Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd2c7fbf-28b5-3b7f-9daa-b380803ccf88.roa
File: fd2c7fbf-28b5-3b7f-9daa-b380803ccf88.roa (raw, json)
Hash identifier: KvGg0UPnhlziWzkd4tT7skKVSkceZcvRKyIu8xA7WNk=
Subject key identifier: 57:82:DF:D0:8B:F2:F9:40:64:16:CF:2F:3B:DC:87:20:1E:07:6F:02
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1286E182542FFC50AE5080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd2c7fbf-28b5-3b7f-9daa-b380803ccf88.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 68.57.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:86:e1:82:54:2f:fc:50:ae:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=788be5af-a293-487c-b06f-b7dd26cd2635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:40:89:2b:e0:54:87:00:4a:f7:29:2a:c7:b4:
b3:e7:35:22:ef:6c:a2:63:df:96:5e:70:0d:d3:d6:
ad:a3:f0:3e:fe:19:48:ab:d6:c2:3c:f4:54:be:36:
1d:bc:23:62:e1:80:42:4b:e3:27:2d:d6:1b:1f:61:
62:49:c2:c6:d3:04:ff:28:66:39:ca:35:00:ba:87:
76:23:f2:cb:be:62:62:83:12:9c:98:5c:1c:f3:9d:
fb:8b:05:73:67:0b:02:26:30:24:a3:e4:08:40:bf:
55:84:94:d1:f0:5d:7f:c1:57:b2:19:85:3c:f8:b4:
3c:b9:04:87:20:76:13:57:e1:5f:ee:ba:2e:8b:0c:
8d:a7:93:79:16:3d:66:10:fb:23:f4:44:35:b6:ba:
ea:d2:14:d0:f3:c2:1a:8f:35:d4:74:86:3e:85:65:
9a:ac:bf:cd:46:a7:50:23:3f:3d:bf:f8:77:f5:df:
40:1e:a9:00:58:2a:1c:1c:9a:0c:ce:52:34:36:1f:
99:b7:e6:64:62:5b:3a:a8:a4:35:f0:eb:c2:33:64:
dc:b5:74:c6:c5:92:c6:68:fe:e6:08:6c:5f:ac:99:
19:36:3e:ce:33:8f:7c:dc:61:c0:ef:35:e7:d2:60:
f7:5b:17:2b:e3:da:b2:4f:f1:f5:88:73:21:ad:59:
b3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:82:DF:D0:8B:F2:F9:40:64:16:CF:2F:3B:DC:87:20:1E:07:6F:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd2c7fbf-28b5-3b7f-9daa-b380803ccf88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.57.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:cf:c8:6c:e9:a3:c9:83:77:52:ca:1c:76:b8:8f:56:f0:42:
b0:65:ca:77:b3:12:aa:1c:a1:1e:02:58:0b:89:be:0d:96:23:
79:88:92:37:1c:b1:18:8e:75:22:ea:4c:39:d4:43:09:73:55:
3c:50:6c:b3:3e:40:33:d5:14:9f:17:63:62:5a:66:6c:94:1d:
24:f3:70:a7:6c:0e:79:2d:13:2a:e8:19:c9:d0:96:2d:57:ae:
5c:70:a3:50:cd:f6:bb:c5:c4:f6:d0:c2:ed:09:72:bd:d0:c1:
a7:40:d0:44:23:d4:e1:88:29:36:43:0b:2d:05:d3:f0:48:10:
78:71:03:11:ef:af:93:c5:7c:97:c0:ed:a2:25:53:36:5f:00:
0c:b2:7b:60:0a:13:bf:d8:2d:36:62:0c:15:fa:44:09:04:65:
89:b9:30:09:60:a8:20:3e:8e:8f:c2:3d:db:e6:2d:5c:eb:5c:
4f:be:51:9e:0d:a5:56:f5:51:f5:cc:8e:c2:40:dc:e9:41:fa:
05:5c:22:62:97:52:ee:27:a4:86:36:98:13:33:03:21:62:67:
7d:8b:7b:1b:ba:0b:59:17:c6:8a:51:a2:b8:22:ef:5b:95:5c:
2d:7e:02:6c:23:56:4f:05:28:00:a8:5b:39:f9:8e:7c:6b:8e:
a7:76:58:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:52:48 2025 by rpki-client