:61:3a:61:3a:15:
c6:0e:23:98:da:59:6f:4c:31:2b:1f:fb:7d:66:f9:54:e2:49:
0e:29:5e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:14:26 2025 by rpki-client